Sign in

v1

latestSwagger 2.02026-07-1792120.1 KB
manifest

Set a manifest.

Before deploying the application to the cluster the manifest needs to be set once by the provider. On success, an array containing key-value mapping for encrypted secrets to be used for recovering the Coordinator in case of disaster recovery. The key matches each supplied key from RecoveryKeys in the Manifest.

Example for setting the manifest with curl:

curl --cacert marblerun.crt --data-binary @manifest.json "https://$MARBLERUN/manifest"
post/manifest

Request body

Infrastructuresobject

Infrastructures contains the allowed infrastructure providers and their properties.

Marblesobject

Marbles contains the allowed services with their corresponding enclave and configuration parameters.

Packagesobject

Packages contains the allowed enclaves and their properties.

RecoveryKeysobject

RecoveryKeys holds one or multiple RSA public keys to encrypt multiple secrets, which can be used to decrypt the sealed state again in case the encryption key on disk was corrupted somehow.

Rolesobject

Roles contains role definitions to manage permissions across the MarbleRun mesh

Secretsobject

Secrets holds user-specified secrets, which should be generated and later on stored in a marble (if not shared) or in the core (if shared).

TLSobject

TLS contains tags which can be assiged to Marbles to specify which connections should be elevated to TLS

Usersobject

Users contains user definitions, including certificates used for authentication and permissions.

Response

Statusstring

Example response

{
  "Status": "success"
}