curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/approvals \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/approvals"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/approvals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/approvals",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/approvals"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/approvals")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/approvals")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
List Approvals
Returns the list of pending and historical approval requests
curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/approvals \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/approvals"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/approvals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/approvals",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/approvals"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/approvals")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/approvals")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
Pending, Approved, Rejected, ExpiredApprovalRequest custom resource projected into a flat shape:
| Field | Source |
|---|---|
name | approval-<remediation plan> for remediation approvals (chaos-<experiment> for chaos experiments) |
resource | Name of the Issue the approval is for (spec.issueRef.name) — despite the field name, not a workload |
action | Type of the first requested action (spec.requestedActions[0].type) |
reason | The policy that required the approval (spec.policyRef): an ApprovalPolicy name, or decision-engine / cluster-tier for requests raised by the operator itself |
requestedBy | spec.requester (chatcli-operator for requests the operator creates) |
state | Pending, Approved, Rejected or Expired; an empty status is reported as Pending |
approvedBy, rejectedBy, decisionReason | Derived from status.decisions: the approvers who approved or rejected (comma-separated) and the reason of the decision |
decidedAt | status.approvedAt, rejectedAt or expiredAt, once the request is finished |
requiredApprovers | spec.requiredApprovers: distinct approvers a quorum rule needs |
decisions | status.decisions[]: approver, decision (approved/rejected), reason, timestamp. A REST or dashboard approver reads <name> (api-key: <identity>) (see Approve Request) |
labels, annotations | The ApprovalRequest’s labels and annotations. The blast radius prediction is in the annotations platform.chatcli.io/blast-radius and platform.chatcli.io/blast-risk-level (the dashboard’s blast-radius badge reads them) |
kubectl get approvalrequest <name> -o yaml.
{
"apiVersion": "v1",
"kind": "ApprovalRequestList",
"metadata": {
"totalCount": 2,
"page": 1,
"pageSize": 20
},
"items": [
{
"name": "approval-payment-service-oom-kill-1773933600-plan-1",
"namespace": "production",
"resource": "payment-service-oom-kill-1773933600",
"action": "AdjustResources",
"reason": "production-changes",
"requestedBy": "chatcli-operator",
"state": "Pending",
"creationTimestamp": "2026-03-19T15:21:05Z",
"requiredApprovers": 1,
"labels": {
"platform.chatcli.io/issue": "payment-service-oom-kill-1773933600",
"platform.chatcli.io/policy": "production-changes",
"platform.chatcli.io/remediation-plan": "payment-service-oom-kill-1773933600-plan-1"
},
"annotations": {
"platform.chatcli.io/blast-risk-level": "medium"
}
},
{
"name": "approval-api-gateway-crashloop-backoff-1773930000-plan-1",
"namespace": "staging",
"resource": "api-gateway-crashloop-backoff-1773930000",
"action": "RollbackDeployment",
"reason": "decision-engine",
"requestedBy": "chatcli-operator",
"state": "Approved",
"approvedBy": "oncall-sre (api-key: sre-oncall)",
"decidedAt": "2026-03-19T14:22:10Z",
"creationTimestamp": "2026-03-19T14:15:00Z",
"requiredApprovers": 1,
"decisions": [
{
"approver": "oncall-sre (api-key: sre-oncall)",
"decision": "approved",
"timestamp": "2026-03-19T14:22:10Z"
}
],
"labels": {
"platform.chatcli.io/issue": "api-gateway-crashloop-backoff-1773930000",
"platform.chatcli.io/policy": "decision-engine",
"platform.chatcli.io/remediation-plan": "api-gateway-crashloop-backoff-1773930000-plan-1"
}
}
]
}
Authorizations
API key sent in the X-API-Key header. Keys are read from the Secret chatcli-operator-secrets, key api-keys (fallback: ConfigMap chatcli-operator-config, key api-keys) in the operator namespace, as a YAML list of {key, role, name, description} (name is the identity recorded on approval decisions); the operator chart creates it only with apiKeys.create: true. Roles: viewer < operator < admin — any other role string is denied everywhere. Changes are picked up within about 30 seconds; deleting both the Secret and the ConfigMap revokes every key. With no keys configured every /api/ call returns 401, unless CHATCLI_OPERATOR_DEV_MODE=true, which grants admin without a key (development only).
Query Parameters
Kubernetes namespace. Empty means all namespaces.
Exact match on the reported state.
Pending, Approved, Rejected, Expired Page number (1-based). Invalid values fall back to 1.
x >= 1Items per page. Values above 100 are capped at 100.
1 <= x <= 100