ConductorOne Policy API

openapi: 3.2.0
info:
  description: The ConductorOne API is a HTTP API for managing ConductorOne resources.
  title: ConductorOne Policy API
  version: 0.1.0-alpha
servers:
- description: The ConductorOne API server for the current tenant.
  url: https://{tenantDomain}.conductor.one
  variables:
    tenantDomain:
      default: example
      description: The domain of the tenant to use for this request.
security:
- bearerAuth: []
  oauth: []
tags:
- name: Policy
paths:
  /api/v1/policies:
    get:
      description: List policies.
      operationId: c1.api.policy.v1.Policies.List
      parameters:
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.ListPolicyResponse'
          description: Successful response
      summary: List
      tags:
      - Policy
      x-speakeasy-group: Policies
      x-speakeasy-name-override: List
    post:
      description: Create a policy.
      operationId: c1.api.policy.v1.Policies.Create
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.CreatePolicyRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.CreatePolicyResponse'
          description: The CreatePolicyResponse message contains the created policy object.
      summary: Create
      tags:
      - Policy
      x-speakeasy-entity-operation:
        terraform-resource: Policy#create
      x-speakeasy-group: Policies
      x-speakeasy-name-override: Create
  /api/v1/policies/{id}:
    delete:
      description: Delete a policy by ID.
      operationId: c1.api.policy.v1.Policies.Delete
      parameters:
      - in: path
        name: id
        required: true
        schema:
          description: The Id of the policy to delete.
          readOnly: false
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.DeletePolicyRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.DeletePolicyResponse'
          description: Empty response with a status code indicating success.
      summary: Delete
      tags:
      - Policy
      x-speakeasy-entity-operation:
        terraform-resource: Policy#delete
      x-speakeasy-group: Policies
      x-speakeasy-name-override: Delete
    get:
      description: Get a policy by ID.
      operationId: c1.api.policy.v1.Policies.Get
      parameters:
      - in: path
        name: id
        required: true
        schema:
          description: The id field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.GetPolicyResponse'
          description: The GetPolicyResponse message contains the policy object.
      summary: Get
      tags:
      - Policy
      x-speakeasy-entity-operation:
        terraform-datasource: null
        terraform-resource: Policy#read
      x-speakeasy-group: Policies
      x-speakeasy-name-override: Get
    post:
      description: Update a policy by providing a policy object and an update mask.
      operationId: c1.api.policy.v1.Policies.Update
      parameters:
      - in: path
        name: id
        required: true
        schema:
          description: The ID of the Policy.
          readOnly: true
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.UpdatePolicyRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.UpdatePolicyResponse'
          description: The UpdatePolicyResponse message contains the updated policy object.
      summary: Update
      tags:
      - Policy
      x-speakeasy-entity-operation:
        terraform-resource: Policy#update
      x-speakeasy-group: Policies
      x-speakeasy-name-override: Update
  /api/v1/policies/test-account-provision-policy:
    post:
      description: Invokes the c1.api.policy.v1.AccountProvisionPolicyTest.Test method.
      operationId: c1.api.policy.v1.AccountProvisionPolicyTest.Test
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.TestAccountProvisionPolicyRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.TestAccountProvisionPolicyResponse'
          description: Successful response
      summary: Test
      tags:
      - Policy
      x-speakeasy-group: AccountProvisionPolicyTest
      x-speakeasy-name-override: Test
  /api/v1/policies/validate/cel:
    post:
      description: Validate policies
      operationId: c1.api.policy.v1.PolicyValidate.ValidateCEL
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.EditorValidateRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.EditorValidateResponse'
          description: Successful response
      summary: Validate Cel
      tags:
      - Policy
      x-speakeasy-group: PolicyValidate
      x-speakeasy-name-override: ValidateCEL
  /api/v1/search/policies:
    post:
      description: Search policies based on filters specified in the request body.
