Create an organization policy api token
Create a policy api token, intended for autonomous agents calling the Qovery API.
Unlike a regular api token, a policy api token carries no organization role. The Open Policy Agent (rego) policy attached to it is evaluated on every request and is the only thing constraining what the token can do: a policy that allows everything grants full organization admin access. For that reason only an organization owner or admin can create one.
The generated token value is returned only in this response and cannot be retrieved afterwards.
Authorizations
JWT tokens should be used with OIDC account (human to machine). JWT tokens used by the Qovery console to communicate with the API have a TTL. Curl Example ' curl https://console.qovery.com/organization -H "Authorization: Bearer $qovery_token" '
Path Parameters
Organization ID
Body
Open Policy Agent (rego) rule definitions, without a package declaration: Qovery prepends a per-token package so that one token's rules cannot authorize another's. The policy must define an allow rule, and the request is denied unless it evaluates to true.
Response
Organization policy api token created
the generated token to send in 'Authorization' header prefixed by 'Token '. It is returned only here and cannot be retrieved afterwards.