@opensoha/contracts 0.1.25 → 0.1.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (200) hide show
  1. package/COMPATIBILITY.md +34 -0
  2. package/README.md +1 -1
  3. package/agent/environment/export.go +1 -0
  4. package/agent/environment/protocol_test.go +1 -1
  5. package/agent/guest/protocol_test.go +2 -2
  6. package/auth/catalog_generated.go +2 -2
  7. package/auth/permission-catalog.json +481 -1
  8. package/compat/json-schema-ecosystem-0.1.0.json +1 -1
  9. package/compat/openapi-loose-boundaries-0.1.0.json +1 -1
  10. package/delivery/document.schema.json +127 -9
  11. package/endpointcontrol/decode.go +64 -0
  12. package/endpointcontrol/models.go +138 -0
  13. package/endpointcontrol/models_test.go +51 -0
  14. package/endpointcontrol/protocol.schema.json +397 -0
  15. package/examples/relations_compat_test.go +18 -0
  16. package/fixtures/json-schema/endpoint-controls/invalid/controls.json +16 -0
  17. package/fixtures/json-schema/endpoint-controls/invalid/missing-channel-decision.json +15 -0
  18. package/fixtures/json-schema/endpoint-controls/invalid/receipt-content.json +36 -0
  19. package/fixtures/json-schema/endpoint-controls/valid/controls.json +16 -0
  20. package/fixtures/json-schema/endpoint-controls/valid/receipt.json +35 -0
  21. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-activate-bad-fingerprint.json +14 -0
  22. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-gateway-request.json +14 -0
  23. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-private-key-request.json +15 -0
  24. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-profile-without-eap-credential.json +22 -0
  25. package/fixtures/json-schema/network-runtime-protocol/invalid/endpoint-dns-observation.json +25 -0
  26. package/fixtures/json-schema/network-runtime-protocol/invalid/gateway-presence.json +22 -0
  27. package/fixtures/json-schema/network-runtime-protocol/invalid/mihomo-protection-zero-version.json +45 -0
  28. package/fixtures/json-schema/network-runtime-protocol/invalid/presence-raw-key.json +23 -0
  29. package/fixtures/json-schema/network-runtime-protocol/invalid/presence-zero-sequence.json +22 -0
  30. package/fixtures/json-schema/network-runtime-protocol/invalid/workload-wide-vpn.json +17 -0
  31. package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-activate.json +14 -0
  32. package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-request.json +14 -0
  33. package/fixtures/json-schema/network-runtime-protocol/valid/eap-profile-enrollment.json +24 -0
  34. package/fixtures/json-schema/network-runtime-protocol/valid/endpoint-presence.json +22 -0
  35. package/fixtures/json-schema/network-runtime-protocol/valid/ipv6-configuration.json +102 -0
  36. package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-protected-policy.json +45 -0
  37. package/fixtures/json-schema/network-runtime-protocol/valid/site-dns-ipv6.json +25 -0
  38. package/fixtures/json-schema/network-runtime-protocol/valid/workload-direct-ztna.json +20 -0
  39. package/fixtures/openapi/DLPShadowDecision/invalid/step-up-type.json +14 -0
  40. package/fixtures/openapi/DLPShadowDecision/valid/archive-v2.json +14 -0
  41. package/fixtures/openapi/DLPShadowDecision/valid/step-up.json +14 -0
  42. package/fixtures/openapi/DLPShadowInput/invalid/self-reported-result.json +7 -0
  43. package/fixtures/openapi/DLPShadowInput/invalid/too-many-samples.json +14 -0
  44. package/fixtures/openapi/DLPShadowInput/valid/bounded.json +7 -0
  45. package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-build-template.json +30 -0
  46. package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-deployment-template.json +30 -0
  47. package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-workflow-template.json +27 -0
  48. package/fixtures/openapi/DeliveryDocument/valid/migration-build-template.json +31 -0
