Authors the per-NHI rotation policy.

PUT

/v1/m/governance/nhi/{ref}/policy

curl --request PUT \
  --url https://example.com/v1/m/governance/nhi/example/policy \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "criticality": "example", "max_age_seconds": 1, "rotated_at": "example", "rotation_target": "example" }'

• this engine

Authors the per-NHI rotation policy. Write-tier, self-audited.

Authorizations

• bearerAuth

Parameters

Path Parameters

ref

required

string

Path parameter ref.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

Any of:

object

object

criticality

Any of:

string

Case-insensitive after trimming: low, medium, high, or critical; empty leaves the stored value unchanged.

string

null

null

max_age_seconds

Any of:

integer

A value above zero updates the policy; zero leaves it unchanged.

integer format: int64

<= 31536000

null

null

rotated_at

Any of:

string

When non-blank, must parse as an RFC3339 timestamp; empty leaves it unchanged.

string

null

null

rotation_target

Any of:

string

When non-blank, a credential-free actuator target capped at 128 bytes; empty leaves it unchanged.

string

null

null

null

null

Example ^generated

{
  "criticality": "example",
  "max_age_seconds": 1,
  "rotated_at": "example",
  "rotation_target": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}