curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/approvals \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/approvals"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/approvals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/approvals",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/approvals"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/approvals")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/approvals")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
Listar Aprovações
Retorna a lista de solicitações de aprovação pendentes e históricas
curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/approvals \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/approvals"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/approvals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/approvals",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/approvals"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/approvals")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/approvals")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
Pending, Approved, Rejected, ExpiredApprovalRequest projetado em um formato plano:
| Campo | Origem |
|---|---|
name | approval-<plano de remediação> para aprovações de remediação (chaos-<experimento> para chaos experiments) |
resource | Nome do Issue ao qual a aprovação se refere (spec.issueRef.name) — apesar do nome do campo, não é um workload |
action | Tipo da primeira ação solicitada (spec.requestedActions[0].type) |
reason | A política que exigiu a aprovação (spec.policyRef): o nome de uma ApprovalPolicy, ou decision-engine / cluster-tier para pedidos criados pelo próprio operator |
requestedBy | spec.requester (chatcli-operator para pedidos que o operator cria) |
state | Pending, Approved, Rejected ou Expired; status vazio é reportado como Pending |
approvedBy, rejectedBy, decisionReason | Derivados de status.decisions: quem aprovou ou rejeitou (separados por vírgula) e o motivo da decisão |
decidedAt | status.approvedAt, rejectedAt ou expiredAt, quando o pedido termina |
requiredApprovers | spec.requiredApprovers: aprovadores distintos que uma regra quorum exige |
decisions | status.decisions[]: approver, decision (approved/rejected), reason, timestamp. Um aprovador via REST ou dashboard aparece como <nome> (api-key: <identidade>) (veja Aprovar Solicitação) |
labels, annotations | Os labels e as annotations da ApprovalRequest. A previsão de blast radius fica nas annotations platform.chatcli.io/blast-radius e platform.chatcli.io/blast-risk-level (o badge de blast radius do dashboard lê essas annotations) |
kubectl get approvalrequest <name> -o yaml.
{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
Autorizações
API key sent in the X-API-Key header. Keys are read from the Secret chatcli-operator-secrets, key api-keys (fallback: ConfigMap chatcli-operator-config, key api-keys) in the operator namespace, as a YAML list of {key, role, name, description} (name is the identity recorded on approval decisions); the operator chart creates it only with apiKeys.create: true. Roles: viewer < operator < admin — any other role string is denied everywhere. Changes are picked up within about 30 seconds; deleting both the Secret and the ConfigMap revokes every key. With no keys configured every /api/ call returns 401, unless CHATCLI_OPERATOR_DEV_MODE=true, which grants admin without a key (development only).
Parâmetros de consulta
Kubernetes namespace. Empty means all namespaces.
Exact match on the reported state.
Pending, Approved, Rejected, Expired Page number (1-based). Invalid values fall back to 1.
x >= 1Items per page. Values above 100 are capped at 100.
1 <= x <= 100