  49. package/fixtures/openapi/DeliveryDocument/valid/migration-deployment-template.json +31 -0
  50. package/fixtures/openapi/DeliveryDocument/valid/migration-workflow-template.json +28 -0
  51. package/fixtures/openapi/DeliveryPlanInput/invalid/manual-plan.json +7 -0
  52. package/fixtures/openapi/DeliveryPlanInput/valid/manual-plan.json +6 -0
  53. package/fixtures/openapi/DeliveryTargetInput/invalid/candidate-on-runtime-deploy.json +9 -0
  54. package/fixtures/openapi/DeliveryTargetInput/invalid/config-update-missing-service.json +7 -0
  55. package/fixtures/openapi/DeliveryTargetInput/valid/template-configuration-only.json +8 -0
  56. package/fixtures/openapi/DeliveryTargetInput/valid/template-configuration-without-runtime-environment.json +1 -0
  57. package/fixtures/openapi/DockerVolumeDLPAppealInput/invalid/p4-response.json +3 -0
  58. package/fixtures/openapi/DockerVolumeDLPAppealInput/valid/p4-response.json +3 -0
  59. package/fixtures/openapi/DockerVolumeDLPAppealReviewInput/invalid/p4-response.json +5 -0
  60. package/fixtures/openapi/DockerVolumeDLPAppealReviewInput/valid/p4-response.json +5 -0
  61. package/fixtures/openapi/DockerVolumeDLPAuthorizationInput/invalid/p4-response.json +3 -0
  62. package/fixtures/openapi/DockerVolumeDLPAuthorizationInput/valid/p4-response.json +3 -0
  63. package/fixtures/openapi/DockerVolumeDLPContent/invalid/archive-unsupported-channel.json +9 -0
  64. package/fixtures/openapi/DockerVolumeDLPContent/invalid/p4.json +6 -0
  65. package/fixtures/openapi/DockerVolumeDLPContent/invalid/step-up-audit.json +9 -0
  66. package/fixtures/openapi/DockerVolumeDLPContent/invalid/unavailable-engine.json +9 -0
  67. package/fixtures/openapi/DockerVolumeDLPContent/invalid/unknown-data-level.json +12 -0
  68. package/fixtures/openapi/DockerVolumeDLPContent/valid/classified-rule.json +16 -0
  69. package/fixtures/openapi/DockerVolumeDLPContent/valid/p4.json +8 -0
  70. package/fixtures/openapi/DockerVolumeDLPContent/valid/step-up.json +9 -0
  71. package/fixtures/openapi/DockerVolumeDLPDecision/invalid/p4.json +9 -0
  72. package/fixtures/openapi/DockerVolumeDLPDecision/invalid/step-up-type.json +12 -0
  73. package/fixtures/openapi/DockerVolumeDLPDecision/valid/archive-v2.json +12 -0
  74. package/fixtures/openapi/DockerVolumeDLPDecision/valid/p4.json +11 -0
  75. package/fixtures/openapi/DockerVolumeDLPDecision/valid/step-up.json +12 -0
  76. package/fixtures/openapi/DockerVolumeDLPSaveInput/invalid/p4.json +11 -0
  77. package/fixtures/openapi/DockerVolumeDLPSaveInput/valid/p4.json +11 -0
  78. package/fixtures/openapi/DockerVolumeFileReadInput/invalid/p4-response.json +5 -0
  79. package/fixtures/openapi/DockerVolumeFileReadInput/valid/p4-response.json +4 -0
  80. package/fixtures/openapi/EndpointDeviceInput/invalid/reported-management.json +5 -0
  81. package/fixtures/openapi/EndpointDeviceInput/valid/management-state.json +5 -0
  82. package/fixtures/openapi/EndpointDeviceRegistrationInput/invalid/self-promote-management.json +5 -0
  83. package/fixtures/openapi/KubernetesImportCandidateListEnvelope/invalid/source-with-spec.json +33 -0
  84. package/fixtures/openapi/KubernetesImportCandidateListEnvelope/invalid/source-without-uid.json +29 -0
  85. package/fixtures/openapi/KubernetesImportCandidateListEnvelope/valid/stable-source.json +30 -0
  86. package/fixtures/openapi/KubernetesPod/invalid/pod-uid.json +9 -0
  87. package/fixtures/openapi/KubernetesPod/valid/pod-uid.json +9 -0
  88. package/fixtures/openapi/KubernetesPodDetail/invalid/pod-uid.json +6 -0
  89. package/fixtures/openapi/KubernetesPodDetail/valid/pod-uid.json +6 -0
  90. package/fixtures/openapi/KubernetesServiceImportRequest/invalid/empty-source-uid.json +48 -0
  91. package/fixtures/openapi/KubernetesServiceImportRequest/valid/pinned-workloads-and-cr.json +48 -0
  92. package/fixtures/openapi/ManagedContentPasteInput/invalid/boundary.json +5 -0
