restapi

Nov 4, 2026

Changes in this version

type CheckoutRequest

+ PriceID string

type EnabledProviderDetail

+ BoundProvider *providers.ProviderDTO

+ ExportCluster string

+ ExportName string

+ Ready bool

+ Unavailable string

type ProviderLookup

+ BoundCopy func(org, name, exportPath, exportName, exportCluster string) (providers.Provider, bool)

Nov 2, 2026

Changes in this version

+ type HostingEdgeView struct

+ Name string

+ Workspace string

+ WorkspaceDisplayName string

type Manager

+ func (m *Manager) WithProviderInstaller(installer OrgProviderInstaller) *Manager

+ type OrgProviderInstaller interface

+ Authorize func(context.Context, string, string, string, string) error

+ PrepareDeleteWithUID func(context.Context, string, string, string) (string, error)

+ Start func(context.Context, string, string, *providerinstall.Plan, []byte, bool) (*providerinstall.Status, error)

+ Status func(context.Context, string, string, bool) (*providerinstall.Status, error)

+ Target func(context.Context, string, string) (*kcp.EdgeRoute, error)

type OrgProviderView

+ Deleting bool

+ HostingEdge *HostingEdgeView

Nov 1, 2026

Changes in this version

+ type BillingOps interface

+ Checkout func(ctx context.Context, org, plan, successURL, cancelURL string) (string, error)

+ Portal func(ctx context.Context, org, returnURL string) (string, error)

+ Summary func(ctx context.Context, org string) (metering.OrgBilling, error)

+ type CheckoutRequest struct

+ Plan string

type Manager

+ func (m *Manager) WithBilling(ops BillingOps, hubExternalURL string) *Manager

+ func (m *Manager) WithOrgPlanSource(fn func(ctx context.Context, org string) (string, bool, error)) *Manager

+ func (m *Manager) WithWorkspaceObserver(fn func(ctx context.Context, orgUUID string)) *Manager

+ type SessionResponse struct

+ URL string

type WorkspaceOps

+ GetWorkspaceDeletionForced func(ctx context.Context, orgUUID, wsUUID string) (bool, error)

+ SetWorkspaceDeletionForced func(ctx context.Context, orgUUID, wsUUID string, at time.Time) error

type WorkspaceView

+ DeletionForced bool

Nov 1, 2026

Changes in this version

type Manager

+ func (m *Manager) OrgCaps() quota.Caps

+ func (m *Manager) WithFreePlan(plan string, installed func() bool) *Manager

+ func (m *Manager) WithOrgCaps(caps quota.Caps) *Manager

Oct 31, 2026

Changes in this version

+ type ConstOrgQuota int32

+ func (c ConstOrgQuota) Cap(context.Context, string) (int32, error)

type Manager

+ func (m *Manager) OrgQuota() OrgQuotaPolicy

+ func (m *Manager) WithOrgQuota(p OrgQuotaPolicy) *Manager

+ type OrgQuotaPolicy interface

+ Cap func(ctx context.Context, user string) (int32, error)

Oct 31, 2026

Changes in this version

type Manager

+ func (m *Manager) SoftDeleteGracePeriod() time.Duration

+ func (m *Manager) WithSoftDeleteGracePeriod(d time.Duration) *Manager

Oct 13, 2026

Changes in this version

+ type ClaimRef struct

+ Group string

+ Resource string

+ type ClaimState struct

+ Mismatch string

+ Pending []ClaimRef

+ Rejected []ClaimRef

type EnabledProviderDetail

+ Claims *ClaimState

Sep 26, 2026

Changes in this version

+ const PathIdentities

+ const PathIdentity

+ type AcceptedComposition struct

+ Group string

+ Provider string

+ Resource string

+ type CompositionState struct

+ Granted []AcceptedComposition

+ Implicit bool

+ Pending []AcceptedComposition

type EnableProviderRequest

+ AcceptedCompositions []AcceptedComposition

type EnableProviderResponse

+ Compositions []AcceptedComposition

type EnabledProviderDetail

+ Compositions *CompositionState

type Handler

+ func (h *Handler) RegisterAdmin(r *mux.Router)