      operationId: c1.api.policy.v1.PolicySearch.Search
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.policy.v1.SearchPoliciesRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.policy.v1.SearchPoliciesResponse'
          description: Successful response
      summary: Search
      tags:
      - Policy
      x-speakeasy-entity-operation:
        terraform-datasource:
        - Policy#read
        - Policies#read
        terraform-resource: null
      x-speakeasy-group: PolicySearch
      x-speakeasy-name-override: Search
      x-speakeasy-pagination:
        inputs:
        - in: requestBody
          name: pageToken
          type: cursor
        outputs:
          nextCursor: $.nextPageToken
        type: cursor
components:
  schemas:
    c1.api.policy.v1.UnconfiguredProvision:
      description: The UnconfiguredProvision message.
      nullable: true
      title: Unconfigured Provision
      type: object
      x-speakeasy-name-override: UnconfiguredProvision
    c1.api.policy.v1.AgentApproval:
      description: The agent to assign the task to.
      nullable: true
      properties:
        agentFailureAction:
          description: The action to take if the agent fails to approve, deny, or reassign the task.
          enum:
          - APPROVAL_AGENT_FAILURE_ACTION_UNSPECIFIED
          - APPROVAL_AGENT_FAILURE_ACTION_REASSIGN_TO_USERS
          - APPROVAL_AGENT_FAILURE_ACTION_REASSIGN_TO_SUPER_ADMINS
          - APPROVAL_AGENT_FAILURE_ACTION_SKIP_POLICY_STEP
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        agentMode:
          description: The mode of the agent, full control, change policy only, or comment only.
          enum:
          - APPROVAL_AGENT_MODE_UNSPECIFIED
          - APPROVAL_AGENT_MODE_FULL_CONTROL
          - APPROVAL_AGENT_MODE_CHANGE_POLICY_ONLY
          - APPROVAL_AGENT_MODE_COMMENT_ONLY
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        agentUserId:
          description: The agent user ID to assign the task to.
          readOnly: false
          type: string
        instructions:
          description: Instructions for the agent.
          readOnly: false
          type: string
        policyIds:
          description: The allow list of policy IDs to re-route the task to.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        reassignToUserIds:
          description: The users to reassign the task to if the agent failure action is reassign to users.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Agent Approval
      type: object
      x-speakeasy-name-override: AgentApproval
    c1.api.policy.v1.EntitlementOwnerApproval:
      description: The entitlement owner approval allows configuration of the approval step when the target approvers are the entitlement owners.
      nullable: true
      properties:
        allowSelfApproval:
          description: Configuration to allow self approval if the target user is an entitlement owner during this step.
          readOnly: false
          type: boolean
        fallback:
          description: Configuration to allow a fallback if the entitlement owner cannot be identified.
          readOnly: false
          type: boolean
        fallbackUserIds:
          description: Configuration to specific which users to fallback to if fallback is enabled and the entitlement owner cannot be identified.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Entitlement Owner Approval
      type: object
      x-speakeasy-name-override: EntitlementOwnerApproval
    c1.api.policy.v1.ManualProvision:
      description: Manual provisioning indicates that a human must intervene for the provisioning of this step.
      nullable: true
      properties:
        instructions:
          description: This field indicates a text body of instructions for the provisioner to indicate.
          readOnly: false
          type: string
        userIds:
          description: An array of users that are required to provision during this step.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Manual Provision
      type: object
      x-speakeasy-name-override: ManualProvision
    c1.api.policy.v1.WebhookApproval:
      description: The WebhookApproval message.
      nullable: true
      properties:
        webhookId:
          description: The ID of the webhook to call for approval.
          readOnly: false
          type: string
      title: Webhook Approval
      type: object
      x-speakeasy-name-override: WebhookApproval
    c1.api.policy.v1.Escalation:
      description: "The Escalation message.\n\nThis message contains a oneof named escalation_policy. Only a single field of the following list may be set at a time:\n  - replacePolicy\n  - reassignToApprovers\n"
      properties:
        escalationComment:
          description: The escalationComment field.
