Seqera Labs admin API
The admin API from Seqera Labs — 3 operation(s) for admin.
The admin API from Seqera Labs — 3 operation(s) for admin.
openapi: 3.0.1
info:
contact:
email: info@seqera.io
url: https://seqera.io
description: Seqera Platform services API
title: Seqera actions admin API
version: 1.181.0
tags:
- name: admin
paths:
/admin/audit-logs-v2:
get:
description: Lists audit logs with token-based pagination, ordered by timestamp (descending). Supports filtering by timestamp range.
operationId: ListAuditLogsV2
parameters:
- description: Additional attribute values to include in the response (`state` for pre/post image payloads).
explode: false
in: query
name: attributes
schema:
items:
$ref: '#/components/schemas/AuditLogV2QueryAttribute'
type: array
- description: Token for retrieving the next page of results
in: query
name: nextPageToken
schema:
type: string
- description: Maximum number of records to return in the page
in: query
name: max
schema:
format: int32
type: integer
- description: Filter logs with timestamp on or after this date
in: query
name: timestampAfterOrEqual
schema:
format: date-time
type: string
- description: Filter logs with timestamp on or before this date
in: query
name: timestampBeforeOrEqual
schema:
format: date-time
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/ListAuditLogV2Response'
description: OK
'400':
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
description: Bad request
'403':
description: Operation not allowed
security:
- BearerAuth: []
summary: List audit logs (v2)
tags:
- admin
/admin/audit-logs-v2/export-csv:
get:
description: Exports audit log entries as a CSV file. Supports filtering by timestamp range. Fails if the number of matching logs exceeds a certain maximum.
operationId: ExportAuditLogsV2Csv
parameters:
- description: Additional attribute values to include in the response (`state` for pre/post image payloads).
explode: false
in: query
name: attributes
schema:
items:
$ref: '#/components/schemas/AuditLogV2QueryAttribute'
type: array
- description: Filter logs with timestamp on or after this date
in: query
name: timestampAfterOrEqual
schema:
format: date-time
type: string
- description: Filter logs with timestamp on or before this date
in: query
name: timestampBeforeOrEqual
schema:
format: date-time
type: string
responses:
'200':
content:
text/csv:
schema:
format: binary
type: string
description: OK
'400':
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
description: Bad request
'403':
description: Operation not allowed
security:
- BearerAuth: []
summary: Export audit logs (v2) as CSV
tags:
- admin
/admin/audit-logs-v2/{auditLogId}:
get:
description: Retrieves the pre/post change images associated with a specific audit log V2 record.
operationId: DescribeAuditLogV2
parameters:
- description: Audit log V2 record ID
in: path
name: auditLogId
required: true
schema:
format: int64
type: integer
- description: Additional attribute values to include in the response (`state` for pre/post change images). Returns an empty value if omitted.
explode: false
in: query
name: attributes
schema:
items:
$ref: '#/components/schemas/AuditLogV2QueryAttribute'
type: array
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/AuditLogV2ResponseDto'
description: OK
'403':
description: Operation not allowed
'404':
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
description: Not found
security:
- BearerAuth: []
summary: Describe a single audit log (v2)
tags:
- admin
components:
schemas:
CreditInfoImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
contractId:
type: string
customerId:
type: string
hasCreditGrant:
type: boolean
required:
- auditImageType
title: Credit info audit image
type: object
TeamImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
avatarId:
type: string
description:
type: string
name:
type: string
required:
- auditImageType
title: Team audit image
type: object
ListAuditLogV2Response:
properties:
auditLogs:
items:
$ref: '#/components/schemas/AuditLogV2ResponseDto'
type: array
nextPageToken:
type: string
type: object
WfFusionMeta:
properties:
enabled:
type: boolean
version:
maxLength: 20
type: string
type: object
AzureCloudKeys:
allOf:
- $ref: '#/components/schemas/AzureSecurityKeys'
- properties:
clientId:
type: string
clientSecret:
type: string
writeOnly: true
discriminator:
type: string
storageName:
type: string
subscriptionId:
type: string
tenantId:
type: string
type: object
title: Azure Cloud credentials
type: object
AuditImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
type: object
