Egress network policies

Create an organization egress network policy

Create a custom egress network policy for an organization. Requires admin or owner role.

POST
/v1/orgs/{org}/egress-network-policies

Create a custom egress network policy for an organization. Requires admin or owner role.

AuthorizationBearer <token>

API key starting with tektona_. Create one at app-dev.tektona.ai under API Keys.

In: header

Path Parameters

org*string

Organization name

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

allowed_cidrs?array<string>|

CIDR ranges to allow

allowed_domains*array<string>|

Domain patterns to allow (e.g. github.com, *.npmjs.org)

denied_cidrs?array<string>|

CIDR ranges to block. A resolved IP in a denied range is blocked even when its domain is allowed (e.g. 169.254.0.0/16)

denied_domains?array<string>|

Domain patterns to block. Takes precedence over allowed_domains (e.g. evil.example.com, *.tracker.net)

display_name?string

Human-readable name

Lengthlength <= 128
extends?string

System policy to extend (e.g. tektona/dev)

name*string

Policy name (lowercase, alphanumeric, hyphens)

Length1 <= length <= 63

Response Body

application/json

application/problem+json

curl -X POST "https://api-dev.tektona.ai/v1/orgs/string/egress-network-policies" \  -H "Content-Type: application/json" \  -d '{    "allowed_domains": [      "string"    ],    "name": "string"  }'
{  "$schema": "https://api-dev.tektona.ai/schemas/PolicyResponse.json",  "allowed_cidrs": [    "string"  ],  "allowed_domains": [    "string"  ],  "denied_cidrs": [    "string"  ],  "denied_domains": [    "string"  ],  "description": "string",  "display_name": "string",  "display_reference": "string",  "extends": "string",  "name": "string",  "reference": "string"}