/api/admin/account-lookup | plain | DELETE | admin-spa = deny
/api/admin/account-lookup | plain | DELETE | cua-cli = deny
/api/admin/account-lookup | plain | DELETE | dcr-client = deny
/api/admin/account-lookup | plain | DELETE | empty-sub = deny
/api/admin/account-lookup | plain | DELETE | github-oidc = deny
/api/admin/account-lookup | plain | DELETE | oauth2-proxy = deny
/api/admin/account-lookup | plain | DELETE | per-key-other-ns = deny
/api/admin/account-lookup | plain | DELETE | per-key-owned-ns = deny
/api/admin/account-lookup | plain | DELETE | spa = deny
/api/admin/account-lookup | plain | DELETE | user-key = deny
/api/admin/account-lookup | plain | DELETE | user-key-verified = deny
/api/admin/account-lookup | plain | GET | admin-spa = deny
/api/admin/account-lookup | plain | GET | cua-cli = deny
/api/admin/account-lookup | plain | GET | dcr-client = deny
/api/admin/account-lookup | plain | GET | empty-sub = deny
/api/admin/account-lookup | plain | GET | github-oidc = deny
/api/admin/account-lookup | plain | GET | oauth2-proxy = deny
/api/admin/account-lookup | plain | GET | per-key-other-ns = deny
/api/admin/account-lookup | plain | GET | per-key-owned-ns = deny
/api/admin/account-lookup | plain | GET | spa = deny
/api/admin/account-lookup | plain | GET | user-key = deny
/api/admin/account-lookup | plain | GET | user-key-verified = deny
/api/admin/account-lookup | plain | PATCH | admin-spa = deny
/api/admin/account-lookup | plain | PATCH | cua-cli = deny
/api/admin/account-lookup | plain | PATCH | dcr-client = deny
/api/admin/account-lookup | plain | PATCH | empty-sub = deny
/api/admin/account-lookup | plain | PATCH | github-oidc = deny
/api/admin/account-lookup | plain | PATCH | oauth2-proxy = deny
/api/admin/account-lookup | plain | PATCH | per-key-other-ns = deny
/api/admin/account-lookup | plain | PATCH | per-key-owned-ns = deny
/api/admin/account-lookup | plain | PATCH | spa = deny
/api/admin/account-lookup | plain | PATCH | user-key = deny
/api/admin/account-lookup | plain | PATCH | user-key-verified = deny
/api/admin/account-lookup | plain | POST | admin-spa = allow
/api/admin/account-lookup | plain | POST | cua-cli = deny
/api/admin/account-lookup | plain | POST | dcr-client = deny
/api/admin/account-lookup | plain | POST | empty-sub = deny
/api/admin/account-lookup | plain | POST | github-oidc = deny
/api/admin/account-lookup | plain | POST | oauth2-proxy = deny
/api/admin/account-lookup | plain | POST | per-key-other-ns = deny
/api/admin/account-lookup | plain | POST | per-key-owned-ns = deny
/api/admin/account-lookup | plain | POST | spa = deny
/api/admin/account-lookup | plain | POST | user-key = deny
/api/admin/account-lookup | plain | POST | user-key-verified = deny
/api/admin/account-lookup | plain | QUERY | admin-spa = deny
/api/admin/account-lookup | plain | QUERY | cua-cli = deny
/api/admin/account-lookup | plain | QUERY | dcr-client = deny
/api/admin/account-lookup | plain | QUERY | empty-sub = deny
/api/admin/account-lookup | plain | QUERY | github-oidc = deny
/api/admin/account-lookup | plain | QUERY | oauth2-proxy = deny
/api/admin/account-lookup | plain | QUERY | per-key-other-ns = deny
/api/admin/account-lookup | plain | QUERY | per-key-owned-ns = deny
/api/admin/account-lookup | plain | QUERY | spa = deny
/api/admin/account-lookup | plain | QUERY | user-key = deny
/api/admin/account-lookup | plain | QUERY | user-key-verified = deny
/api/admin/feature-flags | plain | DELETE | admin-spa = allow
/api/admin/feature-flags | plain | DELETE | cua-cli = deny
/api/admin/feature-flags | plain | DELETE | dcr-client = deny
/api/admin/feature-flags | plain | DELETE | empty-sub = deny
/api/admin/feature-flags | plain | DELETE | github-oidc = deny
/api/admin/feature-flags | plain | DELETE | oauth2-proxy = deny
/api/admin/feature-flags | plain | DELETE | per-key-other-ns = deny
/api/admin/feature-flags | plain | DELETE | per-key-owned-ns = deny
/api/admin/feature-flags | plain | DELETE | spa = deny
/api/admin/feature-flags | plain | DELETE | user-key = deny
/api/admin/feature-flags | plain | DELETE | user-key-verified = deny
/api/admin/feature-flags | plain | GET | admin-spa = allow
/api/admin/feature-flags | plain | GET | cua-cli = deny
/api/admin/feature-flags | plain | GET | dcr-client = deny
/api/admin/feature-flags | plain | GET | empty-sub = deny
/api/admin/feature-flags | plain | GET | github-oidc = deny
/api/admin/feature-flags | plain | GET | oauth2-proxy = deny
/api/admin/feature-flags | plain | GET | per-key-other-ns = deny
/api/admin/feature-flags | plain | GET | per-key-owned-ns = deny
/api/admin/feature-flags | plain | GET | spa = deny
/api/admin/feature-flags | plain | GET | user-key = deny
/api/admin/feature-flags | plain | GET | user-key-verified = deny
/api/admin/feature-flags | plain | PATCH | admin-spa = allow
/api/admin/feature-flags | plain | PATCH | cua-cli = deny
/api/admin/feature-flags | plain | PATCH | dcr-client = deny
/api/admin/feature-flags | plain | PATCH | empty-sub = deny
/api/admin/feature-flags | plain | PATCH | github-oidc = deny
/api/admin/feature-flags | plain | PATCH | oauth2-proxy = deny
/api/admin/feature-flags | plain | PATCH | per-key-other-ns = deny
/api/admin/feature-flags | plain | PATCH | per-key-owned-ns = deny
/api/admin/feature-flags | plain | PATCH | spa = deny
/api/admin/feature-flags | plain | PATCH | user-key = deny
/api/admin/feature-flags | plain | PATCH | user-key-verified = deny
/api/admin/feature-flags | plain | POST | admin-spa = allow
/api/admin/feature-flags | plain | POST | cua-cli = deny
/api/admin/feature-flags | plain | POST | dcr-client = deny
/api/admin/feature-flags | plain | POST | empty-sub = deny
/api/admin/feature-flags | plain | POST | github-oidc = deny
/api/admin/feature-flags | plain | POST | oauth2-proxy = deny
/api/admin/feature-flags | plain | POST | per-key-other-ns = deny
/api/admin/feature-flags | plain | POST | per-key-owned-ns = deny
/api/admin/feature-flags | plain | POST | spa = deny
/api/admin/feature-flags | plain | POST | user-key = deny
/api/admin/feature-flags | plain | POST | user-key-verified = deny
/api/admin/feature-flags | plain | QUERY | admin-spa = allow
/api/admin/feature-flags | plain | QUERY | cua-cli = deny
/api/admin/feature-flags | plain | QUERY | dcr-client = deny
/api/admin/feature-flags | plain | QUERY | empty-sub = deny
/api/admin/feature-flags | plain | QUERY | github-oidc = deny
/api/admin/feature-flags | plain | QUERY | oauth2-proxy = deny
/api/admin/feature-flags | plain | QUERY | per-key-other-ns = deny
/api/admin/feature-flags | plain | QUERY | per-key-owned-ns = deny
/api/admin/feature-flags | plain | QUERY | spa = deny
/api/admin/feature-flags | plain | QUERY | user-key = deny
/api/admin/feature-flags | plain | QUERY | user-key-verified = deny
/api/admin/feature-flags/{key} | key | DELETE | admin-spa = allow
/api/admin/feature-flags/{key} | key | DELETE | cua-cli = deny
/api/admin/feature-flags/{key} | key | DELETE | dcr-client = deny
/api/admin/feature-flags/{key} | key | DELETE | empty-sub = deny
/api/admin/feature-flags/{key} | key | DELETE | github-oidc = deny