          readOnly: false
          type: string
        expiration:
          description: The expiration field.
          format: int64
          readOnly: false
          type: string
        reassignToApprovers:
          $ref: '#/components/schemas/c1.api.policy.v1.Escalation.ReassignToApprovers'
        replacePolicy:
          $ref: '#/components/schemas/c1.api.policy.v1.Escalation.ReplacePolicy'
      title: Escalation
      type: object
      x-speakeasy-name-override: Escalation
    c1.api.form.v1.TextField:
      description: The TextField message.
      nullable: true
      properties:
        multiline:
          description: The multiline field.
          readOnly: false
          type: boolean
      title: Text Field
      type: object
      x-speakeasy-name-override: TextField
    c1.api.form.v1.Field:
      description: "A field is a single input meant to collect a piece of data from a user\n\nThis message contains a oneof named type. Only a single field of the following list may be set at a time:\n  - stringField\n  - boolField\n  - stringSliceField\n  - int64Field\n  - fileField\n"
      properties:
        boolField:
          $ref: '#/components/schemas/c1.api.form.v1.BoolField'
        description:
          description: The description field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        fileField:
          $ref: '#/components/schemas/c1.api.form.v1.FileField'
        int64Field:
          $ref: '#/components/schemas/c1.api.form.v1.Int64Field'
        name:
          description: The name field.
          readOnly: false
          type: string
        stringField:
          $ref: '#/components/schemas/c1.api.form.v1.StringField'
        stringSliceField:
          $ref: '#/components/schemas/c1.api.form.v1.StringSliceField'
      title: Field
      type: object
      x-speakeasy-name-override: Field
    c1.api.policy.v1.Reject:
      description: This policy step indicates that a ticket should have a denied outcome. This is a terminal approval state and is used to explicitly define the end of approval steps.
      nullable: true
      properties:
        rejectMessage:
          description: An optional message to include in the comments when a task is automatically rejected.
          readOnly: false
          type: string
      title: Reject
      type: object
      x-speakeasy-name-override: Reject
    c1.api.form.v1.SelectOption:
      description: The SelectOption message.
      properties:
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        value:
          description: The value field.
          readOnly: false
          type: string
      title: Select Option
      type: object
      x-speakeasy-name-override: SelectOption
    validate.DurationRules:
      description: "DurationRules describe the constraints applied exclusively to the\n `google.protobuf.Duration` well-known type"
      nullable: true
      properties:
        const:
          format: duration
          readOnly: false
          type: string
        gt:
          format: duration
          readOnly: false
          type: string
        gte:
          format: duration
          readOnly: false
          type: string
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: duration
            readOnly: false
            type: string
          nullable: true
          readOnly: false
          type: array
        lt:
          format: duration
          readOnly: false
          type: string
        lte:
          format: duration
          readOnly: false
          type: string
        notIn:
          description: "NotIn specifies that this field cannot be equal to one of the specified\n values"
          items:
            format: duration
            readOnly: false
            type: string
          nullable: true
          readOnly: false
          type: array
        required:
          description: Required specifies that this field must be set
          readOnly: false
          type: boolean
      title: Duration Rules
      type: object
      x-speakeasy-name-override: DurationRules
    c1.api.policy.v1.DeletePolicyRequestInput:
      description: The DeletePolicyRequest message contains the ID of the policy to delete. It uses URL value for input.
      title: Delete Policy Request
      type: object
      x-speakeasy-entity: Policy
      x-speakeasy-name-override: DeletePolicyRequest
    c1.api.policy.v1.WaitDuration:
      description: The WaitDuration message.