DataStudioImage:
properties:
appliedLifespanHours:
format: int32
type: integer
auditImageType:
$ref: '#/components/schemas/AuditImageType'
baseImage:
type: string
computeEnvId:
type: string
condaEnvironment:
type: string
connectVersion:
type: string
description:
type: string
effectiveLifespanHours:
format: int32
type: integer
environment:
type: string
initialCheckpointId:
format: int64
type: integer
initialSessionId:
type: string
isPrivate:
type: boolean
lastHeartbeat:
format: date-time
type: string
lastStarted:
format: date-time
type: string
name:
type: string
remoteConfigCloneEnabled:
type: boolean
remoteConfigClonePath:
type: string
remoteConfigCommitHash:
type: string
remoteConfigRepository:
type: string
remoteConfigRevision:
type: string
requiredCpus:
format: int64
type: integer
requiredGpus:
format: int64
type: integer
requiredMemory:
format: int64
type: integer
runningOperationId:
type: string
sshEnabled:
type: boolean
status:
type: string
statusMessage:
type: string
stopReason:
type: string
templateIcon:
type: string
templatePort:
format: int32
type: integer
templateUrl:
type: string
tool:
type: string
userId:
format: int64
type: integer
waveBuildId:
type: string
required:
- auditImageType
title: Data Studio audit image
type: object
Action.ConfigType:
discriminator:
mapping:
bucket: '#/components/schemas/BucketActionConfig'
cron: '#/components/schemas/CronActionConfig'
github: '#/components/schemas/GithubActionConfig'
tower: '#/components/schemas/Action.TowerActionConfig'
propertyName: discriminator
oneOf:
- $ref: '#/components/schemas/Action.TowerActionConfig'
- $ref: '#/components/schemas/GithubActionConfig'
- $ref: '#/components/schemas/BucketActionConfig'
- $ref: '#/components/schemas/CronActionConfig'
properties:
discriminator:
type: string
type: object
AzureEntraKeys:
allOf:
- $ref: '#/components/schemas/AzureSecurityKeys'
- properties:
clientId:
type: string
clientSecret:
type: string
writeOnly: true
discriminator:
type: string
tenantId:
type: string
type: object
title: Azure Entra credentials
type: object
OrgIdpGroupSource:
enum:
- SCIM
- MANUAL
type: string
LocalComputeConfig:
allOf:
- $ref: '#/components/schemas/ComputeConfig'
- properties:
fusion2Enabled:
type: boolean
schedConfig:
$ref: '#/components/schemas/SchedConfig'
schedEnabled:
type: boolean
waveEnabled:
type: boolean
type: object
title: Local execution configuration
type: object
LsfComputeConfig:
allOf:
- $ref: '#/components/schemas/AbstractGridConfig'
- properties:
perJobMemLimit:
type: boolean
perTaskReserve:
type: boolean
unitForLimits:
type: string
type: object
title: IBM LSF configuration
type: object
EksComputeConfig:
allOf:
- $ref: '#/components/schemas/K8sComputeConfig'
- properties:
clusterName:
description: The AWS EKS cluster name
type: string
fusion2Enabled:
type: boolean
region:
description: AWS region
type: string
waveEnabled:
type: boolean
type: object
title: Amazon EKS cluster configuration
type: object
AuditLogTargetStateMetadataStatus:
enum:
- RECORDED
- UNRECORDED
- UNAPPLICABLE
type: string
CustomRoleImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
contextType:
type: string
description:
type: string
name:
type: string
permissions:
items:
type: string
type: array
required:
- auditImageType
title: Custom role audit image
type: object
SchedConfig:
properties:
backendStrategy:
description: Backend used by Intelligent Compute to run tasks. 'ECS' (AWS only, default) delegates task execution to AWS ECS; 'EC2' (AWS only) runs tasks directly on AWS EC2 instances; 'VM' runs tasks on cloud VMs (provider-agnostic).
enum:
- ECS
- EC2
- VM
type: string
diskAllocation:
type: string
fusionSnapshots:
description: Enable Fusion snapshots so interrupted (e.g. spot-reclaimed) tasks can resume from a snapshot instead of restarting from scratch.
type: boolean
machineTypes:
description: EC2 instance types for compute nodes. Leave empty to automatically select the most cost-effective types for each task.
items:
type: string
type: array
nvmeEnabled:
description: When true, only use instance types providing local SSD (NVMe) storage. Maps to diskAllocation='nvme'.
type: boolean
pool:
allOf:
- $ref: '#/components/schemas/SchedConfig.Pool'
description: Warm-pool configuration. When present and enabled, the scheduler maintains a pool of idle VMs ready to absorb incoming tasks with sub-5s start latency.
predictionModel:
description: 'Resource-prediction model used by Intelligent Compute to size tasks. Suggested values: ''none'' (default), ''qr/v1'', ''qr/v2''. Any other string is accepted.'
