Fortanix Node API

openapi: 3.2.0
info:
  description: Fortanix Confidential Computing Manager Backend. These are APIs using which the frontend and other clients (compute node agents) interact with Fortanix Confidential Computing Manager functionalities, which include compute node and app enrollment, attestation and signing, and Certificate Authority.
  version: 2.0.0
  title: Confidential Computing Manager Node API
  termsOfService: https://www.fortanix.com/legal/terms/
  contact:
    name: Fortanix Support
    url: https://support.fortanix.com/hc/en-us/categories/360003107511-Confidential-Computing-Manager
    email: support@fortanix.com
  license:
    name: Apache 2.0
    url: http://www.apache.org/licenses/LICENSE-2.0.html
servers:
- url: https://ccm.fortanix.com
tags:
- name: Node
paths:
  /v1/nodes:
    get:
      tags:
      - Node
      summary: Get all compute nodes information.
      description: Get compute nodes information with status.
      operationId: getAllNodes
      x-auth-resource: Reader,Writer,Manager
      parameters:
      - name: name
        in: query
        description: Compute node name.
        required: false
        schema:
          type: string
      - name: description
        in: query
        description: Compute node description.
        required: false
        schema:
          type: string
      - name: sgx_version
        in: query
        description: Search on node's SGX platform software version.
        required: false
        schema:
          type: string
      - name: all_search
        in: query
        description: Search on name or description.
        required: false
        schema:
          type: string
      - name: attestation_type
        in: query
        description: Node Attestation type (DCAP, NITRO_ENCLAVE or AMD_SEV_SNP).
        required: false
        schema:
          type: string
      - $ref: '#/components/parameters/NodeStatusType'
      - name: limit
        in: query
        description: Maximum numbers of compute nodes to return.
        required: false
        schema:
          type: integer
      - name: offset
        in: query
        description: Number of compute nodes to skip from start.
        required: false
        schema:
          type: integer
      - name: sort_by
        in: query
        description: Sort fields. In the format of key1:ASC,key2:DESC,key3:DESC
        required: false
        schema:
          type: string
      - name: filter
        in: query
        description: Filter query supports searching by list of node_id.
        required: false
        schema:
          type: string
      responses:
        '200':
          description: Search result for compute node objects.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetAllNodesResponse'
      security:
      - bearerToken: []
    post:
      tags:
      - Node
      summary: Provision a new compute node.
      description: Provision a new compute node.
      operationId: provisionNode
      x-auth-resource: Manager,JoinTokenAuth
      parameters:
      - $ref: '#/components/parameters/NodeProvisionRequest'
      responses:
        '200':
          description: Compute node creation task.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TaskResult'
  /v1/nodes/{node-id}:
    get:
      tags:
      - Node
      summary: Get details of a particular compute node.
      description: Details of a particular compute node.
      operationId: getNode
      x-auth-resource: Reader,Writer,Manager,AgentAuth
      parameters:
      - $ref: '#/components/parameters/NodeId'
      responses:
        '200':
          description: Details of a compute node.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Node'
      security:
      - bearerToken: []
    patch:
      tags:
      - Node
      summary: Update details of a particular compute node.
      description: Update details of a particular compute node.
      operationId: updateNode
      x-auth-resource: Writer,Manager,ActiveAccount
      parameters:
      - $ref: '#/components/parameters/NodeId'
      - $ref: '#/components/parameters/NodeUpdateRequest'
      responses:
        '200':
          description: Details of a compute node.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Node'
      security:
      - bearerToken: []
  /v1/nodes/{node-id}/certificate:
    get:
      tags:
      - Node
      summary: Get an attested compute node's certificate.
      description: Get certificate for the compute node, only if the compute node is attested.
      operationId: getNodeCertificate
      x-auth-resource: Reader,Writer,Manager,JoinTokenAuth,AgentAuth
      parameters:
      - $ref: '#/components/parameters/NodeId'
      responses:
        '200':
          description: Compute node certificate.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Certificate'
      security:
      - bearerToken: []
  /v1/nodes/{node-id}/certificate-details:
    get:
      tags:
      - Node
      summary: Get a compute node's certificate.
      description: Get certificate for the compute node.
      x-auth-resource: Reader,Writer,Manager
      operationId: getNodeCertificateDetails
      parameters:
      - $ref: '#/components/parameters/NodeId'
      responses:
        '200':
          description: Certificate details.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CertificateDetails'
      security:
      - bearerToken: []
  /v1/nodes/{node-id}/deactivate:
    post:
      tags:
      - Node
      summary: Deactivate a particular compute node.