+ type IdentityAttestor interface

+ Attest func(ctx context.Context, r *http.Request, provider string) (string, error)

+ type IdentityHandler struct

+ func NewIdentityHandler(service IdentityService, attestor IdentityAttestor, log logr.Logger) *IdentityHandler

+ func (h *IdentityHandler) Register(router *mux.Router)

+ type IdentityService interface

+ Ensure func(ctx context.Context, req identity.Request, ...) (*identity.Token, error)

+ List func(ctx context.Context, provider, clusterID string, owner *identity.Owner) ([]tenancyv1alpha1.ScopedIdentity, error)

+ ReleaseByName func(ctx context.Context, provider, name string) error

type OrgView

+ InitialWorkspacePending bool

+ type ReacceptClaimFailure struct

+ Binding string

+ Error string

+ Org string

+ Workspace string

+ type ReacceptClaimsResponse struct

+ Claims []ReacceptedClaim

+ Failed []ReacceptClaimFailure

+ Provider string

+ Unchanged int

+ Updated int

+ type ReacceptedClaim struct

+ Group string

+ Resource string

+ Verbs []string

type WorkspaceOps

+ ListProviderAPIBindingsForExport func(ctx context.Context, exportPath, exportName string) ([]kcp.ProviderBindingRef, error)

+ ReacceptProviderAPIBindingClaims func(ctx context.Context, ref kcp.ProviderBindingRef, exportPath, exportName string, ...) (bool, error)

Sep 16, 2026

Changes in this version

+ const UserSearchMaxResults

+ const UserSearchMinQuery

+ type SelfView struct

+ DisplayName string

+ Email string

+ RBACIdentity string

+ User string

+ type UserSuggestion struct

+ DisplayName string

+ Email string

+ MemberID string

+ User string

Sep 15, 2026

Changes in this version

+ type AcceptedClaim struct

+ Group string

+ Resource string

+ type AcceptedHubAccess struct

+ Capability string

+ Scope string

+ type CreateOrgRequest struct

+ CatalogEntryCreation string

+ DisplayName string

+ WorkspaceCreation string

+ type CreateWorkspaceRequest struct

+ DisplayName string

+ type EdgeInstallTargetView struct

+ AgentVersion string

+ Connected bool

+ Eligible bool

+ Name string

+ Phase string

+ Workspace string

+ WorkspaceDisplayName string

+ type EdgeTargetRef struct

+ Name string

+ Workspace string

+ type EnableProviderRequest struct

+ AcceptedClaims []AcceptedClaim

+ AcceptedHubAccess []AcceptedHubAccess

+ type EnableProviderResponse struct

+ BindingName string

+ HubAccess []AcceptedHubAccess

+ type EnabledProviderDetail struct

+ BindingName string

+ DeletionBlocked string

+ ExportPath string

+ HubAccess *HubAccessState

+ SelfHosted bool

+ StaleClaims []StaleClaim

+ Terminating bool

+ type Handler struct

+ func NewHandler(mgr *Manager) *Handler

+ func (h *Handler) RegisterTenantScoped(r *mux.Router)

+ func (h *Handler) RegisterUserOnly(r *mux.Router)

+ type HubAccessState struct

+ Granted []AcceptedHubAccess

+ Implicit bool

+ Pending []AcceptedHubAccess

+ type KubeconfigConfig struct

+ DevMode bool

+ HubExternalURL string

+ OIDCClientID string

+ OIDCIssuerURL string

+ type ListAppAccessGrantsResponse struct

+ Items []kcp.AppAccessGrant

+ type ListEdgeInstallTargetsResponse struct

+ Eligible bool

+ Items []EdgeInstallTargetView

+ Reason string

+ type ListEnabledProvidersResponse struct

+ BindingNamesByProvider map[string]string

+ BindingsByProvider map[string]EnabledProviderDetail

+ type ListResponse struct

+ Items []T

+ type Manager struct

+ func NewManager(client *railgridclient.Client, bootstrapper WorkspaceOps) *Manager