type: string
provisioningModel:
enum:
- spot
- spotFirst
- ondemand
type: string
type: object
LabelImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
dynamic:
type: boolean
isDefault:
type: boolean
name:
type: string
resource:
type: boolean
value:
type: string
required:
- auditImageType
title: Label audit image
type: object
AuditLogV2ResponseDto.ResourceUser:
properties:
id:
format: int64
type: integer
name:
type: string
type: object
LaunchImage:
properties:
commitId:
type: string
computeEnvId:
type: string
configProfiles:
items:
type: string
type: array
configText:
type: string
defaultTemplate:
type: boolean
entryName:
type: string
headJobCpus:
format: int32
type: integer
headJobMemoryMb:
format: int32
type: integer
id:
type: string
launchContainer:
type: string
mainScript:
type: string
optimizationId:
type: string
optimizationTargets:
type: string
paramsText:
type: string
pipeline:
type: string
pipelineSchemaId:
format: int64
type: integer
postRunScript:
type: string
preRunScript:
type: string
pullLatest:
type: boolean
resume:
type: boolean
revision:
type: string
schemaName:
type: string
sessionId:
type: string
sourceTemplateId:
type: string
stubRun:
type: boolean
towerConfig:
type: string
userSecrets:
type: string
versionName:
type: string
workDir:
type: string
workspaceSecrets:
type: string
type: object
DataLinkFileImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
provider:
type: string
uri:
type: string
required:
- auditImageType
title: Data-link file operation audit image
type: object
AuditActor.ActorType:
enum:
- user
- system
type: string
x-enum-varnames:
- user
- system
CronActionConfig:
allOf:
- $ref: '#/components/schemas/Action.ConfigType'
- properties:
expression:
type: string
preset:
type: string
timezone:
type: string
type: object
title: Cron action config
type: object
AwsSecurityKeys:
allOf:
- $ref: '#/components/schemas/SecurityKeys'
- properties:
accessKey:
type: string
assumeRoleArn:
type: string
discriminator:
type: string
externalId:
type: string
mode:
$ref: '#/components/schemas/AwsCredentialsMode'
secretKey:
type: string
writeOnly: true
type: object
title: AWS credentials
type: object
Action.EventType:
discriminator:
mapping:
bucket: '#/components/schemas/BucketActionEvent'
cron: '#/components/schemas/CronActionEvent'
github: '#/components/schemas/GithubActionEvent'
tower: '#/components/schemas/Action.TowerActionEvent'
propertyName: discriminator
oneOf:
- $ref: '#/components/schemas/GithubActionEvent'
- $ref: '#/components/schemas/Action.TowerActionEvent'
- $ref: '#/components/schemas/BucketActionEvent'
- $ref: '#/components/schemas/CronActionEvent'
properties:
discriminator:
type: string
timestamp:
format: date-time
type: string
type: object
DataLinkImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
creationSource:
type: string
credentialsId:
type: string
description:
type: string
message:
type: string
name:
type: string
provider:
type: string
publicAccessible:
type: boolean
region:
type: string
resourceRef:
type: string
status:
type: string
type:
type: string
required:
- auditImageType
title: Data-link audit image
type: object
AzCloudConfig:
allOf:
- $ref: '#/components/schemas/ComputeConfig'
- properties:
dataCollectionEndpoint:
type: string
dataCollectionRuleId:
type: string
deletedResources:
items:
$ref: '#/components/schemas/Map.Entry_String.String_'
readOnly: true
type: array
forgedResources:
items:
$ref: '#/components/schemas/Map.Entry_String.String_'
type: array
fusion2Enabled:
type: boolean
instanceType:
type: string
logTableName:
type: string
logWorkspaceId:
type: string
managedIdentityClientId:
type: string
managedIdentityId:
type: string
networkId:
type: string
region:
type: string
resourceGroup:
type: string
schedConfig:
$ref: '#/components/schemas/SchedConfig'
schedEnabled:
type: boolean
subnets:
items:
type: string
type: array
subscriptionId:
type: string
waveEnabled:
type: boolean
type: object
title: Azure Cloud configuration
type: object
AuditLogV2QueryAttribute:
enum:
- state
type: string
x-enum-varnames:
- state
CredentialsImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
baseUrl:
type: string
category:
type: string
description:
type: string
keys:
$ref: '#/components/schemas/SecurityKeys'
lastUsed:
format: date-time
type: string
message:
type: string
name:
type: string
provider:
type: string
status:
type: string
required:
- auditImageType
title: Credentials audit image
type: object
OAuthConsentImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
scopes:
type: string
required:
- auditImageType
title: OAuth consent audit image
type: object
AwsCloudConfig:
allOf:
- $ref: '#/components/schemas/ComputeConfig'
- properties:
allowBuckets:
items:
type: string
type: array
arm64Enabled:
type: boolean
deletedResources:
items:
additionalProperties:
type: object
type: object
readOnly: true
type: array
ebsBootSize:
format: int32
type: integer
ebsEncrypted:
description: When true, the boot EBS volume of provisioned instances is encrypted. Null/absent (the default) is treated as false — no encryption.