      description: Deactivate a particular compute node.
      operationId: deactivateNode
      x-auth-resource: Manager,ActiveAccount
      parameters:
      - $ref: '#/components/parameters/NodeId'
      responses:
        '204':
          description: Nothing is returned on success.
      security:
      - bearerToken: []
components:
  parameters:
    NodeId:
      name: node-id
      in: path
      required: true
      description: UUID of a compute node.
      schema:
        type: string
        format: uuid
    NodeUpdateRequest:
      name: body
      in: body
      required: true
      description: Request to update a compute node.
      schema:
        $ref: '#/components/schemas/NodeUpdateRequest'
    NodeStatusType:
      name: status
      in: query
      description: Status string for the compute node.
      schema:
        type: string
        enum:
        - RUNNING
        - STOPPED
        - FAILED
        - UNKNOWN
    NodeProvisionRequest:
      name: body
      in: body
      required: true
      description: Request to provision a compute node.
      schema:
        $ref: '#/components/schemas/NodeProvisionRequest'
  schemas:
    BuildStatusType:
      type: string
      description: Status string for the image.
      enum:
      - REJECTED
      - WHITELISTED
      - PENDING
    BaremetalTdxAttributes:
      type: object
      required:
      - mrtd
      - rtmr0
      - rtmr1
      - rtmr2
      - rtmr3
      - coprocessors
      properties:
        mrtd:
          type: string
          description: TD firmware binary (OVMF.fd) measurement as a hex string.
        rtmr0:
          type: string
          description: Firmware and platform runtime measurements as hex string
        rtmr1:
          type: string
          description: Runtime measurement for kernel for direct boot and bootchain for indirect boot as hex string
        rtmr2:
          type: string
          description: Runtime measurement of kernel cmdline and initrd as hex string
        rtmr3:
          type: string
          description: Runtime extendable measurement register 3 as hex string
        coprocessors:
          type: array
          items:
            $ref: '#/components/schemas/Coprocessor'
    BuildStatus:
      type: object
      required:
      - status
      - status_updated_at
      properties:
        status:
          $ref: '#/components/schemas/BuildStatusType'
        status_updated_at:
          type: integer
          format: int64
          description: Time since the status change.
    NodeStatus:
      type: object
      required:
      - status
      - created_at
      - status_updated_at
      properties:
        status:
          $ref: '#/components/schemas/NodeStatusType'
        created_at:
          type: integer
          format: int64
          description: Compute node creation time.
        status_updated_at:
          type: integer
          format: int64
          description: Time since the status changed.
        last_seen_at:
          type: integer
          format: int64
          description: Time the node was last seen.
        last_seen_version:
          type: string
          description: Version of the node when it was last seen.
    AmdSevSnpVmpl:
      type: string
      description: Virtual Machine Privilege Level
      enum:
      - vmpl0
      - vmpl1
      - vmpl2
      - vmpl3
    CertificateDetails:
      type: object
      required:
      - subject_name
      - issuer_name
      - valid_from
      - valid_until
      - cpusvn
      - ias_quote_status
      properties:
        enclave_info:
          $ref: '#/components/schemas/EnclaveInfo'
        subject_name:
          type: string
          description: Name of the subject.
        issuer_name:
          type: string
          description: Name of the issuer.
        valid_until:
          type: integer
          format: int64
          description: Certificate expiry date.
        valid_from:
          type: integer
          format: int64
          description: Certificate valid from.
        cpusvn:
          type: string
          description: CPUSVN, as a hex string.
        ias_quote_status:
          type: string
          description: IAS quote status.
    NodeProvisionRequest:
      type: object
      required:
      - name
      - ipaddress
      - sgx_version
      properties:
        name:
          type: string
          description: Name of the compute node.
        description:
          type: string
          description: Description of the compute node.
        ipaddress:
          type: string
          description: IP Address of the compute node.
        sys_info:
          $ref: '#/components/schemas/NodeSysInfo'
        sgx_version:
          type: string
          description: Version of the Intel SGX Platform Software running on the compute node.
        attestation_request:
          $ref: '#/components/schemas/AttestationRequest'
        error_report:
          $ref: '#/components/schemas/NodeErrorReport'
    TaskType:
      type: string
      description: The types of tasks supported.
      enum:
      - NODE_ATTESTATION
      - CERTIFICATE_ISSUANCE
      - BUILD_WHITELIST
      - DOMAIN_WHITELIST
    DockerNetworkProtocol:
      type: string
      description: Protocol Associated with a Port exposed by a docker container.
      enum:
      - Tcp
      - Udp
    PatchOperation:
      type: string
      description: The operation to be performed
      enum:
      - add
      - remove
      - replace
    SgxInfo:
      type: object
      description: SGX Related details of a compute node.
      properties:
        version:
          type: string
          description: Version of the Intel SGX Platform Software running on the compute node.
