Invoke Action
POST/api/v1/governance/actions/:name/invoke
Invoke a defined action - gated on the action's OWN required_action.
body.params supplies values for the action's declared params (422 on a
constraint violation. Omitted params take their defaults). A hunt or rule
document the action would leave invalid is 422 invalid_document, with the
hunts API's own message. A change to the infra overlay meets the backing-services
guards on what the action leaves, dry run included, whatever the caller holds:
409 managed_by_provider for a read-only value of a service DFE does not run,
then 400 scale_down_refused where it lowers or un-declares a node or broker
count.
Direct commit in dev/solo. A production+team invoke is routed to a review PR (or
409 review_required when no forge is configured).
Request
Responses
- 200
- 401
- 403
- 422
- default
Successful Response
No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked
Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope
Validation Error
Problem details (RFC 9457)