+ func (m *Manager) WithHubAccessGrants(store *hubaccess.Store, platformDefault bool) *Manager

+ func (m *Manager) WithKubeconfig(cfg KubeconfigConfig) *Manager

+ func (m *Manager) WithOrgProviders(ops OrgProviderOps, creds ProviderCredentialMinter) *Manager

+ func (m *Manager) WithProviderRegistry(p ProviderLookup) *Manager

+ type MembershipAddRequest struct

+ Invite bool

+ Role string

+ User string

+ type MembershipPatchRequest struct

+ Role string

+ type MembershipView struct

+ Email string

+ OrgDisplayName string

+ OrgUUID string

+ RBACIdentity string

+ Role string

+ User string

+ UserDisplayName string

+ WorkspaceDisplayName string

+ WorkspaceUUID string

+ type OrgProviderOps interface

+ DeleteOrgProviderWorkspace func(ctx context.Context, orgUUID, name string) error

+ EnsureOrgProviderWorkspace func(ctx context.Context, orgUUID, name string) (string, error)

+ GetEdgeInstallTarget func(ctx context.Context, orgUUID, wsUUID, name string) (*kcp.EdgeInstallTarget, error)

+ GetOrgProviderWorkspace func(ctx context.Context, orgUUID, name string) (*kcp.OrgProviderWorkspace, error)

+ ListEdgeInstallTargets func(ctx context.Context, orgUUID string) ([]kcp.EdgeInstallTarget, error)

+ ListOrgProviderWorkspaces func(ctx context.Context, orgUUID string) ([]kcp.OrgProviderWorkspace, error)

+ RecordProviderEdgeBinding func(ctx context.Context, orgUUID, providerName, wsUUID, edgeName string) error

+ type OrgProviderView struct

+ APIExportName string

+ AvailableVersion string

+ ClusterName string

+ Description string

+ DisplayName string

+ InstalledVersion string

+ Name string

+ Phase string

+ Ready bool

+ Registered bool

+ UpgradeAvailable bool

+ Version string

+ WorkspacePath string

+ type OrgView struct

+ CatalogEntryCreation string

+ CreatedAt time.Time

+ DeletionRequestedAt *time.Time

+ DisplayName string

+ Personal bool

+ Role string

+ UUID string

+ WorkspaceCreation string

+ WorkspaceQuota int32

+ type PatchOrgRequest struct

+ CatalogEntryCreation string

+ DisplayName string

+ WorkspaceCreation string

+ WorkspaceQuota *int32

+ type PatchWorkspaceRequest struct

+ DisplayName string

+ type ProviderCredentialMinter interface

+ EnsureProviderSAAtPath func(ctx context.Context, workspacePath string) error

+ MintProviderKubeconfigAtPath func(ctx context.Context, workspacePath, hubExternalURL string) ([]byte, error)

+ RotateProviderCredentialAtPath func(ctx context.Context, workspacePath, providerName, hubExternalURL string) (*providers.RotatedCredential, error)

+ type ProviderLookup interface

+ Get func(name string) (providers.Provider, bool)

+ GetForOrg func(orgUUID, name string) (providers.Provider, bool)

+ ListForOrg func(orgUUID string) []providers.Provider

+ type RegisterOrgProviderRequest struct

+ Edge *EdgeTargetRef

+ Name string

+ SourceProvider string

+ type RegisterOrgProviderResponse struct

+ Instructions *providers.InstallInstructions

+ Kubeconfig string

+ Provider OrgProviderView

+ type RotateOrgProviderCredentialResponse struct

+ Instructions *providers.InstallInstructions

+ Kubeconfig string

+ PreviousValidUntil string

+ Provider OrgProviderView

+ RotatedAt string

+ type StaleClaim struct

+ BoundExportPath string

+ BoundIdentity string

+ ClaimedIdentity string

+ Group string

+ Repointable bool

+ Resource string

+ type ValidationError struct

+ Msg string

+ func (e *ValidationError) Error() string

+ type WorkspaceOps interface

+ ClearWorkspaceDeletionAnnotation func(ctx context.Context, orgUUID, wsUUID string) error