    PatchRequest:
      type: array
      items:
        $ref: '#/components/schemas/PatchDocument'
    Coprocessor:
      type: object
      required:
      - attestation
      properties:
        attestation:
          $ref: '#/components/schemas/Attestation'
        gpu_vendor:
          $ref: '#/components/schemas/GpuVendor'
    DockerNetworkPort:
      type: object
      description: A port exposed by a docker container.
      required:
      - port
      - protocol
      properties:
        port:
          type: integer
          description: A valid, specific port number from 1..65535 (inclusive).
        protocol:
          $ref: '#/components/schemas/DockerNetworkProtocol'
    SearchMetadata:
      type: object
      required:
      - total_count
      - filtered_count
      - page
      - pages
      - limit
      properties:
        page:
          type: integer
          description: Current page number
        pages:
          type: integer
          description: Total pages as per the item counts and page limit.
        limit:
          type: integer
          description: Number of items to limit in a page.
        total_count:
          type: integer
          description: Total number of unfiltered items.
        filtered_count:
          type: integer
          description: Total number of items as per the current filter.
    NodeProvisionErrorType:
      type: string
      description: Node agent attestation error type.
      enum:
      - AESMD_FAILURE
      - QUOTE_GENERATION_ERROR
      - QUOTE_VERIFICATION_ERROR
      - GROUP_OUT_OF_DATE
      - SIGRL_VERSION_MISMATCH
      - CONFIGURATION_NEEDED
      - QUOTE_REVOKED
      - SIGNATURE_INVALID
      - DCAP_ERROR
      - CPUSVN_OUT_OF_DATE
      - PSW_OUT_OF_DATE
      - BAD_PSW
      - BAD DATA
    AppStatusType:
      type: string
      description: Status string for the app on a compute node.
      enum:
      - RUNNING
      - STOPPED
      - UNKNOWN
    NodeUpdateRequest:
      type: object
      required:
      - patch
      properties:
        patch:
          $ref: '#/components/schemas/PatchRequest'
    TaskStatus:
      required:
      - created_at
      - status_updated_at
      - status
      type: object
      description: Status info for a task.
      properties:
        created_at:
          type: integer
          format: int64
          description: Task creation time
        status_updated_at:
          type: integer
          format: int64
          description: Time since the status change.
        status:
          $ref: '#/components/schemas/TaskStatusType'
    NodeErrorReport:
      type: object
      required:
      - name
      - message
      properties:
        message:
          type: string
          description: Error message containing the reason why node agent failed.
        name:
          $ref: '#/components/schemas/NodeProvisionErrorType'
    GpuVendor:
      type: string
      description: An enum for GPU Vendor
      enum:
      - Nvidia
    BuildDeploymentStatusType:
      type: string
      description: Status string for the image deployment.
      enum:
      - DEPLOYED
      - UNDEPLOYED
    JavaRuntime:
      type: string
      description: Java runtime mode for conversion.
      enum:
      - JAVA-ORACLE
      - OPENJDK
      - OPENJ9
      - LIBERTY-JRE
    GetAllNodesResponse:
      type: object
      required:
      - items
      properties:
        metadata:
          $ref: '#/components/schemas/SearchMetadata'
        items:
          type: array
          items:
            $ref: '#/components/schemas/Node'
    EnclaveInfo:
      type: object
      description: Info on a application enclave.
      required:
      - mrenclave
      - mrsigner
      - isvsvn
      - isvprodid
      properties:
        mrenclave:
          type: string
          description: mrenclave of an image, as a hex string.
        mrsigner:
          type: string
          description: mrsigner of an image, as a hex string.
        isvprodid:
          type: integer
          format: int32
          description: ISV Product Id.
        isvsvn:
          type: integer
          format: int32
          description: ISV Security Version Number.
