governance module route (requires governance:breakglass:write)

POST

/v1/m/governance/breakglass/consume

curl --request POST \
  --url https://example.com/v1/m/governance/breakglass/consume \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "action": "example", "subject_kind": "example", "subject_ref": "example" }'

• this engine

Consumes one break-glass grant for a named action and subject; both ride the immutable use trail.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

action

required

Trimmed, credential-free, and capped at 128 bytes.

string

/.*\S.*/

subject_kind

Any of:

string

Trimmed, credential-free, and capped at 128 bytes.

string

null

null

subject_ref

Any of:

string

Credential-free and capped at 4096 bytes.

string

null

null

Example ^generated

{
  "action": "example",
  "subject_kind": "example",
  "subject_ref": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}