List Policies
curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/policies/{kind} \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/policies/{kind}"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/policies/{kind}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/policies/{kind}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/policies/{kind}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/policies/{kind}")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/policies/{kind}")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalPolicyList",
"metadata": { "totalCount": 1, "page": 1, "pageSize": 20 },
"items": [
{
"name": "prod-rollbacks",
"namespace": "production",
"kind": "ApprovalPolicy",
"creationTimestamp": "2026-09-01T12:00:00Z",
"spec": {
"enabled": true,
"rules": [
{ "name": "rollback-requires-human", "match": { "actionTypes": ["RollbackDeployment"] }, "mode": "manual", "timeoutMinutes": 30, "requiredApprovers": 1 }
]
},
"status": { "totalApproved": 7, "totalRejected": 1 }
}
]
}
{
"apiVersion": "v1",
"kind": "Error",
"error": "Not Found",
"code": 404,
"message": "unknown policy kind: approvals"
}
Clusters
List Policies
Lists ApprovalPolicy, NotificationPolicy, EscalationPolicy or IncidentSLA objects with their raw spec and status — read-only
GET
/
policies
/
{kind}
List Policies
curl --request GET \
--url {scheme}://{host}:{port}/{basePath}/policies/{kind} \
--header 'X-API-Key: <api-key>'import requests
url = "{scheme}://{host}:{port}/{basePath}/policies/{kind}"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('{scheme}://{host}:{port}/{basePath}/policies/{kind}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_PORT => "62437",
CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/policies/{kind}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "{scheme}://{host}:{port}/{basePath}/policies/{kind}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("{scheme}://{host}:{port}/{basePath}/policies/{kind}")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("{scheme}://{host}:{port}/{basePath}/policies/{kind}")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"apiVersion": "v1",
"kind": "ApprovalPolicyList",
"metadata": { "totalCount": 1, "page": 1, "pageSize": 20 },
"items": [
{
"name": "prod-rollbacks",
"namespace": "production",
"kind": "ApprovalPolicy",
"creationTimestamp": "2026-09-01T12:00:00Z",
"spec": {
"enabled": true,
"rules": [
{ "name": "rollback-requires-human", "match": { "actionTypes": ["RollbackDeployment"] }, "mode": "manual", "timeoutMinutes": 30, "requiredApprovers": 1 }
]
},
"status": { "totalApproved": 7, "totalRejected": 1 }
}
]
}
{
"apiVersion": "v1",
"kind": "Error",
"error": "Not Found",
"code": 404,
"message": "unknown policy kind: approvals"
}
string
required
approval, notification, escalation or slastring
Filter by namespace. Empty lists every namespace.
integer
default:"1"
Page number
integer
default:"20"
Items per page (maximum 100)
kubectl or GitOps, where they are reviewed; the API and the dashboard’s Policies tab only read them. Each item carries the CRD spec and status unchanged, so the fields follow the ApprovalPolicy, NotificationPolicy and EscalationPolicy and IncidentSLA definitions.
Minimum role: viewer. Any method other than GET returns 405; an unknown kind returns 404. Items are not filtered by status or sorted.
{
"apiVersion": "v1",
"kind": "ApprovalPolicyList",
"metadata": { "totalCount": 1, "page": 1, "pageSize": 20 },
"items": [
{
"name": "prod-rollbacks",
"namespace": "production",
"kind": "ApprovalPolicy",
"creationTimestamp": "2026-09-01T12:00:00Z",
"spec": {
"enabled": true,
"rules": [
{ "name": "rollback-requires-human", "match": { "actionTypes": ["RollbackDeployment"] }, "mode": "manual", "timeoutMinutes": 30, "requiredApprovers": 1 }
]
},
"status": { "totalApproved": 7, "totalRejected": 1 }
}
]
}
{
"apiVersion": "v1",
"kind": "Error",
"error": "Not Found",
"code": 404,
"message": "unknown policy kind: approvals"
}
Authorizations
API key sent in the X-API-Key header. Keys are read from the Secret chatcli-operator-secrets, key api-keys (fallback: ConfigMap chatcli-operator-config, key api-keys) in the operator namespace, as a YAML list of {key, role, name, description} (name is the identity recorded on approval decisions); the operator chart creates it only with apiKeys.create: true. Roles: viewer < operator < admin — any other role string is denied everywhere. Changes are picked up within about 30 seconds; deleting both the Secret and the ConfigMap revokes every key. With no keys configured every /api/ call returns 401, unless CHATCLI_OPERATOR_DEV_MODE=true, which grants admin without a key (development only).
Path Parameters
approval, notification, escalation or sla.
Available options:
approval, notification, escalation, sla Query Parameters
Filter by namespace; empty lists every namespace.
Page number (1-based). Invalid values fall back to 1.
Required range:
x >= 1Items per page. Values above 100 are capped at 100.
Required range:
1 <= x <= 100