type: boolean
ebsKmsKeyId:
description: Optional KMS key ARN used to encrypt the boot EBS volume. Only applied when ebsEncrypted is true. When omitted, the account/region default EBS encryption key is used.
type: string
ec2KeyPair:
type: string
forgedResources:
items:
additionalProperties:
type: object
type: object
type: array
fusion2Enabled:
type: boolean
gpuEnabled:
type: boolean
imageId:
type: string
instanceProfileArn:
type: string
instanceType:
type: string
logGroup:
type: string
region:
type: string
schedConfig:
$ref: '#/components/schemas/SchedConfig'
schedEnabled:
type: boolean
securityGroups:
items:
type: string
type: array
subnetId:
deprecated: true
description: DEPRECATED — use subnetIds. Kept in sync with the first element of subnetIds.
type: string
subnetIds:
description: Subnets to launch into. Basic uses the first; Intelligent Compute may use all.
items:
type: string
type: array
vpcId:
description: The VPC used to scope subnet and security-group selection.
type: string
waveEnabled:
type: boolean
type: object
title: AWS Cloud configuration
type: object
AzBatchForgeConfig:
properties:
autoScale:
type: boolean
bootDiskSizeGB:
description: Boot disk size in GB for all pool nodes. When omitted, Azure uses the default disk size for the selected VM image. Per-pool values in headPool/workerPool take precedence in dual-pool mode.
example: 100
format: int32
maximum: 4095
minimum: 50
nullable: true
type: integer
containerRegIds:
items:
type: string
type: array
disposeOnDeletion:
type: boolean
dualPoolConfig:
type: boolean
headPool:
allOf:
- $ref: '#/components/schemas/AzBatchPoolConfig'
description: Head pool configuration for dual pool mode
vmCount:
format: int32
type: integer
vmType:
type: string
workerPool:
allOf:
- $ref: '#/components/schemas/AzBatchPoolConfig'
description: Worker pool configuration for dual pool mode
type: object
ActionImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
config:
$ref: '#/components/schemas/Action.ConfigType'
error:
type: string
event:
$ref: '#/components/schemas/Action.EventType'
hookId:
type: string
hookUrl:
type: string
lastSeen:
format: date-time
type: string
launch:
$ref: '#/components/schemas/LaunchImage'
name:
type: string
source:
type: string
status:
type: string
required:
- auditImageType
title: Action audit image
type: object
GithubActionEvent:
allOf:
- $ref: '#/components/schemas/Action.EventType'
- properties:
commitId:
type: string
commitMessage:
type: string
pusherEmail:
type: string
pusherName:
type: string
ref:
type: string
type: object
title: GitHub action event
type: object
SSHSecurityKeys:
allOf:
- $ref: '#/components/schemas/SecurityKeys'
- properties:
discriminator:
type: string
passphrase:
type: string
writeOnly: true
privateKey:
type: string
writeOnly: true
type: object
title: SSH credentials
type: object
DatasetImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
description:
type: string
hidden:
type: boolean
lastUpdatedById:
format: int64
type: integer
mediaType:
type: string
name:
type: string
sourceType:
type: string
required:
- auditImageType
title: Dataset audit image
type: object
AuditLogV2ResponseDto:
properties:
actor:
$ref: '#/components/schemas/AuditLogV2ResponseDto.Actor'
client:
$ref: '#/components/schemas/AuditLogV2ResponseDto.Client'
correlationId:
type: string
event:
$ref: '#/components/schemas/AuditEventType'
id:
type: string
target:
$ref: '#/components/schemas/AuditLogV2ResponseDto.Target'
timestamp:
format: date-time
type: string
type: object
GithubActionConfig:
allOf:
- $ref: '#/components/schemas/Action.ConfigType'
- properties:
events:
items:
type: string
type: array
type: object
title: GitHub action config
type: object
BitBucketSecurityKeys:
allOf:
- $ref: '#/components/schemas/GitKeys'
- properties:
discriminator:
type: string
password:
type: string
writeOnly: true
token:
type: string
writeOnly: true
username:
type: string
type: object
title: BitBucket credentials
type: object
OrganizationImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
description:
type: string