/api/admin/feature-flags/{key} | key | DELETE | oauth2-proxy = deny
/api/admin/feature-flags/{key} | key | DELETE | per-key-other-ns = deny
/api/admin/feature-flags/{key} | key | DELETE | per-key-owned-ns = deny
/api/admin/feature-flags/{key} | key | DELETE | spa = deny
/api/admin/feature-flags/{key} | key | DELETE | user-key = deny
/api/admin/feature-flags/{key} | key | DELETE | user-key-verified = deny
/api/admin/feature-flags/{key} | key | GET | admin-spa = allow
/api/admin/feature-flags/{key} | key | GET | cua-cli = deny
/api/admin/feature-flags/{key} | key | GET | dcr-client = deny
/api/admin/feature-flags/{key} | key | GET | empty-sub = deny
/api/admin/feature-flags/{key} | key | GET | github-oidc = deny
/api/admin/feature-flags/{key} | key | GET | oauth2-proxy = deny
/api/admin/feature-flags/{key} | key | GET | per-key-other-ns = deny
/api/admin/feature-flags/{key} | key | GET | per-key-owned-ns = deny
/api/admin/feature-flags/{key} | key | GET | spa = deny
/api/admin/feature-flags/{key} | key | GET | user-key = deny
/api/admin/feature-flags/{key} | key | GET | user-key-verified = deny
/api/admin/feature-flags/{key} | key | PATCH | admin-spa = allow
/api/admin/feature-flags/{key} | key | PATCH | cua-cli = deny
/api/admin/feature-flags/{key} | key | PATCH | dcr-client = deny
/api/admin/feature-flags/{key} | key | PATCH | empty-sub = deny
/api/admin/feature-flags/{key} | key | PATCH | github-oidc = deny
/api/admin/feature-flags/{key} | key | PATCH | oauth2-proxy = deny
/api/admin/feature-flags/{key} | key | PATCH | per-key-other-ns = deny
/api/admin/feature-flags/{key} | key | PATCH | per-key-owned-ns = deny
/api/admin/feature-flags/{key} | key | PATCH | spa = deny
/api/admin/feature-flags/{key} | key | PATCH | user-key = deny
/api/admin/feature-flags/{key} | key | PATCH | user-key-verified = deny
/api/admin/feature-flags/{key} | key | POST | admin-spa = allow
/api/admin/feature-flags/{key} | key | POST | cua-cli = deny
/api/admin/feature-flags/{key} | key | POST | dcr-client = deny
/api/admin/feature-flags/{key} | key | POST | empty-sub = deny
/api/admin/feature-flags/{key} | key | POST | github-oidc = deny
/api/admin/feature-flags/{key} | key | POST | oauth2-proxy = deny
/api/admin/feature-flags/{key} | key | POST | per-key-other-ns = deny
/api/admin/feature-flags/{key} | key | POST | per-key-owned-ns = deny
/api/admin/feature-flags/{key} | key | POST | spa = deny
/api/admin/feature-flags/{key} | key | POST | user-key = deny
/api/admin/feature-flags/{key} | key | POST | user-key-verified = deny
/api/admin/feature-flags/{key} | key | QUERY | admin-spa = allow
/api/admin/feature-flags/{key} | key | QUERY | cua-cli = deny
/api/admin/feature-flags/{key} | key | QUERY | dcr-client = deny
/api/admin/feature-flags/{key} | key | QUERY | empty-sub = deny
/api/admin/feature-flags/{key} | key | QUERY | github-oidc = deny
/api/admin/feature-flags/{key} | key | QUERY | oauth2-proxy = deny
/api/admin/feature-flags/{key} | key | QUERY | per-key-other-ns = deny
/api/admin/feature-flags/{key} | key | QUERY | per-key-owned-ns = deny
/api/admin/feature-flags/{key} | key | QUERY | spa = deny
/api/admin/feature-flags/{key} | key | QUERY | user-key = deny
/api/admin/feature-flags/{key} | key | QUERY | user-key-verified = deny
/api/analytics/attribution | plain | DELETE | admin-spa = deny
/api/analytics/attribution | plain | DELETE | cua-cli = deny
/api/analytics/attribution | plain | DELETE | dcr-client = deny
/api/analytics/attribution | plain | DELETE | empty-sub = deny
/api/analytics/attribution | plain | DELETE | github-oidc = deny
/api/analytics/attribution | plain | DELETE | oauth2-proxy = deny
/api/analytics/attribution | plain | DELETE | per-key-other-ns = deny
/api/analytics/attribution | plain | DELETE | per-key-owned-ns = deny
/api/analytics/attribution | plain | DELETE | spa = deny
/api/analytics/attribution | plain | DELETE | user-key = deny
/api/analytics/attribution | plain | DELETE | user-key-verified = deny
/api/analytics/attribution | plain | GET | admin-spa = deny
/api/analytics/attribution | plain | GET | cua-cli = deny
/api/analytics/attribution | plain | GET | dcr-client = deny
/api/analytics/attribution | plain | GET | empty-sub = deny
/api/analytics/attribution | plain | GET | github-oidc = deny
/api/analytics/attribution | plain | GET | oauth2-proxy = deny
/api/analytics/attribution | plain | GET | per-key-other-ns = deny
/api/analytics/attribution | plain | GET | per-key-owned-ns = deny
/api/analytics/attribution | plain | GET | spa = deny
/api/analytics/attribution | plain | GET | user-key = deny
/api/analytics/attribution | plain | GET | user-key-verified = deny
/api/analytics/attribution | plain | PATCH | admin-spa = deny
/api/analytics/attribution | plain | PATCH | cua-cli = deny
/api/analytics/attribution | plain | PATCH | dcr-client = deny
/api/analytics/attribution | plain | PATCH | empty-sub = deny
/api/analytics/attribution | plain | PATCH | github-oidc = deny
/api/analytics/attribution | plain | PATCH | oauth2-proxy = deny
/api/analytics/attribution | plain | PATCH | per-key-other-ns = deny
/api/analytics/attribution | plain | PATCH | per-key-owned-ns = deny
/api/analytics/attribution | plain | PATCH | spa = deny
/api/analytics/attribution | plain | PATCH | user-key = deny
/api/analytics/attribution | plain | PATCH | user-key-verified = deny
/api/analytics/attribution | plain | POST | admin-spa = allow
/api/analytics/attribution | plain | POST | cua-cli = deny
/api/analytics/attribution | plain | POST | dcr-client = deny
/api/analytics/attribution | plain | POST | empty-sub = deny
/api/analytics/attribution | plain | POST | github-oidc = deny
/api/analytics/attribution | plain | POST | oauth2-proxy = deny
/api/analytics/attribution | plain | POST | per-key-other-ns = deny
/api/analytics/attribution | plain | POST | per-key-owned-ns = deny
/api/analytics/attribution | plain | POST | spa = allow
/api/analytics/attribution | plain | POST | user-key = deny
/api/analytics/attribution | plain | POST | user-key-verified = deny
/api/analytics/attribution | plain | QUERY | admin-spa = deny
/api/analytics/attribution | plain | QUERY | cua-cli = deny
/api/analytics/attribution | plain | QUERY | dcr-client = deny
/api/analytics/attribution | plain | QUERY | empty-sub = deny
/api/analytics/attribution | plain | QUERY | github-oidc = deny
/api/analytics/attribution | plain | QUERY | oauth2-proxy = deny
/api/analytics/attribution | plain | QUERY | per-key-other-ns = deny
/api/analytics/attribution | plain | QUERY | per-key-owned-ns = deny
/api/analytics/attribution | plain | QUERY | spa = deny
/api/analytics/attribution | plain | QUERY | user-key = deny
/api/analytics/attribution | plain | QUERY | user-key-verified = deny
/api/analytics/payment-gate | plain | DELETE | admin-spa = deny
/api/analytics/payment-gate | plain | DELETE | cua-cli = deny
/api/analytics/payment-gate | plain | DELETE | dcr-client = deny
/api/analytics/payment-gate | plain | DELETE | empty-sub = deny
/api/analytics/payment-gate | plain | DELETE | github-oidc = deny
/api/analytics/payment-gate | plain | DELETE | oauth2-proxy = deny