    ImageAttributes:
      type: object
      minProperties: 0
      maxProperties: 1
      x-derive-default: true
      properties:
        sgx:
          description: SGX1/SGX2 Enclave Attributes
          $ref: '#/components/schemas/SgxAttributes'
        nitro_enclave:
          description: AWS Nitro Enclave Attributes
          $ref: '#/components/schemas/NitroEnclaveAttributes'
        aci:
          description: Azure ACI Policy Attributes
          $ref: '#/components/schemas/AciAttributes'
        azure_cvm:
          description: Azure Confidential VM Attributes
          $ref: '#/components/schemas/AzureCvmAttributes'
        baremetal_tdx:
          description: Baremetal TDX Enclave Attributes
          $ref: '#/components/schemas/BaremetalTdxAttributes'
        baremetal_amd_sev_snp:
          description: Baremetal AMD SEV-SNP Enclave Attributes
          $ref: '#/components/schemas/BaremetalAmdSevSnpAttributes'
    Node:
      type: object
      required:
      - name
      - node_id
      - acct_id
      - status
      - apps
      - sgx_info
      properties:
        name:
          type: string
          description: Name of the compute node.
        description:
          type: string
          description: Description of the compute node.
        acct_id:
          type: string
          format: uuid
          description: The account ID of the account that this compute node belongs to.
        ipaddress:
          type: string
          description: IP Address of the compute node.
        node_id:
          type: string
          format: uuid
          description: UUID for the compute node.
        zone_id:
          type: string
          format: uuid
          description: Zone ID of the zone this compute node belongs to.
        status:
          $ref: '#/components/schemas/NodeStatus'
        attested_at:
          type: integer
          format: int64
          description: The compute node attestation date.
        certificate:
          type: string
          description: The compute node attestation certificate
        apps:
          type: array
          description: Apps associated with the compute node.
          items:
            $ref: '#/components/schemas/AppNodeInfo'
        sgx_info:
          $ref: '#/components/schemas/SgxInfo'
        sys_info:
          $ref: '#/components/schemas/NodeSysInfo'
        labels:
          type: object
          additionalProperties:
            type: string
        platform:
          type: string
          description: Platform information of the compute node.
        attestation_type:
          type: string
          description: Node Attestation type (DCAP, NITRO_ENCLAVE or AMD_SEV_SNP).
        error_report:
          $ref: '#/components/schemas/NodeErrorReport'
    NodeSysInfo:
      type: object
      required:
      - epc_size
      - num_cpu_cores
      description: System Related details of a compute node.
      properties:
        epc_size:
          type:
          - integer
          - 'null'
          format: int64
          description: Size of EPC of the compute node in bytes.
        num_cpu_cores:
          x-aliases:
          - num_cpu
          type: integer
          format: int32
          description: Number of CPU cores of the compute node.
        total_memory:
          type:
          - integer
          - 'null'
          format: int64
          description: Total available memory of the compute node in bytes. Populated for TDX nodes; null for SGX and other node types.
    AppNodeInfo:
      type: object
      required:
      - certificate
      - created_at
      - node_id
      description: Detailed info of an app running on a compute node.
      properties:
        certificate:
          $ref: '#/components/schemas/Certificate'
        created_at:
          type: integer
          format: int64
          description: App compute node creation time.
        node_id:
          type: string
          format: uuid
          description: Compute Node Id.
        node_name:
          type: string
          description: Compute Node Name.
        status:
          $ref: '#/components/schemas/AppStatus'
        build_info:
          $ref: '#/components/schemas/Build'
        message_count:
          type: integer
          format: int32
          description: App heartbeat message count.
        key_id:
          type: string
          description: Key Id for app heartbeat.
        is_debug:
          type: boolean
          description: App running in debug mode or not.
    CertificateStatusType:
      type: string
      description: Certificate status.
      enum:
      - PENDING
      - REJECTED
      - ISSUED
      - REVOKED
      - EXPIRED
    HashAlgorithm:
      type: string
      enum:
      - SHA256
    NitroEnclaveAttributes:
      type: object
      required:
      - hash_algorithm
      - pcr0
      - pcr1
      - pcr2
      properties:
        hash_algorithm:
          $ref: '#/components/schemas/NitroEnclaveHashAlgorithm'
        pcr0:
          type: string
          description: A contiguous measure of the contents of the image file, without the section data as a hex string.
        pcr1:
          type: string
          description: A contiguous measure of the contents of the image file, without the section data as a hex string.
        pcr2:
          type: string
          description: A contiguous measure of the contents of the image file, without the section data as a hex string.