  93. package/fixtures/openapi/ManagedContentPasteInput/valid/boundary.json +6 -0
  94. package/fixtures/openapi/ManagedContentPolicy/invalid/self-reported-allow.json +8 -0
  95. package/fixtures/openapi/ManagedContentPolicy/invalid/step-up-audit.json +8 -0
  96. package/fixtures/openapi/ManagedContentPolicy/invalid/unknown-extractor.json +8 -0
  97. package/fixtures/openapi/ManagedContentPolicy/valid/archive-v2.json +8 -0
  98. package/fixtures/openapi/ManagedContentPolicy/valid/network-and-level.json +10 -0
  99. package/fixtures/openapi/ManagedContentPolicy/valid/step-up.json +8 -0
  100. package/fixtures/openapi/ManagedContentReviewInput/invalid/boundary.json +5 -0
  101. package/fixtures/openapi/ManagedContentReviewInput/valid/boundary.json +5 -0
  102. package/fixtures/openapi/ManagedContentSaveInput/invalid/boundary.json +14 -0
  103. package/fixtures/openapi/ManagedContentSaveInput/valid/boundary.json +16 -0
  104. package/fixtures/openapi/ManagedContentUploadInput/invalid/boundary.json +7 -0
  105. package/fixtures/openapi/ManagedContentUploadInput/valid/boundary.json +6 -0
  106. package/fixtures/openapi/ManifestExecutionTaskPayload/invalid/initialization.json +7 -0
  107. package/fixtures/openapi/ManifestExecutionTaskPayload/valid/initialization.json +7 -0
  108. package/fixtures/openapi/ManifestRootResource/invalid/root.json +1 -0
  109. package/fixtures/openapi/ManifestRootResource/valid/root.json +1 -0
  110. package/fixtures/openapi/NetworkAccessPolicyInput/invalid/unknown-management-state.json +35 -0
  111. package/fixtures/openapi/NetworkAccessPolicyInput/valid/managed-device.json +35 -0
  112. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/deviceId-characters.json +4 -0
  113. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/nasBindingId-characters.json +4 -0
  114. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/subject-override.json +1 -0
  115. package/fixtures/openapi/NetworkAdmissionPreviewRequest/valid/device-nas.json +1 -0
  116. package/fixtures/openapi/NetworkAdmissionPreviewResult/invalid/missing-attributeVersion.json +13 -0
  117. package/fixtures/openapi/NetworkAdmissionPreviewResult/invalid/missing-evaluatedAt.json +13 -0
  118. package/fixtures/openapi/NetworkAdmissionPreviewResult/valid/versioned.json +14 -0
  119. package/fixtures/openapi/NetworkConflictAnalysisRequest/invalid/missing-runtime-ranges.json +1 -0
  120. package/fixtures/openapi/NetworkConflictAnalysisRequest/invalid/unknown-source-type.json +9 -0
  121. package/fixtures/openapi/NetworkConflictAnalysisRequest/valid/empty-runtime-ranges.json +3 -0
  122. package/fixtures/openapi/NetworkConflictAnalysisRequest/{invalid → valid}/ipv6-range.json +1 -1
  123. package/fixtures/openapi/NetworkEAPServerTrust/invalid/no-server-validation.json +5 -0
  124. package/fixtures/openapi/NetworkEAPServerTrust/valid/named-server.json +9 -0
  125. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/all-sites-implicit.json +45 -0
  126. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/unbounded-stages.json +54 -0
  127. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/zero-heartbeat.json +47 -0
  128. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/valid/staged-protection.json +47 -0
  129. package/fixtures/openapi/NetworkEndpointResponseRestoreInput/invalid/missing-reason.json +3 -0
  130. package/fixtures/openapi/NetworkEndpointResponseRestoreInput/valid/expected-current.json +4 -0
  131. package/fixtures/openapi/NetworkPolicyPreviewResult/invalid/attribute-version.json +1 -0
  132. package/fixtures/openapi/NetworkPolicyPreviewResult/valid/admission-version.json +1 -0
  133. package/fixtures/openapi/NetworkPolicySubjects/invalid/duplicate-role.json +1 -0
  134. package/fixtures/openapi/NetworkPolicySubjects/invalid/role-characters.json +5 -0
  135. package/fixtures/openapi/NetworkPolicySubjects/valid/role-bound.json +1 -0