+ CreateMCPServer func(ctx context.Context, clusterName, name, displayName, instructions string, ...) error

+ DeleteMCPServer func(ctx context.Context, clusterName, name string) error

+ DeleteOrgMembership func(ctx context.Context, orgUUID, userName string) error

+ DeleteProviderAPIBinding func(ctx context.Context, orgUUID, wsUUID, bindingName string) error

+ EnsureChildWorkspace func(ctx context.Context, orgUUID, wsUUID string) error

+ EnsureChildWorkspaceAdmin func(ctx context.Context, orgUUID, wsUUID, rbacIdentity string) error

+ EnsureChildWorkspaceDefaultMCPServer func(ctx context.Context, orgUUID, wsUUID string) error

+ EnsureChildWorkspaceRailgridBinding func(ctx context.Context, orgUUID, wsUUID string) error

+ EnsureOrgMembership func(ctx context.Context, orgUUID, userName, role string) error

+ EnsureOrgWorkspace func(ctx context.Context, orgUUID string) error

+ EnsureProviderAPIBinding func(ctx context.Context, ...) error

+ EnsureProviderEdgeProxyGrant func(ctx context.Context, orgUUID, wsUUID, providerName, subject string) error

+ GetChildWorkspaceClusterName func(ctx context.Context, orgUUID, wsUUID string) (string, error)

+ GetMCPServerToken func(ctx context.Context, clusterName, name string) (string, error)

+ GetOrgMembershipRole func(ctx context.Context, orgUUID, userName string) (string, error)

+ GetWorkspaceDeletionRequestedAt func(ctx context.Context, orgUUID, wsUUID string) (*time.Time, bool, error)

+ GetWorkspaceDisplayName func(ctx context.Context, orgUUID, wsUUID string) (string, error)

+ ListAppAccessGrants func(ctx context.Context, orgUUID, wsUUID string) ([]kcp.AppAccessGrant, error)

+ ListChildTeamWorkspaces func(ctx context.Context, orgUUID string) ([]string, error)

+ ListMCPServers func(ctx context.Context, clusterName string) ([]kcp.MCPServerInfo, error)

+ ListOrgMembershipRoles func(ctx context.Context, orgUUID string) (map[string]string, error)

+ ListOrgMemberships func(ctx context.Context, orgUUID string) ([]string, error)

+ ListProviderAPIBindings func(ctx context.Context, orgUUID, wsUUID string) (map[string]kcp.ProviderBinding, error)

+ PatchOrgMembershipRole func(ctx context.Context, orgUUID, userName, role string) error

+ RemoveAppAccessGrant func(ctx context.Context, orgUUID, wsUUID, bindingName string) error

+ RemoveProviderEdgeProxyGrant func(ctx context.Context, orgUUID, wsUUID, providerName string) error

+ RevokeChildWorkspaceAdmin func(ctx context.Context, orgUUID, wsUUID, rbacIdentity string) error

+ SetWorkspaceDeletionAnnotation func(ctx context.Context, orgUUID, wsUUID string, at time.Time) error

+ SetWorkspaceDisplayName func(ctx context.Context, orgUUID, wsUUID, displayName string) error

+ StaleClaimIdentities func(ctx context.Context, orgUUID, wsUUID string) (map[string][]kcp.ClaimIdentityMismatch, error)

+ UpdateMCPServer func(ctx context.Context, clusterName, name, displayName, instructions string, ...) error

+ type WorkspaceView struct

+ ClusterName string

+ DeletionRequestedAt *time.Time

+ DisplayName string

+ OrgUUID string

+ Role string

+ UUID string