/api/analytics/payment-gate | plain | DELETE | per-key-other-ns = deny
/api/analytics/payment-gate | plain | DELETE | per-key-owned-ns = deny
/api/analytics/payment-gate | plain | DELETE | spa = deny
/api/analytics/payment-gate | plain | DELETE | user-key = deny
/api/analytics/payment-gate | plain | DELETE | user-key-verified = deny
/api/analytics/payment-gate | plain | GET | admin-spa = deny
/api/analytics/payment-gate | plain | GET | cua-cli = deny
/api/analytics/payment-gate | plain | GET | dcr-client = deny
/api/analytics/payment-gate | plain | GET | empty-sub = deny
/api/analytics/payment-gate | plain | GET | github-oidc = deny
/api/analytics/payment-gate | plain | GET | oauth2-proxy = deny
/api/analytics/payment-gate | plain | GET | per-key-other-ns = deny
/api/analytics/payment-gate | plain | GET | per-key-owned-ns = deny
/api/analytics/payment-gate | plain | GET | spa = deny
/api/analytics/payment-gate | plain | GET | user-key = deny
/api/analytics/payment-gate | plain | GET | user-key-verified = deny
/api/analytics/payment-gate | plain | PATCH | admin-spa = deny
/api/analytics/payment-gate | plain | PATCH | cua-cli = deny
/api/analytics/payment-gate | plain | PATCH | dcr-client = deny
/api/analytics/payment-gate | plain | PATCH | empty-sub = deny
/api/analytics/payment-gate | plain | PATCH | github-oidc = deny
/api/analytics/payment-gate | plain | PATCH | oauth2-proxy = deny
/api/analytics/payment-gate | plain | PATCH | per-key-other-ns = deny
/api/analytics/payment-gate | plain | PATCH | per-key-owned-ns = deny
/api/analytics/payment-gate | plain | PATCH | spa = deny
/api/analytics/payment-gate | plain | PATCH | user-key = deny
/api/analytics/payment-gate | plain | PATCH | user-key-verified = deny
/api/analytics/payment-gate | plain | POST | admin-spa = allow
/api/analytics/payment-gate | plain | POST | cua-cli = deny
/api/analytics/payment-gate | plain | POST | dcr-client = deny
/api/analytics/payment-gate | plain | POST | empty-sub = deny
/api/analytics/payment-gate | plain | POST | github-oidc = deny
/api/analytics/payment-gate | plain | POST | oauth2-proxy = deny
/api/analytics/payment-gate | plain | POST | per-key-other-ns = deny
/api/analytics/payment-gate | plain | POST | per-key-owned-ns = deny
/api/analytics/payment-gate | plain | POST | spa = allow
/api/analytics/payment-gate | plain | POST | user-key = deny
/api/analytics/payment-gate | plain | POST | user-key-verified = deny
/api/analytics/payment-gate | plain | QUERY | admin-spa = deny
/api/analytics/payment-gate | plain | QUERY | cua-cli = deny
/api/analytics/payment-gate | plain | QUERY | dcr-client = deny
/api/analytics/payment-gate | plain | QUERY | empty-sub = deny
/api/analytics/payment-gate | plain | QUERY | github-oidc = deny
/api/analytics/payment-gate | plain | QUERY | oauth2-proxy = deny
/api/analytics/payment-gate | plain | QUERY | per-key-other-ns = deny
/api/analytics/payment-gate | plain | QUERY | per-key-owned-ns = deny
/api/analytics/payment-gate | plain | QUERY | spa = deny
/api/analytics/payment-gate | plain | QUERY | user-key = deny
/api/analytics/payment-gate | plain | QUERY | user-key-verified = deny
/api/analytics/session | plain | DELETE | admin-spa = allow
/api/analytics/session | plain | DELETE | cua-cli = deny
/api/analytics/session | plain | DELETE | dcr-client = deny
/api/analytics/session | plain | DELETE | empty-sub = deny
/api/analytics/session | plain | DELETE | github-oidc = deny
/api/analytics/session | plain | DELETE | oauth2-proxy = deny
/api/analytics/session | plain | DELETE | per-key-other-ns = deny
/api/analytics/session | plain | DELETE | per-key-owned-ns = deny
/api/analytics/session | plain | DELETE | spa = allow
/api/analytics/session | plain | DELETE | user-key = deny
/api/analytics/session | plain | DELETE | user-key-verified = deny
/api/analytics/session | plain | GET | admin-spa = allow
/api/analytics/session | plain | GET | cua-cli = deny
/api/analytics/session | plain | GET | dcr-client = deny
/api/analytics/session | plain | GET | empty-sub = deny
/api/analytics/session | plain | GET | github-oidc = deny
/api/analytics/session | plain | GET | oauth2-proxy = deny
/api/analytics/session | plain | GET | per-key-other-ns = deny
/api/analytics/session | plain | GET | per-key-owned-ns = deny
/api/analytics/session | plain | GET | spa = allow
/api/analytics/session | plain | GET | user-key = deny
/api/analytics/session | plain | GET | user-key-verified = deny
/api/analytics/session | plain | PATCH | admin-spa = allow
/api/analytics/session | plain | PATCH | cua-cli = deny
/api/analytics/session | plain | PATCH | dcr-client = deny
/api/analytics/session | plain | PATCH | empty-sub = deny
/api/analytics/session | plain | PATCH | github-oidc = deny
/api/analytics/session | plain | PATCH | oauth2-proxy = deny
/api/analytics/session | plain | PATCH | per-key-other-ns = deny
/api/analytics/session | plain | PATCH | per-key-owned-ns = deny
/api/analytics/session | plain | PATCH | spa = allow
/api/analytics/session | plain | PATCH | user-key = deny
/api/analytics/session | plain | PATCH | user-key-verified = deny
/api/analytics/session | plain | POST | admin-spa = allow
/api/analytics/session | plain | POST | cua-cli = deny
/api/analytics/session | plain | POST | dcr-client = deny
/api/analytics/session | plain | POST | empty-sub = deny
/api/analytics/session | plain | POST | github-oidc = deny
/api/analytics/session | plain | POST | oauth2-proxy = deny
/api/analytics/session | plain | POST | per-key-other-ns = deny
/api/analytics/session | plain | POST | per-key-owned-ns = deny
/api/analytics/session | plain | POST | spa = allow
/api/analytics/session | plain | POST | user-key = deny
/api/analytics/session | plain | POST | user-key-verified = deny
/api/analytics/session | plain | QUERY | admin-spa = allow
/api/analytics/session | plain | QUERY | cua-cli = deny
/api/analytics/session | plain | QUERY | dcr-client = deny
/api/analytics/session | plain | QUERY | empty-sub = deny
/api/analytics/session | plain | QUERY | github-oidc = deny
/api/analytics/session | plain | QUERY | oauth2-proxy = deny
/api/analytics/session | plain | QUERY | per-key-other-ns = deny
/api/analytics/session | plain | QUERY | per-key-owned-ns = deny
/api/analytics/session | plain | QUERY | spa = allow
/api/analytics/session | plain | QUERY | user-key = deny
/api/analytics/session | plain | QUERY | user-key-verified = deny
/api/billing/portal-session | plain | DELETE | admin-spa = allow
/api/billing/portal-session | plain | DELETE | cua-cli = deny
/api/billing/portal-session | plain | DELETE | dcr-client = deny
/api/billing/portal-session | plain | DELETE | empty-sub = deny
/api/billing/portal-session | plain | DELETE | github-oidc = deny
/api/billing/portal-session | plain | DELETE | oauth2-proxy = deny
/api/billing/portal-session | plain | DELETE | per-key-other-ns = deny
/api/billing/portal-session | plain | DELETE | per-key-owned-ns = deny
/api/billing/portal-session | plain | DELETE | spa = allow
/api/billing/portal-session | plain | DELETE | user-key = deny
/api/billing/portal-session | plain | DELETE | user-key-verified = deny