  136. package/fixtures/openapi/NetworkProxyConfigurationInput/invalid/missing-content.json +1 -0
  137. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/bad-binding-id.json +9 -0
  138. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/empty-content.json +1 -0
  139. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/binding-only.json +11 -0
  140. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/clear-binding-disabled.json +5 -0
  141. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/enabled.json +1 -0
  142. package/fixtures/openapi/NetworkSiteInput/invalid/unknown-governance.json +6 -0
  143. package/fixtures/openapi/NetworkSiteInput/valid/restricted-unmanaged.json +6 -0
  144. package/fixtures/openapi/ResourceRelationConfig/invalid/executable-rule.json +17 -0
  145. package/fixtures/openapi/ResourceRelationConfig/valid/unknown-kind.json +13 -0
  146. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/migration-missing-guide-valid-yaml.json +38 -0
  147. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/migration-valid-yaml.json +39 -0
  148. package/fixtures/openapi/TemplateMigrationAssessment/invalid/initialization.json +9 -0
  149. package/fixtures/openapi/TemplateMigrationAssessment/valid/initialization.json +9 -0
  150. package/fixtures/openapi/TemplateMigrationPolicy/invalid/blank-guide.json +5 -0
  151. package/fixtures/openapi/TemplateMigrationPolicy/invalid/missing-guide.json +4 -0
  152. package/fixtures/openapi/TemplateMigrationPolicy/invalid/unknown-escape-hatch.json +6 -0
  153. package/fixtures/openapi/TemplateMigrationPolicy/valid/legacy-safe.json +4 -0
  154. package/fixtures/openapi/TemplateMigrationPolicy/valid/ordered-data-change.json +5 -0
  155. package/fixtures/openapi/TemplateUpdateBatchInput/invalid/duplicate-candidates.json +11 -0
  156. package/fixtures/openapi/TemplateUpdateBatchInput/invalid/empty-identities.json +10 -0
  157. package/fixtures/openapi/TemplateUpdateBatchInput/valid/staged-adoption.json +10 -0
  158. package/fixtures/openapi/TemplateUpdatePolicyInput/invalid/unknown-mode.json +8 -0
  159. package/fixtures/openapi/TemplateUpdatePolicyInput/valid/explicit-automatic.json +8 -0
  160. package/fixtures/openapi/TemplateUpdatePreviewInput/invalid/empty-identities.json +10 -0
  161. package/fixtures/openapi/TemplateUpdatePreviewInput/invalid/empty-targets.json +6 -0
  162. package/fixtures/openapi/TemplateUpdatePreviewInput/valid/cross-version-manual.json +14 -0
  163. package/gen/go/sohaapi/client.go +1 -1
  164. package/gen/go/sohaapi/client_test.go +2 -2
  165. package/gen/go/sohaapi/import_source_compat_test.go +12 -0
  166. package/gen/go/sohaapi/proxy_configuration_test.go +38 -0
  167. package/gen/go/sohaapi/types.go +3760 -345
  168. package/gen/ts/sohaapi/index.ts +5573 -181
  169. package/go.mod +2 -2
  170. package/helmrelease/delivery.go +4 -1
  171. package/helmrelease/initialization.go +10 -0
  172. package/helmrelease/runtime/delivery.go +40 -10
  173. package/helmrelease/runtime/delivery_test.go +4 -0
  174. package/helmrelease/runtime/initialization.go +186 -0
  175. package/helmrelease/runtime/initialization_test.go +203 -0
  176. package/network/README.md +34 -0
  177. package/network/network-radius-accounting.schema.json +4 -1
  178. package/network/network-runtime-protocol.schema.json +2166 -317
  179. package/network/proxy-runtime.schema.json +482 -67
  180. package/openapi/network_control_test.go +64 -0
  181. package/openapi/soha-api.json +53524 -43459
  182. package/openapi/soha-api.yaml +26431 -20491
  183. package/openapi/spec_generated.go +3 -3
  184. package/openapi/spec_test.go +42 -0
  185. package/package.json +6 -3
  186. package/proxytransport/handler.go +271 -0
  187. package/proxytransport/probe.go +30 -0
  188. package/proxytransport/scope.go +89 -0
  189. package/proxytransport/transport_test.go +60 -0
  190. package/resource/models.go +2 -0