    SgxAttributes:
      type: object
      required:
      - mrenclave
      properties:
        mrenclave:
          type: string
          description: mrenclave as a hex string.
        features:
          type: array
          uniqueItems: true
          items:
            type: string
    AciAttributes:
      type: object
      description: ACI generated policy that represents the containers to run and other security restrictions.
      required:
      - policy
      properties:
        policy:
          type: string
          description: Base64-encoded output of azure confcom acipolicygen tool.
    Build:
      type: object
      description: Detailed info of an application image.
      required:
      - status
      properties:
        build_id:
          type: string
          format: uuid
          description: Image Id.
        docker_info:
          $ref: '#/components/schemas/DockerInfo'
        created_at:
          type: integer
          format: int64
          description: Timestamp of image addition to the system (number of seconds since epoch).
        updated_at:
          type: integer
          format: int64
          description: Timestamp of when the image was updated (number of seconds since epoch).
        app_id:
          type: string
          format: uuid
          description: App Id.
        app_name:
          type: string
          description: App name.
        status:
          $ref: '#/components/schemas/BuildStatus'
        deployment_status:
          $ref: '#/components/schemas/BuildDeploymentStatus'
        enclave_info:
          $ref: '#/components/schemas/EnclaveInfo'
        attributes:
          type: object
          description: Image attributes
          additionalProperties:
            $ref: '#/components/schemas/ImageAttributes'
        app_description:
          type: string
          description: App Description.
        mem_size:
          type: integer
          format: int64
          description: Memory size required for the image.
        threads:
          type: integer
          format: int32
          description: Threads required for the image.
        advanced_settings:
          $ref: '#/components/schemas/AdvancedSettings'
        build_name:
          type: string
          description: image name if curated app.
        pending_task_id:
          type: string
          format: uuid
          description: UUID of pending build whitelist task for the build
        configs:
          type: object
          description: Application configurations attached to the image.
          additionalProperties:
            type:
            - object
            - 'null'
        marketplace_build_id:
          type: string
          format: uuid
          description: Id of the corresponding marketplace listing.
        launch_hint:
          $ref: '#/components/schemas/LaunchHint'
        enable_overlay_filesystem_persistence:
          type: boolean
          description: Flag indicating if file persistence is enabled. This is only for Nitro Enclaves.
        group_id:
          type: string
          format: uuid
          description: Group Id
    BuildDeploymentStatus:
      type: object
      required:
      - status
      - status_updated_at
      properties:
        status:
          $ref: '#/components/schemas/BuildDeploymentStatusType'
        status_updated_at:
          type: integer
          format: int64
          description: The time when the deployment status changed.
    CertificateConfig:
      type: object
      properties:
        issuer:
          type: string
          description: Certificate issuance strategy
          default: MANAGER_CA
          enum:
          - MANAGER_CA
          - NODE
          - SELF_IAS
        subject:
          type: string
          description: Certificate subject common name, typically a DNS name
        keyType:
          type: string
          description: Type of key to generate
          default: RSA
          enum:
          - RSA
        keyParam:
          type: object
          description: 'Key parameters. Currently must be an instance of RsaKeyParam, but other types may be supported in the future.

            '
        keyPath:
          type: string
          description: Path to expose the key in the application filesystem
        certPath:
          type: string
          description: Path to expose the certificate in the application filesystem
    TaskResult:
      type: object
      properties:
        task_id:
          type: string
          format: uuid
          description: Task Id
        certificate_id:
          type: string
          format: uuid
          description: Certificate Id in case of certificate issuance task.
        node_id:
          type: string
          format: uuid
          description: Compute Node Id.
        task_type:
          $ref: '#/components/schemas/TaskType'
        task_status:
          $ref: '#/components/schemas/TaskStatus'
        build_id:
          type: string
          format: uuid
          description: Build Id.