/api/billing/portal-session | plain | GET | admin-spa = allow
/api/billing/portal-session | plain | GET | cua-cli = deny
/api/billing/portal-session | plain | GET | dcr-client = deny
/api/billing/portal-session | plain | GET | empty-sub = deny
/api/billing/portal-session | plain | GET | github-oidc = deny
/api/billing/portal-session | plain | GET | oauth2-proxy = deny
/api/billing/portal-session | plain | GET | per-key-other-ns = deny
/api/billing/portal-session | plain | GET | per-key-owned-ns = deny
/api/billing/portal-session | plain | GET | spa = allow
/api/billing/portal-session | plain | GET | user-key = deny
/api/billing/portal-session | plain | GET | user-key-verified = deny
/api/billing/portal-session | plain | PATCH | admin-spa = allow
/api/billing/portal-session | plain | PATCH | cua-cli = deny
/api/billing/portal-session | plain | PATCH | dcr-client = deny
/api/billing/portal-session | plain | PATCH | empty-sub = deny
/api/billing/portal-session | plain | PATCH | github-oidc = deny
/api/billing/portal-session | plain | PATCH | oauth2-proxy = deny
/api/billing/portal-session | plain | PATCH | per-key-other-ns = deny
/api/billing/portal-session | plain | PATCH | per-key-owned-ns = deny
/api/billing/portal-session | plain | PATCH | spa = allow
/api/billing/portal-session | plain | PATCH | user-key = deny
/api/billing/portal-session | plain | PATCH | user-key-verified = deny
/api/billing/portal-session | plain | POST | admin-spa = allow
/api/billing/portal-session | plain | POST | cua-cli = deny
/api/billing/portal-session | plain | POST | dcr-client = deny
/api/billing/portal-session | plain | POST | empty-sub = deny
/api/billing/portal-session | plain | POST | github-oidc = deny
/api/billing/portal-session | plain | POST | oauth2-proxy = deny
/api/billing/portal-session | plain | POST | per-key-other-ns = deny
/api/billing/portal-session | plain | POST | per-key-owned-ns = deny
/api/billing/portal-session | plain | POST | spa = allow
/api/billing/portal-session | plain | POST | user-key = deny
/api/billing/portal-session | plain | POST | user-key-verified = deny
/api/billing/portal-session | plain | QUERY | admin-spa = allow
/api/billing/portal-session | plain | QUERY | cua-cli = deny
/api/billing/portal-session | plain | QUERY | dcr-client = deny
/api/billing/portal-session | plain | QUERY | empty-sub = deny
/api/billing/portal-session | plain | QUERY | github-oidc = deny
/api/billing/portal-session | plain | QUERY | oauth2-proxy = deny
/api/billing/portal-session | plain | QUERY | per-key-other-ns = deny
/api/billing/portal-session | plain | QUERY | per-key-owned-ns = deny
/api/billing/portal-session | plain | QUERY | spa = allow
/api/billing/portal-session | plain | QUERY | user-key = deny
/api/billing/portal-session | plain | QUERY | user-key-verified = deny
/api/billing/setup-session | plain | DELETE | admin-spa = allow
/api/billing/setup-session | plain | DELETE | cua-cli = deny
/api/billing/setup-session | plain | DELETE | dcr-client = deny
/api/billing/setup-session | plain | DELETE | empty-sub = deny
/api/billing/setup-session | plain | DELETE | github-oidc = deny
/api/billing/setup-session | plain | DELETE | oauth2-proxy = deny
/api/billing/setup-session | plain | DELETE | per-key-other-ns = deny
/api/billing/setup-session | plain | DELETE | per-key-owned-ns = deny
/api/billing/setup-session | plain | DELETE | spa = allow
/api/billing/setup-session | plain | DELETE | user-key = deny
/api/billing/setup-session | plain | DELETE | user-key-verified = deny
/api/billing/setup-session | plain | GET | admin-spa = allow
/api/billing/setup-session | plain | GET | cua-cli = deny
/api/billing/setup-session | plain | GET | dcr-client = deny
/api/billing/setup-session | plain | GET | empty-sub = deny
/api/billing/setup-session | plain | GET | github-oidc = deny
/api/billing/setup-session | plain | GET | oauth2-proxy = deny
/api/billing/setup-session | plain | GET | per-key-other-ns = deny
/api/billing/setup-session | plain | GET | per-key-owned-ns = deny
/api/billing/setup-session | plain | GET | spa = allow
/api/billing/setup-session | plain | GET | user-key = deny
/api/billing/setup-session | plain | GET | user-key-verified = deny
/api/billing/setup-session | plain | PATCH | admin-spa = allow
/api/billing/setup-session | plain | PATCH | cua-cli = deny
/api/billing/setup-session | plain | PATCH | dcr-client = deny
/api/billing/setup-session | plain | PATCH | empty-sub = deny
/api/billing/setup-session | plain | PATCH | github-oidc = deny
/api/billing/setup-session | plain | PATCH | oauth2-proxy = deny
/api/billing/setup-session | plain | PATCH | per-key-other-ns = deny
/api/billing/setup-session | plain | PATCH | per-key-owned-ns = deny
/api/billing/setup-session | plain | PATCH | spa = allow
/api/billing/setup-session | plain | PATCH | user-key = deny
/api/billing/setup-session | plain | PATCH | user-key-verified = deny
/api/billing/setup-session | plain | POST | admin-spa = allow
/api/billing/setup-session | plain | POST | cua-cli = deny
/api/billing/setup-session | plain | POST | dcr-client = deny
/api/billing/setup-session | plain | POST | empty-sub = deny
/api/billing/setup-session | plain | POST | github-oidc = deny
/api/billing/setup-session | plain | POST | oauth2-proxy = deny
/api/billing/setup-session | plain | POST | per-key-other-ns = deny
/api/billing/setup-session | plain | POST | per-key-owned-ns = deny
/api/billing/setup-session | plain | POST | spa = allow
/api/billing/setup-session | plain | POST | user-key = deny
/api/billing/setup-session | plain | POST | user-key-verified = deny
/api/billing/setup-session | plain | QUERY | admin-spa = allow
/api/billing/setup-session | plain | QUERY | cua-cli = deny
/api/billing/setup-session | plain | QUERY | dcr-client = deny
/api/billing/setup-session | plain | QUERY | empty-sub = deny
/api/billing/setup-session | plain | QUERY | github-oidc = deny
/api/billing/setup-session | plain | QUERY | oauth2-proxy = deny
/api/billing/setup-session | plain | QUERY | per-key-other-ns = deny
/api/billing/setup-session | plain | QUERY | per-key-owned-ns = deny
/api/billing/setup-session | plain | QUERY | spa = allow
/api/billing/setup-session | plain | QUERY | user-key = deny
/api/billing/setup-session | plain | QUERY | user-key-verified = deny
/api/billing/setup-session/complete | plain | DELETE | admin-spa = allow
/api/billing/setup-session/complete | plain | DELETE | cua-cli = deny
/api/billing/setup-session/complete | plain | DELETE | dcr-client = deny
/api/billing/setup-session/complete | plain | DELETE | empty-sub = deny
/api/billing/setup-session/complete | plain | DELETE | github-oidc = deny
/api/billing/setup-session/complete | plain | DELETE | oauth2-proxy = deny
/api/billing/setup-session/complete | plain | DELETE | per-key-other-ns = deny
/api/billing/setup-session/complete | plain | DELETE | per-key-owned-ns = deny
/api/billing/setup-session/complete | plain | DELETE | spa = allow
/api/billing/setup-session/complete | plain | DELETE | user-key = deny
/api/billing/setup-session/complete | plain | DELETE | user-key-verified = deny
