Sign in
latestOpenAPI 3.0.32026-08-227451,2751.8 MB

d0fc0114da66

LinkMablnet

Mint a fleet-scoped mablnet operator session (peer JOIN credential + operator-command token)

Issues the same pair of short-lived signed artifacts as /authorize/operator/tenant, but for a fleet operator session — one that operates on the Link Router fleet itself (Router inventory, drain a Router) rather than a customer Host. Both artifacts bind to the fleet sentinel workspace (mabl) rather than a customer workspace. The peer_credential is recognised locally by a Router's OperatorTenantAuthenticator (verified against the same KMS-held Ed25519 key, never resolved against a customer tunnel) and admits the operator to the Router's operator tenant; the operator_token carries the fleet scope set and is validated by the Router's MablFleetOperatorAuthorizer. Auth: user-OAuth callers who are mabl global admins only. Fleet operations act across customers, so the support-admin diagnostic tier admitted by the tenant endpoint is deliberately excluded here. Scope policy: global admins get the fleet scope set (read:router-inventory, drain:router, write:log-level). Callers do not request scopes — the api decides. Lifetime: 30 minutes per issued session; callers re-fetch when needed.

post/link/mablnet/authorize/operator/fleet

Request body

labelstring

Optional audit / host-id readability label for the session (e.g. an incident id). Defaults server-side when omitted. Does not bind the session to any customer tunnel.

infrastructure_keystring

The link infrastructure key of the cluster whose fleet this session operates (mabl when omitted — the shared cluster). The minted operator token carries it as its infrastructure_key claim, and a Router only accepts fleet tokens naming its own cluster — so operating a dedicated customer's fleet requires minting against that cluster's key.

Response

Fleet operator session minted successfully.

peer_credentialstring byte required

Base64 (standard alphabet, no URL safety) of the UTF-8 JSON bytes of the signed peer JOIN credential. The caller presents these bytes as the mablnet HostCredentials blob at JOIN; api's /authorize/host validates the Ed25519 signature and admits the user as a tenant peer.

operator_tokenstring byte required

Base64 (standard alphabet, no URL safety) of the UTF-8 JSON bytes of the signed operator-command token. Carried per-request in OperatorCommand.token and validated by the customer Host's MablOperatorAuthorizer.

expires_atstring date-time required

RFC 3339 timestamp marking when both artifacts expire. Fixed 30-minute window from issue time.