    AzureCvmAttributes:
      type: object
      required:
      - pcrs
      - coprocessors
      properties:
        pcrs:
          type: object
          description: List of TPM PCRs hash values to enforce. 64 hex characters
          required:
          - hash_alg
          properties:
            hash_alg:
              $ref: '#/components/schemas/HashAlgorithm'
            pcr0:
              type: string
            pcr1:
              type: string
            pcr2:
              type: string
            pcr3:
              type: string
            pcr4:
              type: string
            pcr5:
              type: string
            pcr6:
              type: string
            pcr7:
              type: string
            pcr8:
              type: string
            pcr9:
              type: string
            pcr10:
              type: string
            pcr11:
              type: string
            pcr12:
              type: string
            pcr13:
              type: string
            pcr14:
              type: string
            pcr15:
              type: string
            pcr16:
              type: string
            pcr17:
              type: string
            pcr18:
              type: string
            pcr19:
              type: string
            pcr20:
              type: string
            pcr21:
              type: string
            pcr22:
              type: string
        coprocessors:
          type: array
          items:
            $ref: '#/components/schemas/Coprocessor'
    Certificate:
      description: A certificate request or issued certificate.
      type: object
      properties:
        certificate_id:
          type: string
          format: uuid
          description: Certificate ID.
        status:
          $ref: '#/components/schemas/CertificateStatusType'
        csr:
          type: string
          description: The certificate signing request.
        certificate:
          type: string
          description: The certificate itself, if issued.
        node_id:
          type: string
          format: uuid
          description: The node relevant to this certificate, if known.
        app_id:
          type: string
          format: uuid
          description: The app relevant to this certificate, if known.
        build_id:
          type: string
          format: uuid
          description: The build relevant to this certificate, if known.
    AppStatus:
      type: object
      description: Run status info of an app for a compute node.
      properties:
        status:
          $ref: '#/components/schemas/AppStatusType'
        status_updated_at:
          type: integer
          format: int64
          description: Time since the status change.
        attested_at:
          type: integer
          format: int64
          description: The app attestation date.
    AttestationRequest:
      type: object
      required:
      - csr
      properties:
        ias_quote:
          type: string
          format: binary
          description: IAS (EPID/DCAP) Quote report bytes.
        csr:
          type: string
          description: Certificate Signing Request bytes.
        attestation_type:
          type: string
          description: Node Attestation type (DCAP, NITRO_ENCLAVE, AMD_SEV_SNP, BAREMETAL_AMD_SEV_SNP or BAREMETAL_TDX).
    AdvancedSettings:
      type: object
      description: Advanced settings for apps and images.
      properties:
        entrypoint:
          type: array
          items:
            type: string
          description: Entrypoint for the container.
        encryptedDirs:
          type: array
          items:
            type: string
          description: "List of read-write files and/or directories which are encrypted using the enclave sealing key\nDefault encrypted directories - enclave-os protects the content in these files by encrypting them using the enclave sealing key. Anyone is allowed to read from or write to these files but only the enclave application can see it's contents in plain text.\n  - /tmp\n  - /run\n  - /ftx-efs\n  - /opt/fortanix/enclave-os/app-config/rw\nTips while debugging -> The default encrypted directories visible to the guest application as /tmp, /run and /ftx-efs are available in the container filesystem at /opt/fortanix/enclave-os/default-efs-dirs/.\n"
        certificate:
          $ref: '#/components/schemas/CertificateConfig'
        java_runtime:
          $ref: '#/components/schemas/JavaRuntime'
          description: Java runtime mode.
        rw_dirs:
          type: array
          items:
            type: string
          description: "List of read-write files and/or directories\nDefault read-write directories - enclave-os doesn't provide any security measures for these files and anyone is allowed to read from or write to these files.\n  - /etc/hosts\n  - /etc/resolv.conf\n  - /etc/hostname\n"
        allowCmdlineArgs:
          type: boolean
          description: Allow command line arguments converter flag for an image.
        manifestEnv:
          type: array
          items:
            type: string
          description: Environment variables that will be passed to the manifest file when the container is converted.
        mutableEnv:
          type: array
          items:
            type: string
          description: 'Environment variables with supplied default values, but that may be overridden at runtime.

            '
    BaremetalAmdSevSnpAttributes:
      type: object
      required:
      - measurement
      - vmpl
      - coprocessors
      properties:
        measurement:
          type: string
          description: Guest Launch Measurement as hex string
        vmpl:
          type: string
          description: Virtual Machine Privilege Level
          $ref: '#/components/schemas/AmdSevSnpVmpl'
        coprocessors:
          type: array
          items:
            $ref: '#/components/schemas/Coprocessor'
    TaskStatusType:
      type: string
      description: Status string for a task.
      enum:
      - INPROGRESS
      - FAILED
      - SUCCESS
      - DENIED
    NodeStatusType:
      type: string
      description: Status string for the compute node.
      enum:
      - RUNNING
      - STOPPED
      - FAILED
      - DEACTIVATE

# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/fortanix/refs/heads/main/openapi/fortanix-node-api-openapi.yml