/api/billing/setup-session/complete | plain | GET | admin-spa = allow
/api/billing/setup-session/complete | plain | GET | cua-cli = deny
/api/billing/setup-session/complete | plain | GET | dcr-client = deny
/api/billing/setup-session/complete | plain | GET | empty-sub = deny
/api/billing/setup-session/complete | plain | GET | github-oidc = deny
/api/billing/setup-session/complete | plain | GET | oauth2-proxy = deny
/api/billing/setup-session/complete | plain | GET | per-key-other-ns = deny
/api/billing/setup-session/complete | plain | GET | per-key-owned-ns = deny
/api/billing/setup-session/complete | plain | GET | spa = allow
/api/billing/setup-session/complete | plain | GET | user-key = deny
/api/billing/setup-session/complete | plain | GET | user-key-verified = deny
/api/billing/setup-session/complete | plain | PATCH | admin-spa = allow
/api/billing/setup-session/complete | plain | PATCH | cua-cli = deny
/api/billing/setup-session/complete | plain | PATCH | dcr-client = deny
/api/billing/setup-session/complete | plain | PATCH | empty-sub = deny
/api/billing/setup-session/complete | plain | PATCH | github-oidc = deny
/api/billing/setup-session/complete | plain | PATCH | oauth2-proxy = deny
/api/billing/setup-session/complete | plain | PATCH | per-key-other-ns = deny
/api/billing/setup-session/complete | plain | PATCH | per-key-owned-ns = deny
/api/billing/setup-session/complete | plain | PATCH | spa = allow
/api/billing/setup-session/complete | plain | PATCH | user-key = deny
/api/billing/setup-session/complete | plain | PATCH | user-key-verified = deny
/api/billing/setup-session/complete | plain | POST | admin-spa = allow
/api/billing/setup-session/complete | plain | POST | cua-cli = deny
/api/billing/setup-session/complete | plain | POST | dcr-client = deny
/api/billing/setup-session/complete | plain | POST | empty-sub = deny
/api/billing/setup-session/complete | plain | POST | github-oidc = deny
/api/billing/setup-session/complete | plain | POST | oauth2-proxy = deny
/api/billing/setup-session/complete | plain | POST | per-key-other-ns = deny
/api/billing/setup-session/complete | plain | POST | per-key-owned-ns = deny
/api/billing/setup-session/complete | plain | POST | spa = allow
/api/billing/setup-session/complete | plain | POST | user-key = deny
/api/billing/setup-session/complete | plain | POST | user-key-verified = deny
/api/billing/setup-session/complete | plain | QUERY | admin-spa = allow
/api/billing/setup-session/complete | plain | QUERY | cua-cli = deny
/api/billing/setup-session/complete | plain | QUERY | dcr-client = deny
/api/billing/setup-session/complete | plain | QUERY | empty-sub = deny
/api/billing/setup-session/complete | plain | QUERY | github-oidc = deny
/api/billing/setup-session/complete | plain | QUERY | oauth2-proxy = deny
/api/billing/setup-session/complete | plain | QUERY | per-key-other-ns = deny
/api/billing/setup-session/complete | plain | QUERY | per-key-owned-ns = deny
/api/billing/setup-session/complete | plain | QUERY | spa = allow
/api/billing/setup-session/complete | plain | QUERY | user-key = deny
/api/billing/setup-session/complete | plain | QUERY | user-key-verified = deny
/api/billing/summary | plain | DELETE | admin-spa = allow
/api/billing/summary | plain | DELETE | cua-cli = deny
/api/billing/summary | plain | DELETE | dcr-client = deny
/api/billing/summary | plain | DELETE | empty-sub = deny
/api/billing/summary | plain | DELETE | github-oidc = deny
/api/billing/summary | plain | DELETE | oauth2-proxy = deny
/api/billing/summary | plain | DELETE | per-key-other-ns = deny
/api/billing/summary | plain | DELETE | per-key-owned-ns = deny
/api/billing/summary | plain | DELETE | spa = allow
/api/billing/summary | plain | DELETE | user-key = deny
/api/billing/summary | plain | DELETE | user-key-verified = deny
/api/billing/summary | plain | GET | admin-spa = allow
/api/billing/summary | plain | GET | cua-cli = deny
/api/billing/summary | plain | GET | dcr-client = deny
/api/billing/summary | plain | GET | empty-sub = deny
/api/billing/summary | plain | GET | github-oidc = deny
/api/billing/summary | plain | GET | oauth2-proxy = deny
/api/billing/summary | plain | GET | per-key-other-ns = deny
/api/billing/summary | plain | GET | per-key-owned-ns = deny
/api/billing/summary | plain | GET | spa = allow
/api/billing/summary | plain | GET | user-key = deny
/api/billing/summary | plain | GET | user-key-verified = deny
/api/billing/summary | plain | PATCH | admin-spa = allow
/api/billing/summary | plain | PATCH | cua-cli = deny
/api/billing/summary | plain | PATCH | dcr-client = deny
/api/billing/summary | plain | PATCH | empty-sub = deny
/api/billing/summary | plain | PATCH | github-oidc = deny
/api/billing/summary | plain | PATCH | oauth2-proxy = deny
/api/billing/summary | plain | PATCH | per-key-other-ns = deny
/api/billing/summary | plain | PATCH | per-key-owned-ns = deny
/api/billing/summary | plain | PATCH | spa = allow
/api/billing/summary | plain | PATCH | user-key = deny
/api/billing/summary | plain | PATCH | user-key-verified = deny
/api/billing/summary | plain | POST | admin-spa = allow
/api/billing/summary | plain | POST | cua-cli = deny
/api/billing/summary | plain | POST | dcr-client = deny
/api/billing/summary | plain | POST | empty-sub = deny
/api/billing/summary | plain | POST | github-oidc = deny
/api/billing/summary | plain | POST | oauth2-proxy = deny
/api/billing/summary | plain | POST | per-key-other-ns = deny
/api/billing/summary | plain | POST | per-key-owned-ns = deny
/api/billing/summary | plain | POST | spa = allow
/api/billing/summary | plain | POST | user-key = deny
/api/billing/summary | plain | POST | user-key-verified = deny
/api/billing/summary | plain | QUERY | admin-spa = allow
/api/billing/summary | plain | QUERY | cua-cli = deny
/api/billing/summary | plain | QUERY | dcr-client = deny
/api/billing/summary | plain | QUERY | empty-sub = deny
/api/billing/summary | plain | QUERY | github-oidc = deny
/api/billing/summary | plain | QUERY | oauth2-proxy = deny
/api/billing/summary | plain | QUERY | per-key-other-ns = deny
/api/billing/summary | plain | QUERY | per-key-owned-ns = deny
/api/billing/summary | plain | QUERY | spa = allow
/api/billing/summary | plain | QUERY | user-key = deny
/api/billing/summary | plain | QUERY | user-key-verified = deny
/api/billing/usage | plain | DELETE | admin-spa = allow
/api/billing/usage | plain | DELETE | cua-cli = deny
/api/billing/usage | plain | DELETE | dcr-client = deny
/api/billing/usage | plain | DELETE | empty-sub = deny
/api/billing/usage | plain | DELETE | github-oidc = deny
/api/billing/usage | plain | DELETE | oauth2-proxy = deny
/api/billing/usage | plain | DELETE | per-key-other-ns = deny
/api/billing/usage | plain | DELETE | per-key-owned-ns = deny
/api/billing/usage | plain | DELETE | spa = allow
/api/billing/usage | plain | DELETE | user-key = deny
/api/billing/usage | plain | DELETE | user-key-verified = deny
/api/billing/usage | plain | GET | admin-spa = allow
/api/billing/usage | plain | GET | cua-cli = deny
/api/billing/usage | plain | GET | dcr-client = deny
/api/billing/usage | plain | GET | empty-sub = deny