  191. package/resource/relations.go +225 -0
  192. package/resource/relations_test.go +47 -0
  193. package/resource/root_cr.go +38 -0
  194. package/resource/runtime/argocd_integration_test.go +1 -1
  195. package/resource/runtime/initialization.go +66 -0
  196. package/resource/runtime/initialization_test.go +80 -0
  197. package/resource/runtime/relations.go +161 -0
  198. package/resource/runtime/relations_test.go +100 -0
  199. package/resource/runtime/root_cr.go +79 -0
  200. package/resource/runtime/root_cr_test.go +118 -0
@@ -0,0 +1,9 @@
1
+ {
2
+ "id": "adopt1",
3
+ "applicationId": "retail",
4
+ "serviceId": "api",
5
+ "applicationEnvironmentId": "retail-test",
6
+ "action": "deploy",
7
+ "releaseBundleId": "bundle",
8
+ "templateCandidateId": "candidate-1"
9
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "id": "adopt1",
3
+ "applicationId": "retail",
4
+ "serviceId": "",
5
+ "applicationEnvironmentId": "retail-test",
6
+ "action": "config_update"
7
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "id": "adopt1",
3
+ "applicationId": "retail",
4
+ "serviceId": "",
5
+ "applicationEnvironmentId": "retail-test",
6
+ "action": "config_update",
7
+ "templateCandidateId": "candidate-1"
8
+ }
@@ -0,0 +1 @@
1
+ {"id":"adopt-build","applicationId":"retail","serviceId":"","action":"config_update","templateCandidateId":"candidate-1"}
@@ -0,0 +1,3 @@
1
+ {
2
+ "reasonCode": "secret-body"
3
+ }
@@ -0,0 +1,3 @@
1
+ {
2
+ "reasonCode": "false_positive"
3
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "resolution": "approved",
4
+ "reasonCode": "ignore"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 1,
3
+ "resolution": "approved",
4
+ "reasonCode": "confirmed_false_positive"
5
+ }
@@ -0,0 +1,3 @@
1
+ {
2
+ "action": "force_allow"
3
+ }
@@ -0,0 +1,3 @@
1
+ {
2
+ "action": "acknowledge"
3
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [],
8
+ "detectorVersion": "content-dlp-archive-v2"
9
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "allow",
4
+ "detectors": [],
5
+ "rules": []
6
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "mode": "audit",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true,
8
+ "enabled": true
9
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [],
8
+ "detectorVersion": "content-dlp-unavailable"
9
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [],
5
+ "rules": [
6
+ {
7
+ "id": "bad",
8
+ "expression": "x",
9
+ "dataLevel": "unknown"
10
+ }
11
+ ]
12
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [
8
+ {
9
+ "id": "internal",
10
+ "expression": "INTERNAL",
11
+ "dataLevel": "internal"
12
+ }
13
+ ],
14
+ "minimumDataLevel": "confidential",
15
+ "detectorVersion": "content-dlp-text-v1"
16
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": []
8
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "mode": "warn",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true,
8
+ "enabled": true
9
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "safe",
5
+ "allowed": true,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": []
9
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": "true"
12
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-archive-v2",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": true
12
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ]
11
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": true
12
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "expectedRevision": -1,
3
+ "draft": {
4
+ "enabled": true,
5
+ "mode": "block",
6
+ "detectors": [
7
+ "unknown"
8
+ ],
9
+ "rules": []
10
+ }
11
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "enabled": true,
5
+ "mode": "audit",
6
+ "detectors": [
7
+ "private_key"
8
+ ],
9
+ "rules": []
10
+ }
11
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "target": "/data",
3
+ "path": "/file.txt",
4
+ "authorization": "short"
5
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "target": "/data",