fullName:
type: string
location:
type: string
logoId:
type: string
name:
type: string
type:
$ref: '#/components/schemas/OrgType'
website:
type: string
required:
- auditImageType
title: Organization audit image
type: object
AgentSecurityKeys:
allOf:
- $ref: '#/components/schemas/SecurityKeys'
- properties:
connectionId:
type: string
discriminator:
type: string
shared:
type: boolean
workDir:
type: string
type: object
title: Tower Agent credentials
type: object
ComputeEnvImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
config:
$ref: '#/components/schemas/ComputeConfig'
credentialsId:
type: string
description:
type: string
fusionMetricsCollectionEnabled:
type: boolean
lastUsed:
format: date-time
type: string
managedIdentityId:
format: int64
type: integer
message:
type: string
name:
type: string
platform:
type: string
primary:
type: boolean
status:
type: string
required:
- auditImageType
title: Compute environment audit image
type: object
SeqeraComputeCloudInstanceTypeSize:
enum:
- SMALL
- MEDIUM
- LARGE
type: string
CronActionEvent:
allOf:
- $ref: '#/components/schemas/Action.EventType'
- properties:
scheduledTime:
format: date-time
type: string
workflowId:
type: string
type: object
title: Cron action event
type: object
AuditLogV2ResponseDto.ResourceOrganization:
properties:
id:
format: int64
type: integer
name:
type: string
type: object
UserRoleImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
context:
type: string
customRoleId:
format: int64
type: integer
organizationId:
format: int64
type: integer
role:
type: string
teamId:
format: int64
type: integer
userId:
format: int64
type: integer
workspaceId:
format: int64
type: integer
required:
- auditImageType
title: User role audit image
type: object
Visibility:
enum:
- PRIVATE
- SHARED
type: string
ContainerRegistryKeys:
allOf:
- $ref: '#/components/schemas/SecurityKeys'
- properties:
discriminator:
type: string
password:
type: string
writeOnly: true
registry:
type: string
userName:
type: string
type: object
title: Container registry credentials
type: object
TeamMemberImage:
properties:
auditImageType:
$ref: '#/components/schemas/AuditImageType'
memberId:
format: int64
type: integer
teamId:
format: int64
type: integer
userId:
format: int64
type: integer
required:
- auditImageType
title: Team member audit image
type: object
WspRole:
enum:
- owner
- admin
- maintain
- launch
- connect
- view
type: string
x-enum-varnames:
- owner
- admin
- maintain
- launch
- connect
- view
BucketActionConfig:
allOf:
- $ref: '#/components/schemas/Action.ConfigType'
- properties:
bucketName:
type: string
dataLinkId:
type: string
datasetId:
type: string
events:
items:
type: string
type: array
filter:
type: string
markerFile:
type: string
subscriptionArn:
type: string
topicArn:
type: string
type: object
title: Bucket action config
type: object
ComputeConfig:
discriminator:
mapping:
altair-platform: '#/components/schemas/AltairPbsComputeConfig'
aws-batch: '#/components/schemas/AwsBatchConfig'
aws-cloud: '#/components/schemas/AwsCloudConfig'
azure-batch: '#/components/schemas/AzBatchConfig'
azure-cloud: '#/components/schemas/AzCloudConfig'
eks-platform: '#/components/schemas/EksComputeConfig'
gke-platform: '#/components/schemas/GkeComputeConfig'
google-batch: '#/components/schemas/GoogleBatchConfig'
google-cloud: '#/components/schemas/GoogleCloudConfig'
google-lifesciences: '#/components/schemas/GoogleLifeSciencesConfig'
k8s-platform: '#/components/schemas/K8sComputeConfig'
local-platform: '#/components/schemas/LocalComputeConfig'
lsf-platform: '#/components/schemas/LsfComputeConfig'
moab-platform: '#/components/schemas/MoabComputeConfig'
seqeracompute-platform: '#/components/schemas/SeqeraComputeConfig'
slurm-platform: '#/components/schemas/SlurmComputeConfig'
uge-platform: '#/components/schemas/UnivaComputeConfig'
propertyName: discriminator
oneOf:
- $ref: '#/components/schemas/AwsBatchConfig'
- $ref: '#/components/
# --- truncated at 32 KB (91 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/openapi/seqera-labs-admin-api-openapi.yml