/api/billing/usage | plain | GET | github-oidc = deny
/api/billing/usage | plain | GET | oauth2-proxy = deny
/api/billing/usage | plain | GET | per-key-other-ns = deny
/api/billing/usage | plain | GET | per-key-owned-ns = deny
/api/billing/usage | plain | GET | spa = allow
/api/billing/usage | plain | GET | user-key = deny
/api/billing/usage | plain | GET | user-key-verified = deny
/api/billing/usage | plain | PATCH | admin-spa = allow
/api/billing/usage | plain | PATCH | cua-cli = deny
/api/billing/usage | plain | PATCH | dcr-client = deny
/api/billing/usage | plain | PATCH | empty-sub = deny
/api/billing/usage | plain | PATCH | github-oidc = deny
/api/billing/usage | plain | PATCH | oauth2-proxy = deny
/api/billing/usage | plain | PATCH | per-key-other-ns = deny
/api/billing/usage | plain | PATCH | per-key-owned-ns = deny
/api/billing/usage | plain | PATCH | spa = allow
/api/billing/usage | plain | PATCH | user-key = deny
/api/billing/usage | plain | PATCH | user-key-verified = deny
/api/billing/usage | plain | POST | admin-spa = allow
/api/billing/usage | plain | POST | cua-cli = deny
/api/billing/usage | plain | POST | dcr-client = deny
/api/billing/usage | plain | POST | empty-sub = deny
/api/billing/usage | plain | POST | github-oidc = deny
/api/billing/usage | plain | POST | oauth2-proxy = deny
/api/billing/usage | plain | POST | per-key-other-ns = deny
/api/billing/usage | plain | POST | per-key-owned-ns = deny
/api/billing/usage | plain | POST | spa = allow
/api/billing/usage | plain | POST | user-key = deny
/api/billing/usage | plain | POST | user-key-verified = deny
/api/billing/usage | plain | QUERY | admin-spa = allow
/api/billing/usage | plain | QUERY | cua-cli = deny
/api/billing/usage | plain | QUERY | dcr-client = deny
/api/billing/usage | plain | QUERY | empty-sub = deny
/api/billing/usage | plain | QUERY | github-oidc = deny
/api/billing/usage | plain | QUERY | oauth2-proxy = deny
/api/billing/usage | plain | QUERY | per-key-other-ns = deny
/api/billing/usage | plain | QUERY | per-key-owned-ns = deny
/api/billing/usage | plain | QUERY | spa = allow
/api/billing/usage | plain | QUERY | user-key = deny
/api/billing/usage | plain | QUERY | user-key-verified = deny
/api/chat/conversations | plain | DELETE | admin-spa = allow
/api/chat/conversations | plain | DELETE | cua-cli = deny
/api/chat/conversations | plain | DELETE | dcr-client = deny
/api/chat/conversations | plain | DELETE | empty-sub = deny
/api/chat/conversations | plain | DELETE | github-oidc = deny
/api/chat/conversations | plain | DELETE | oauth2-proxy = deny
/api/chat/conversations | plain | DELETE | per-key-other-ns = deny
/api/chat/conversations | plain | DELETE | per-key-owned-ns = deny
/api/chat/conversations | plain | DELETE | spa = allow
/api/chat/conversations | plain | DELETE | user-key = deny
/api/chat/conversations | plain | DELETE | user-key-verified = deny
/api/chat/conversations | plain | GET | admin-spa = allow
/api/chat/conversations | plain | GET | cua-cli = deny
/api/chat/conversations | plain | GET | dcr-client = deny
/api/chat/conversations | plain | GET | empty-sub = deny
/api/chat/conversations | plain | GET | github-oidc = deny
/api/chat/conversations | plain | GET | oauth2-proxy = deny
/api/chat/conversations | plain | GET | per-key-other-ns = deny
/api/chat/conversations | plain | GET | per-key-owned-ns = deny
/api/chat/conversations | plain | GET | spa = allow
/api/chat/conversations | plain | GET | user-key = deny
/api/chat/conversations | plain | GET | user-key-verified = deny
/api/chat/conversations | plain | PATCH | admin-spa = allow
/api/chat/conversations | plain | PATCH | cua-cli = deny
/api/chat/conversations | plain | PATCH | dcr-client = deny
/api/chat/conversations | plain | PATCH | empty-sub = deny
/api/chat/conversations | plain | PATCH | github-oidc = deny
/api/chat/conversations | plain | PATCH | oauth2-proxy = deny
/api/chat/conversations | plain | PATCH | per-key-other-ns = deny
/api/chat/conversations | plain | PATCH | per-key-owned-ns = deny
/api/chat/conversations | plain | PATCH | spa = allow
/api/chat/conversations | plain | PATCH | user-key = deny
/api/chat/conversations | plain | PATCH | user-key-verified = deny
/api/chat/conversations | plain | POST | admin-spa = allow
/api/chat/conversations | plain | POST | cua-cli = deny
/api/chat/conversations | plain | POST | dcr-client = deny
/api/chat/conversations | plain | POST | empty-sub = deny
/api/chat/conversations | plain | POST | github-oidc = deny
/api/chat/conversations | plain | POST | oauth2-proxy = deny
/api/chat/conversations | plain | POST | per-key-other-ns = deny
/api/chat/conversations | plain | POST | per-key-owned-ns = deny
/api/chat/conversations | plain | POST | spa = allow
/api/chat/conversations | plain | POST | user-key = deny
/api/chat/conversations | plain | POST | user-key-verified = deny
/api/chat/conversations | plain | QUERY | admin-spa = allow
/api/chat/conversations | plain | QUERY | cua-cli = deny
/api/chat/conversations | plain | QUERY | dcr-client = deny
/api/chat/conversations | plain | QUERY | empty-sub = deny
/api/chat/conversations | plain | QUERY | github-oidc = deny
/api/chat/conversations | plain | QUERY | oauth2-proxy = deny
/api/chat/conversations | plain | QUERY | per-key-other-ns = deny
/api/chat/conversations | plain | QUERY | per-key-owned-ns = deny
/api/chat/conversations | plain | QUERY | spa = allow
/api/chat/conversations | plain | QUERY | user-key = deny
/api/chat/conversations | plain | QUERY | user-key-verified = deny
/api/chat/conversations/{id} | id | DELETE | admin-spa = allow
/api/chat/conversations/{id} | id | DELETE | cua-cli = deny
/api/chat/conversations/{id} | id | DELETE | dcr-client = deny
/api/chat/conversations/{id} | id | DELETE | empty-sub = deny
/api/chat/conversations/{id} | id | DELETE | github-oidc = deny
/api/chat/conversations/{id} | id | DELETE | oauth2-proxy = deny
/api/chat/conversations/{id} | id | DELETE | per-key-other-ns = deny
/api/chat/conversations/{id} | id | DELETE | per-key-owned-ns = deny
/api/chat/conversations/{id} | id | DELETE | spa = allow
/api/chat/conversations/{id} | id | DELETE | user-key = deny
/api/chat/conversations/{id} | id | DELETE | user-key-verified = deny
/api/chat/conversations/{id} | id | GET | admin-spa = allow
/api/chat/conversations/{id} | id | GET | cua-cli = deny
/api/chat/conversations/{id} | id | GET | dcr-client = deny
/api/chat/conversations/{id} | id | GET | empty-sub = deny
/api/chat/conversations/{id} | id | GET | github-oidc = deny
/api/chat/conversations/{id} | id | GET | oauth2-proxy = deny
/api/chat/conversations/{id} | id | GET | per-key-other-ns = deny
/api/chat/conversations/{id} | id | GET | per-key-owned-ns = deny
/api/chat/conversations/{id} | id | GET | spa = allow
/api/chat/conversations/{id} | id | GET | user-key = deny
/api/chat/conversations/{id} | id | GET | user-key-verified = deny
/api/chat/conversations/{id} | id | PATCH | admin-spa = allow
/api/chat/conversations/{id} | id | PATCH | cua-cli = deny
/api/chat/conversations/{id} | id | PATCH | dcr-client = deny
/api/chat/conversations/{id} | id | PATCH | empty-sub = deny