3
+ "path": "/file.txt"
4
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Laptop",
3
+ "status": "active",
4
+ "managementState": "self_attested"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Pilot laptop",
3
+ "status": "active",
4
+ "managementState": "managed"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Laptop",
3
+ "platform": "windows",
4
+ "managementState": "managed"
5
+ }
@@ -0,0 +1,33 @@
1
+ {
2
+ "items": [
3
+ {
4
+ "clusterId": "test",
5
+ "namespace": "middleware",
6
+ "workloadKind": "StatefulSet",
7
+ "workloadName": "database",
8
+ "desiredReplicas": 3,
9
+ "readyReplicas": 3,
10
+ "relatedResources": [],
11
+ "source": {
12
+ "resource": {
13
+ "clusterId": "test",
14
+ "apiVersion": "apps/v1",
15
+ "kind": "StatefulSet",
16
+ "namespace": "middleware",
17
+ "name": "database",
18
+ "scopeMode": "namespace",
19
+ "uid": "uid-1",
20
+ "resourceVersion": "42"
21
+ },
22
+ "specDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
23
+ "generation": 3,
24
+ "observedAt": "2026-10-21T08:00:00Z",
25
+ "owners": [],
26
+ "spec": {
27
+ "password": "must-not-be-in-contract"
28
+ }
29
+ }
30
+ }
31
+ ],
32
+ "truncated": false
33
+ }
@@ -0,0 +1,29 @@
1
+ {
2
+ "items": [
3
+ {
4
+ "clusterId": "test",
5
+ "namespace": "middleware",
6
+ "workloadKind": "StatefulSet",
7
+ "workloadName": "database",
8
+ "desiredReplicas": 3,
9
+ "readyReplicas": 3,
10
+ "relatedResources": [],
11
+ "source": {
12
+ "resource": {
13
+ "clusterId": "test",
14
+ "apiVersion": "apps/v1",
15
+ "kind": "StatefulSet",
16
+ "namespace": "middleware",
17
+ "name": "database",
18
+ "scopeMode": "namespace",
19
+ "resourceVersion": "42"
20
+ },
21
+ "specDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
22
+ "generation": 3,
23
+ "observedAt": "2026-10-21T08:00:00Z",
24
+ "owners": []
25
+ }
26
+ }
27
+ ],
28
+ "truncated": false
29
+ }
@@ -0,0 +1,30 @@
1
+ {
2
+ "items": [
3
+ {
4
+ "clusterId": "test",
5
+ "namespace": "middleware",
6
+ "workloadKind": "StatefulSet",
7
+ "workloadName": "database",
8
+ "desiredReplicas": 3,
9
+ "readyReplicas": 3,
10
+ "relatedResources": [],
11
+ "source": {
12
+ "resource": {
13
+ "clusterId": "test",
14
+ "apiVersion": "apps/v1",
15
+ "kind": "StatefulSet",
16
+ "namespace": "middleware",
17
+ "name": "database",
18
+ "scopeMode": "namespace",
19
+ "uid": "uid-1",
20
+ "resourceVersion": "42"
21
+ },
22
+ "specDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
23
+ "generation": 3,
24
+ "observedAt": "2026-10-21T08:00:00Z",
25
+ "owners": []
26
+ }
27
+ }
28
+ ],
29
+ "truncated": false
30
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "name": "api-0",
3
+ "namespace": "test",
4
+ "phase": "Running",
5
+ "restarts": 0,
6
+ "uid": "",
7
+ "readyContainers": "1/1",
8
+ "ageSeconds": 60
9
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "name": "api-0",
3
+ "namespace": "test",
4
+ "phase": "Running",
5
+ "restarts": 0,
6
+ "uid": "uid-original",
7
+ "readyContainers": "1/1",
8
+ "ageSeconds": 60
9
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "api-0",
3
+ "namespace": "test",
4
+ "phase": "Running",
5
+ "uid": ""
6
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "api-0",
3
+ "namespace": "test",
4
+ "phase": "Running",
5
+ "uid": "uid-original"
6
+ }
@@ -0,0 +1,48 @@
1
+ {
2
+ "clusterId": "cluster-prod",
3
+ "namespace": "payments",
4
+ "applicationKey": "payments",
5
+ "applicationName": "Payments",
6
+ "environmentKey": "prod",
7
+ "environmentName": "Production",
8
+ "ownershipMode": "observe_only",
9
+ "workloads": [
10
+ {
11
+ "workloadKind": "Deployment",
12
+ "workloadName": "deployment",
13
+ "expectedUid": "",
14
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
15
+ },
16
+ {
17
+ "workloadKind": "StatefulSet",
18
+ "workloadName": "statefulset",
19
+ "expectedUid": "uid-StatefulSet",
20
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