      nullable: true
      properties:
        duration:
          format: duration
          readOnly: false
          type: string
      title: Wait Duration
      type: object
      x-speakeasy-name-override: WaitDuration
    validate.EnumRules:
      description: EnumRules describe the constraints applied to enum values
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          format: int32
          readOnly: false
          type: integer
        definedOnly:
          description: "DefinedOnly specifies that this field must be only one of the defined\n values for this enum, failing on any undefined value."
          readOnly: false
          type: boolean
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: int32
            type: integer
          nullable: true
          readOnly: false
          type: array
        notIn:
          description: "NotIn specifies that this field cannot be equal to one of the specified\n values"
          items:
            format: int32
            type: integer
          nullable: true
          readOnly: false
          type: array
      title: Enum Rules
      type: object
      x-speakeasy-name-override: EnumRules
    c1.api.policy.v1.ConnectorProvision:
      description: "Indicates that a connector should perform the provisioning. This object has no fields.\n\nThis message contains a oneof named provision_type. Only a single field of the following list may be set at a time:\n  - defaultBehavior\n  - account\n  - deleteAccount\n"
      nullable: true
      properties:
        account:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.AccountProvision'
        defaultBehavior:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.DefaultBehavior'
        deleteAccount:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.DeleteAccount'
      title: Connector Provision
      type: object
      x-speakeasy-name-override: ConnectorProvision
    validate.SFixed32Rules:
      description: SFixed32Rules describes the constraints applied to `sfixed32` values
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          format: int32
          readOnly: false
          type: integer
        gt:
          description: "Gt specifies that this field must be greater than the specified value,\n exclusive. If the value of Gt is larger than a specified Lt or Lte, the\n range is reversed."
          format: int32
          readOnly: false
          type: integer
        gte:
          description: "Gte specifies that this field must be greater than or equal to the\n specified value, inclusive. If the value of Gte is larger than a\n specified Lt or Lte, the range is reversed."
          format: int32
          readOnly: false
          type: integer
        ignoreEmpty:
          description: "IgnoreEmpty specifies that the validation rules of this field should be\n evaluated only if the field is not empty"
          readOnly: false
          type: boolean
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: int32
            type: integer
          nullable: true
          readOnly: false
          type: array
        lt:
          description: "Lt specifies that this field must be less than the specified value,\n exclusive"
          format: int32
          readOnly: false
          type: integer
        lte:
          description: "Lte specifies that this field must be less than or equal to the\n specified value, inclusive"
          format: int32
          readOnly: false
          type: integer
        notIn:
          description: "NotIn specifies that this field cannot be equal to one of the specified\n values"
          items:
            format: int32
            type: integer
          nullable: true
          readOnly: false
          type: array
      title: S Fixed 32 Rules
      type: object
      x-speakeasy-name-override: SFixed32Rules
    validate.Fixed64Rules:
      description: Fixed64Rules describes the constraints applied to `fixed64` values
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          format: uint64
          readOnly: false
          type: string
        gt:
          description: "Gt specifies that this field must be greater than the specified value,\n exclusive. If the value of Gt is larger than a specified Lt or Lte, the\n range is reversed."
          format: uint64
          readOnly: false
          type: string
        gte:
          description: "Gte specifies that this field must be greater than or equal to the\n specified value, inclusive. If the value of Gte is larger than a\n specified Lt or Lte, the range is reversed."
          format: uint64
          readOnly: false
          type: string
        ignoreEmpty:
          description: "IgnoreEmpty specifies that the validation rules of this field should be\n evaluated only if the field is not empty"
          readOnly: false
          type: boolean
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: uint64
            type: string
          nullable: true
          readOnly: false
          type: array
        lt:
          description: "Lt specifies that this field must be less than the specified value,\n exclusive"
          format: uint64
          readOnly: false
          type: string
        lte:
          description: "Lte specifies that this field must be less than or equal to the\n specified value, inclusive"
          format: uint64
          readOnly: false
          type: string
        notIn:
          description: "NotIn specifies that this field cannot be equal to one of the specified\n values"
          items:
            format: uint64
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Fixed 64 Rules
      type: object
      x-speakeasy-name-override: Fixed64Rules
    c1.api.policy.v1.CreatePolicyResponse:
      description: The CreatePolicyResponse message contains the created policy object.