/api/chat/conversations/{id} | id | PATCH | github-oidc = deny
/api/chat/conversations/{id} | id | PATCH | oauth2-proxy = deny
/api/chat/conversations/{id} | id | PATCH | per-key-other-ns = deny
/api/chat/conversations/{id} | id | PATCH | per-key-owned-ns = deny
/api/chat/conversations/{id} | id | PATCH | spa = allow
/api/chat/conversations/{id} | id | PATCH | user-key = deny
/api/chat/conversations/{id} | id | PATCH | user-key-verified = deny
/api/chat/conversations/{id} | id | POST | admin-spa = allow
/api/chat/conversations/{id} | id | POST | cua-cli = deny
/api/chat/conversations/{id} | id | POST | dcr-client = deny
/api/chat/conversations/{id} | id | POST | empty-sub = deny
/api/chat/conversations/{id} | id | POST | github-oidc = deny
/api/chat/conversations/{id} | id | POST | oauth2-proxy = deny
/api/chat/conversations/{id} | id | POST | per-key-other-ns = deny
/api/chat/conversations/{id} | id | POST | per-key-owned-ns = deny
/api/chat/conversations/{id} | id | POST | spa = allow
/api/chat/conversations/{id} | id | POST | user-key = deny
/api/chat/conversations/{id} | id | POST | user-key-verified = deny
/api/chat/conversations/{id} | id | QUERY | admin-spa = allow
/api/chat/conversations/{id} | id | QUERY | cua-cli = deny
/api/chat/conversations/{id} | id | QUERY | dcr-client = deny
/api/chat/conversations/{id} | id | QUERY | empty-sub = deny
/api/chat/conversations/{id} | id | QUERY | github-oidc = deny
/api/chat/conversations/{id} | id | QUERY | oauth2-proxy = deny
/api/chat/conversations/{id} | id | QUERY | per-key-other-ns = deny
/api/chat/conversations/{id} | id | QUERY | per-key-owned-ns = deny
/api/chat/conversations/{id} | id | QUERY | spa = allow
/api/chat/conversations/{id} | id | QUERY | user-key = deny
/api/chat/conversations/{id} | id | QUERY | user-key-verified = deny
/api/chat/conversations/{id}/turns | id | DELETE | admin-spa = allow
/api/chat/conversations/{id}/turns | id | DELETE | cua-cli = deny
/api/chat/conversations/{id}/turns | id | DELETE | dcr-client = deny
/api/chat/conversations/{id}/turns | id | DELETE | empty-sub = deny
/api/chat/conversations/{id}/turns | id | DELETE | github-oidc = deny
/api/chat/conversations/{id}/turns | id | DELETE | oauth2-proxy = deny
/api/chat/conversations/{id}/turns | id | DELETE | per-key-other-ns = deny
/api/chat/conversations/{id}/turns | id | DELETE | per-key-owned-ns = deny
/api/chat/conversations/{id}/turns | id | DELETE | spa = allow
/api/chat/conversations/{id}/turns | id | DELETE | user-key = deny
/api/chat/conversations/{id}/turns | id | DELETE | user-key-verified = deny
/api/chat/conversations/{id}/turns | id | GET | admin-spa = allow
/api/chat/conversations/{id}/turns | id | GET | cua-cli = deny
/api/chat/conversations/{id}/turns | id | GET | dcr-client = deny
/api/chat/conversations/{id}/turns | id | GET | empty-sub = deny
/api/chat/conversations/{id}/turns | id | GET | github-oidc = deny
/api/chat/conversations/{id}/turns | id | GET | oauth2-proxy = deny
/api/chat/conversations/{id}/turns | id | GET | per-key-other-ns = deny
/api/chat/conversations/{id}/turns | id | GET | per-key-owned-ns = deny
/api/chat/conversations/{id}/turns | id | GET | spa = allow
/api/chat/conversations/{id}/turns | id | GET | user-key = deny
/api/chat/conversations/{id}/turns | id | GET | user-key-verified = deny
/api/chat/conversations/{id}/turns | id | PATCH | admin-spa = allow
/api/chat/conversations/{id}/turns | id | PATCH | cua-cli = deny
/api/chat/conversations/{id}/turns | id | PATCH | dcr-client = deny
/api/chat/conversations/{id}/turns | id | PATCH | empty-sub = deny
/api/chat/conversations/{id}/turns | id | PATCH | github-oidc = deny
/api/chat/conversations/{id}/turns | id | PATCH | oauth2-proxy = deny
/api/chat/conversations/{id}/turns | id | PATCH | per-key-other-ns = deny
/api/chat/conversations/{id}/turns | id | PATCH | per-key-owned-ns = deny
/api/chat/conversations/{id}/turns | id | PATCH | spa = allow
/api/chat/conversations/{id}/turns | id | PATCH | user-key = deny
/api/chat/conversations/{id}/turns | id | PATCH | user-key-verified = deny
/api/chat/conversations/{id}/turns | id | POST | admin-spa = allow
/api/chat/conversations/{id}/turns | id | POST | cua-cli = deny
/api/chat/conversations/{id}/turns | id | POST | dcr-client = deny
/api/chat/conversations/{id}/turns | id | POST | empty-sub = deny
/api/chat/conversations/{id}/turns | id | POST | github-oidc = deny
/api/chat/conversations/{id}/turns | id | POST | oauth2-proxy = deny
/api/chat/conversations/{id}/turns | id | POST | per-key-other-ns = deny
/api/chat/conversations/{id}/turns | id | POST | per-key-owned-ns = deny
/api/chat/conversations/{id}/turns | id | POST | spa = allow
/api/chat/conversations/{id}/turns | id | POST | user-key = deny
/api/chat/conversations/{id}/turns | id | POST | user-key-verified = deny
/api/chat/conversations/{id}/turns | id | QUERY | admin-spa = allow
/api/chat/conversations/{id}/turns | id | QUERY | cua-cli = deny
/api/chat/conversations/{id}/turns | id | QUERY | dcr-client = deny
/api/chat/conversations/{id}/turns | id | QUERY | empty-sub = deny
/api/chat/conversations/{id}/turns | id | QUERY | github-oidc = deny
/api/chat/conversations/{id}/turns | id | QUERY | oauth2-proxy = deny
/api/chat/conversations/{id}/turns | id | QUERY | per-key-other-ns = deny
/api/chat/conversations/{id}/turns | id | QUERY | per-key-owned-ns = deny
/api/chat/conversations/{id}/turns | id | QUERY | spa = allow
/api/chat/conversations/{id}/turns | id | QUERY | user-key = deny
/api/chat/conversations/{id}/turns | id | QUERY | user-key-verified = deny
/api/config | plain | DELETE | admin-spa = allow
/api/config | plain | DELETE | cua-cli = allow
/api/config | plain | DELETE | dcr-client = deny
/api/config | plain | DELETE | empty-sub = deny
/api/config | plain | DELETE | github-oidc = deny
/api/config | plain | DELETE | oauth2-proxy = deny
/api/config | plain | DELETE | per-key-other-ns = deny
/api/config | plain | DELETE | per-key-owned-ns = deny
/api/config | plain | DELETE | spa = allow
/api/config | plain | DELETE | user-key = allow
/api/config | plain | DELETE | user-key-verified = allow
/api/config | plain | GET | admin-spa = allow
/api/config | plain | GET | cua-cli = allow
/api/config | plain | GET | dcr-client = deny
/api/config | plain | GET | empty-sub = deny
/api/config | plain | GET | github-oidc = deny
/api/config | plain | GET | oauth2-proxy = deny
/api/config | plain | GET | per-key-other-ns = deny
/api/config | plain | GET | per-key-owned-ns = deny
/api/config | plain | GET | spa = allow
/api/config | plain | GET | user-key = allow
/api/config | plain | GET | user-key-verified = allow
/api/config | plain | PATCH | admin-spa = allow
/api/config | plain | PATCH | cua-cli = allow
/api/config | plain | PATCH | dcr-client = deny
/api/config | plain | PATCH | empty-sub = deny
/api/config | plain | PATCH | github-oidc = deny
/api/config | plain | PATCH | oauth2-proxy = deny
/api/config | plain | PATCH | per-key-other-ns = deny
/api/config | plain | PATCH | per-key-owned-ns = deny
/api/config | plain | PATCH | spa = allow
/api/config | plain | PATCH | user-key = allow