21
+ },
22
+ {
23
+ "workloadKind": "DaemonSet",
24
+ "workloadName": "daemonset",
25
+ "expectedUid": "uid-DaemonSet",
26
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
27
+ },
28
+ {
29
+ "workloadKind": "Job",
30
+ "workloadName": "job",
31
+ "expectedUid": "uid-Job",
32
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
33
+ },
34
+ {
35
+ "workloadKind": "CronJob",
36
+ "workloadName": "cronjob",
37
+ "expectedUid": "uid-CronJob",
38
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
39
+ },
40
+ {
41
+ "workloadKind": "CustomResource",
42
+ "workloadName": "customresource",
43
+ "expectedUid": "uid-CustomResource",
44
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
45
+ "crdName": "elasticsearches.elasticsearch.k8s.elastic.co"
46
+ }
47
+ ]
48
+ }
@@ -0,0 +1,48 @@
1
+ {
2
+ "clusterId": "cluster-prod",
3
+ "namespace": "payments",
4
+ "applicationKey": "payments",
5
+ "applicationName": "Payments",
6
+ "environmentKey": "prod",
7
+ "environmentName": "Production",
8
+ "ownershipMode": "observe_only",
9
+ "workloads": [
10
+ {
11
+ "workloadKind": "Deployment",
12
+ "workloadName": "deployment",
13
+ "expectedUid": "uid-Deployment",
14
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
15
+ },
16
+ {
17
+ "workloadKind": "StatefulSet",
18
+ "workloadName": "statefulset",
19
+ "expectedUid": "uid-StatefulSet",
20
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
21
+ },
22
+ {
23
+ "workloadKind": "DaemonSet",
24
+ "workloadName": "daemonset",
25
+ "expectedUid": "uid-DaemonSet",
26
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
27
+ },
28
+ {
29
+ "workloadKind": "Job",
30
+ "workloadName": "job",
31
+ "expectedUid": "uid-Job",
32
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
33
+ },
34
+ {
35
+ "workloadKind": "CronJob",
36
+ "workloadName": "cronjob",
37
+ "expectedUid": "uid-CronJob",
38
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
39
+ },
40
+ {
41
+ "workloadKind": "CustomResource",
42
+ "workloadName": "customresource",
43
+ "expectedUid": "uid-CustomResource",
44
+ "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
45
+ "crdName": "elasticsearches.elasticsearch.k8s.elastic.co"
46
+ }
47
+ ]
48
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "paste.txt"
5
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "paste.txt",
5
+ "text": "example"
6
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "allowed": true
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "audit",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "detectorVersion": "content-dlp-archive-v99"
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "detectorVersion": "content-dlp-archive-v2"
8
+ }
@@ -0,0 +1,10 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "minimumDataLevel": "restricted",
8
+ "detectorVersion": "content-dlp-text-v1",
9
+ "networkAction": "revoke_network"
10
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "warn",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true
8
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 1,
3
+ "resolution": "allow_forever",
4
+ "reasonCode": "business_exception"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 1,
3
+ "resolution": "reject",
4
+ "reasonCode": "insufficient_justification"
5
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "name": "missing explicit enabled",
5
+ "kind": "s3",
6
+ "policy": {
7
+ "mode": "block",
8
+ "detectors": [
9
+ "private_key"
10
+ ],
11
+ "rules": []
12
+ }
13
+ }
14
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "name": "Approved storage",
5
+ "kind": "s3",
6
+ "enabled": true,
7
+ "storageIntegrationId": "integration",
8
+ "policy": {
9
+ "mode": "block",
10
+ "detectors": [
11
+ "private_key"
12
+ ],
13
+ "rules": []
14
+ }
15
+ }
16
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "example.txt",
5
+ "contentBase64": "ZXhhbXBsZQ==",
6
+ "clean": true
7
+ }