      properties:
        policy:
          $ref: '#/components/schemas/c1.api.policy.v1.Policy'
      title: Create Policy Response
      type: object
      x-speakeasy-name-override: CreatePolicyResponse
    c1.api.policy.v1.ActionProvision:
      description: This provision step indicates that account lifecycle action should be called to provision this entitlement.
      nullable: true
      properties:
        actionName:
          description: The actionName field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        connectorId:
          description: The connectorId field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
      title: Action Provision
      type: object
      x-speakeasy-name-override: ActionProvision
    validate.TimestampRules:
      description: "TimestampRules describe the constraints applied exclusively to the\n `google.protobuf.Timestamp` well-known type"
      nullable: true
      properties:
        const:
          format: date-time
          readOnly: false
          type: string
        gt:
          format: date-time
          readOnly: false
          type: string
        gtNow:
          description: "GtNow specifies that this must be greater than the current time. GtNow\n can only be used with the Within rule."
          readOnly: false
          type: boolean
        gte:
          format: date-time
          readOnly: false
          type: string
        lt:
          format: date-time
          readOnly: false
          type: string
        ltNow:
          description: "LtNow specifies that this must be less than the current time. LtNow\n can only be used with the Within rule."
          readOnly: false
          type: boolean
        lte:
          format: date-time
          readOnly: false
          type: string
        required:
          description: Required specifies that this field must be set
          readOnly: false
          type: boolean
        within:
          format: duration
          readOnly: false
          type: string
      title: Timestamp Rules
      type: object
      x-speakeasy-name-override: TimestampRules
    c1.api.form.v1.BoolField:
      description: "The BoolField message.\n\nThis message contains a oneof named view. Only a single field of the following list may be set at a time:\n  - checkboxField\n\n\nThis message contains a oneof named _rules. Only a single field of the following list may be set at a time:\n  - rules\n"
      nullable: true
      properties:
        checkboxField:
          $ref: '#/components/schemas/c1.api.form.v1.CheckboxField'
        defaultValue:
          description: The defaultValue field.
          readOnly: false
          type: boolean
        rules:
          $ref: '#/components/schemas/validate.BoolRules'
      title: Bool Field
      type: object
      x-speakeasy-name-override: BoolField
    c1.api.policy.v1.ConnectorProvision.DoNotSave:
      description: The DoNotSave message.
      nullable: true
      title: Do Not Save
      type: object
      x-speakeasy-name-override: DoNotSave
    c1.api.policy.v1.PolicySteps:
      description: The PolicySteps message.
      properties:
        steps:
          description: An array of policy steps indicating the processing flow of a policy. These steps are oneOfs, and only one property may be set for each array index at a time.
          items:
            $ref: '#/components/schemas/c1.api.policy.v1.PolicyStep'
          nullable: true
          readOnly: false
          type: array
      title: Policy Steps
      type: object
      x-speakeasy-name-override: PolicySteps
    validate.UInt64Rules:
      description: UInt64Rules describes the constraints applied to `uint64` values
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          format: uint64
          readOnly: false
          type: string
        gt:
          description: "Gt specifies that this field must be greater than the specified value,\n exclusive. If the value of Gt is larger than a specified Lt or Lte, the\n range is reversed."
          format: uint64
          readOnly: false
          type: string
        gte:
          description: "Gte specifies that this field must be greater than or equal to the\n specified value, inclusive. If the value of Gte is larger than a\n specified Lt or Lte, the range is reversed."
