Tasks

Posts to the tasks api create new tasks in Spinnaker.

Path: tasks
Method: Post
Package: spinnaker.http.authz

The following rego function can be leveraged in any task to determine what task type is being created:

    createsTaskOfType(tasktype){
        input.method="POST"
        input.path=["tasks"]
        input.body.job[_].type=tasktype
    }

Keys

Key	Type	Description
`input.body`	`object`	The contents of this field will depend on the task type. It corresponds to the payload body being posted to the spinnaker API for that task. If your policy needs to conditionally enable/disable a task based off a property being configured by that task, the value you need will likely be in this object.
`input.method`	`string`	The HTTP method by which the API is being called. When createing a task this is ‘POST’.
`input.path[]`	`string`	The API path of the job. When creating a new task this is the array `["tasks"]`.

input.user

This object provides information about the user performing the action. This can be used to restrict actions by role. See input.user for more information.

Task Types

Task Type: createApplication

A policy call is made for this type anytime a user attmpts to create a new application.

Task Type: deleteManifest

Policy controls whether or not a deleteManifest that is triggered from outside a spinnaker pipeline (e.g. from the ‘Clusters’ tab of an application) can run.

Task Type: deployManifest

Policy controls whether or not a deployManifest that is triggered from outside a spinnaker pipeline (e.g. from the ‘Clusters’ tab of an application’s ’edit’ action) can run.

Task Type: scaleManifest

Policy controls whether or not a scaleManifest that is triggered from outside a spinnaker pipeline (e.g. from the ‘Clusters’ tab of an application’s ‘edit’ action) can run.

Task Type: undoRolloutManifest

Policy controls whether or not a rollback that is triggered from outside a spinnaker pipeline (e.g. from the ‘Clusters’ tab of an application) can run.

Task Type: updateApplication

A policy call is made for this type anytime a user attmpts to edit an existing application.

Task Type: upsertProject

A policy call is made for this type anytime a user attmpts to create a new project or edit an existing one.

Feedback

Was this page helpful?

Thank you for letting us know!

Sorry to hear that. Please tell us how we can improve.

Last modified August 18, 2023: (02b163b7)