          format: uint64
          readOnly: false
          type: string
        ignoreEmpty:
          description: "IgnoreEmpty specifies that the validation rules of this field should be\n evaluated only if the field is not empty"
          readOnly: false
          type: boolean
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: uint64
            type: string
          nullable: true
          readOnly: false
          type: array
        lt:
          description: "Lt specifies that this field must be less than the specified value,\n exclusive"
          format: uint64
          readOnly: false
          type: string
        lte:
          description: "Lte specifies that this field must be less than or equal to the\n specified value, inclusive"
          format: uint64
          readOnly: false
          type: string
        notIn:
          description: "NotIn specifies that this field cannot be equal to one of the specified\n values"
          items:
            format: uint64
            type: string
          nullable: true
          readOnly: false
          type: array
      title: U Int 64 Rules
      type: object
      x-speakeasy-name-override: UInt64Rules
    validate.BoolRules:
      description: BoolRules describes the constraints applied to `bool` values
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          readOnly: false
          type: boolean
      title: Bool Rules
      type: object
      x-speakeasy-name-override: BoolRules
    c1.api.policy.v1.Provision:
      description: The provision step references a provision policy for this step.
      nullable: true
      properties:
        assigned:
          description: A field indicating whether this step is assigned.
          readOnly: false
          type: boolean
        provisionPolicy:
          $ref: '#/components/schemas/c1.api.policy.v1.ProvisionPolicy'
        provisionTarget:
          $ref: '#/components/schemas/c1.api.policy.v1.ProvisionTarget'
      title: Provision
      type: object
      x-speakeasy-name-override: Provision
    c1.api.policy.v1.EditorValidateResponse:
      description: The EditorValidateResponse message.
      properties:
        markers:
          description: The markers field.
          items:
            $ref: '#/components/schemas/c1.api.editor.v1.EditorMarker'
          nullable: true
          readOnly: false
          type: array
      title: Editor Validate Response
      type: object
      x-speakeasy-name-override: EditorValidateResponse
    c1.api.policy.v1.TestAccountProvisionPolicyRequest:
      description: The TestAccountProvisionPolicyRequest message.
      properties:
        cel:
          description: The cel field.
          readOnly: false
          type: string
      title: Test Account Provision Policy Request
      type: object
      x-speakeasy-name-override: TestAccountProvisionPolicyRequest
    validate.BytesRules:
      description: "BytesRules describe the constraints applied to `bytes` values\n\nThis message contains a oneof named well_known. Only a single field of the following list may be set at a time:\n  - ip\n  - ipv4\n  - ipv6\n"
      nullable: true
      properties:
        const:
          description: Const specifies that this field must be exactly the specified value
          format: base64
          readOnly: false
          type: string
        contains:
          description: "Contains specifies that this field must have the specified bytes\n anywhere in the string."
          format: base64
          readOnly: false
          type: string
        ignoreEmpty:
          description: "IgnoreEmpty specifies that the validation rules of this field should be\n evaluated only if the field is not empty"
          readOnly: false
          type: boolean
        in:
          description: "In specifies that this field must be equal to one of the specified\n values"
          items:
            format: base64
            type: string
          nullable: true
          readOnly: false
          type: array
        ip:
          description: "Ip specifies that the field must be a valid IP (v4 or v6) address in\n byte format\nThis field is part of the `well_known` oneof.\nSee the documentation for `validate.BytesRules` for more details."
          nullable: true
          readOnly: false
          type: boolean
        ipv4:
          description: "Ipv4 specifies that the field must be a valid IPv4 address in byte\n format\nThis field is part of the `well_known` oneof.\nSee the documentation for `validate.BytesRules` for more details."
          nullable: true
          readOnly: false
          type: boolean
        ipv6:
          description: "Ipv6 specifies that the field must be a valid IPv6 address in byte\n format\nThis field is part of the `well_known` oneof.\nSee the documentation for `validate.BytesRules` for more details."
          nullable: true
          readOnly: false
          type: boolean
        

# --- truncated at 32 KB (109 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/conductorone/refs/heads/main/openapi/conductorone-policy-api-openapi.yml