/api/config | plain | PATCH | user-key-verified = allow
/api/config | plain | POST | admin-spa = allow
/api/config | plain | POST | cua-cli = allow
/api/config | plain | POST | dcr-client = deny
/api/config | plain | POST | empty-sub = deny
/api/config | plain | POST | github-oidc = deny
/api/config | plain | POST | oauth2-proxy = deny
/api/config | plain | POST | per-key-other-ns = deny
/api/config | plain | POST | per-key-owned-ns = deny
/api/config | plain | POST | spa = allow
/api/config | plain | POST | user-key = allow
/api/config | plain | POST | user-key-verified = allow
/api/config | plain | QUERY | admin-spa = allow
/api/config | plain | QUERY | cua-cli = allow
/api/config | plain | QUERY | dcr-client = deny
/api/config | plain | QUERY | empty-sub = deny
/api/config | plain | QUERY | github-oidc = deny
/api/config | plain | QUERY | oauth2-proxy = deny
/api/config | plain | QUERY | per-key-other-ns = deny
/api/config | plain | QUERY | per-key-owned-ns = deny
/api/config | plain | QUERY | spa = allow
/api/config | plain | QUERY | user-key = allow
/api/config | plain | QUERY | user-key-verified = allow
/api/github-trust-policies | plain | DELETE | admin-spa = allow
/api/github-trust-policies | plain | DELETE | cua-cli = allow
/api/github-trust-policies | plain | DELETE | dcr-client = deny
/api/github-trust-policies | plain | DELETE | empty-sub = deny
/api/github-trust-policies | plain | DELETE | github-oidc = deny
/api/github-trust-policies | plain | DELETE | oauth2-proxy = deny
/api/github-trust-policies | plain | DELETE | per-key-other-ns = deny
/api/github-trust-policies | plain | DELETE | per-key-owned-ns = deny
/api/github-trust-policies | plain | DELETE | spa = allow
/api/github-trust-policies | plain | DELETE | user-key = deny
/api/github-trust-policies | plain | DELETE | user-key-verified = allow
/api/github-trust-policies | plain | GET | admin-spa = allow
/api/github-trust-policies | plain | GET | cua-cli = allow
/api/github-trust-policies | plain | GET | dcr-client = deny
/api/github-trust-policies | plain | GET | empty-sub = deny
/api/github-trust-policies | plain | GET | github-oidc = deny
/api/github-trust-policies | plain | GET | oauth2-proxy = deny
/api/github-trust-policies | plain | GET | per-key-other-ns = deny
/api/github-trust-policies | plain | GET | per-key-owned-ns = deny
/api/github-trust-policies | plain | GET | spa = allow
/api/github-trust-policies | plain | GET | user-key = deny
/api/github-trust-policies | plain | GET | user-key-verified = allow
/api/github-trust-policies | plain | PATCH | admin-spa = allow
/api/github-trust-policies | plain | PATCH | cua-cli = allow
/api/github-trust-policies | plain | PATCH | dcr-client = deny
/api/github-trust-policies | plain | PATCH | empty-sub = deny
/api/github-trust-policies | plain | PATCH | github-oidc = deny
/api/github-trust-policies | plain | PATCH | oauth2-proxy = deny
/api/github-trust-policies | plain | PATCH | per-key-other-ns = deny
/api/github-trust-policies | plain | PATCH | per-key-owned-ns = deny
/api/github-trust-policies | plain | PATCH | spa = allow
/api/github-trust-policies | plain | PATCH | user-key = deny
/api/github-trust-policies | plain | PATCH | user-key-verified = allow
/api/github-trust-policies | plain | POST | admin-spa = allow
/api/github-trust-policies | plain | POST | cua-cli = allow
/api/github-trust-policies | plain | POST | dcr-client = deny
/api/github-trust-policies | plain | POST | empty-sub = deny
/api/github-trust-policies | plain | POST | github-oidc = deny
/api/github-trust-policies | plain | POST | oauth2-proxy = deny
/api/github-trust-policies | plain | POST | per-key-other-ns = deny
/api/github-trust-policies | plain | POST | per-key-owned-ns = deny
/api/github-trust-policies | plain | POST | spa = allow
/api/github-trust-policies | plain | POST | user-key = deny
/api/github-trust-policies | plain | POST | user-key-verified = allow
/api/github-trust-policies | plain | QUERY | admin-spa = allow
/api/github-trust-policies | plain | QUERY | cua-cli = allow
/api/github-trust-policies | plain | QUERY | dcr-client = deny
/api/github-trust-policies | plain | QUERY | empty-sub = deny
/api/github-trust-policies | plain | QUERY | github-oidc = deny
/api/github-trust-policies | plain | QUERY | oauth2-proxy = deny
/api/github-trust-policies | plain | QUERY | per-key-other-ns = deny
/api/github-trust-policies | plain | QUERY | per-key-owned-ns = deny
/api/github-trust-policies | plain | QUERY | spa = allow
/api/github-trust-policies | plain | QUERY | user-key = deny
/api/github-trust-policies | plain | QUERY | user-key-verified = allow
/api/github-trust-policies/{id} | id | DELETE | admin-spa = allow
/api/github-trust-policies/{id} | id | DELETE | cua-cli = allow
/api/github-trust-policies/{id} | id | DELETE | dcr-client = deny
/api/github-trust-policies/{id} | id | DELETE | empty-sub = deny
/api/github-trust-policies/{id} | id | DELETE | github-oidc = deny
/api/github-trust-policies/{id} | id | DELETE | oauth2-proxy = deny
/api/github-trust-policies/{id} | id | DELETE | per-key-other-ns = deny
/api/github-trust-policies/{id} | id | DELETE | per-key-owned-ns = deny
/api/github-trust-policies/{id} | id | DELETE | spa = allow
/api/github-trust-policies/{id} | id | DELETE | user-key = deny
/api/github-trust-policies/{id} | id | DELETE | user-key-verified = allow
/api/github-trust-policies/{id} | id | GET | admin-spa = allow
/api/github-trust-policies/{id} | id | GET | cua-cli = allow
/api/github-trust-policies/{id} | id | GET | dcr-client = deny
/api/github-trust-policies/{id} | id | GET | empty-sub = deny
/api/github-trust-policies/{id} | id | GET | github-oidc = deny
/api/github-trust-policies/{id} | id | GET | oauth2-proxy = deny
/api/github-trust-policies/{id} | id | GET | per-key-other-ns = deny
/api/github-trust-policies/{id} | id | GET | per-key-owned-ns = deny
/api/github-trust-policies/{id} | id | GET | spa = allow
/api/github-trust-policies/{id} | id | GET | user-key = deny
/api/github-trust-policies/{id} | id | GET | user-key-verified = allow
/api/github-trust-policies/{id} | id | PATCH | admin-spa = allow
/api/github-trust-policies/{id} | id | PATCH | cua-cli = allow
/api/github-trust-policies/{id} | id | PATCH | dcr-client = deny
/api/github-trust-policies/{id} | id | PATCH | empty-sub = deny
/api/github-trust-policies/{id} | id | PATCH | github-oidc = deny
/api/github-trust-policies/{id} | id | PATCH | oauth2-proxy = deny
/api/github-trust-policies/{id} | id | PATCH | per-key-other-ns = deny
/api/github-trust-policies/{id} | id | PATCH | per-key-owned-ns = deny
/api/github-trust-policies/{id} | id | PATCH | spa = allow
/api/github-trust-policies/{id} | id | PATCH | user-key = deny
/api/github-trust-policies/{id} | id | PATCH | user-key-verified = allow
/api/github-trust-policies/{id} | id | POST | admin-spa = allow
/api/github-trust-policies/{id} | id | POST | cua-cli = allow
/api/github-trust-policies/{id} | id | POST | dcr-client = deny
/api/github-trust-policies/{id} | id | POST | empty-sub = deny
/api/github-trust-policies/{id} | id | POST | github-oidc = deny
/api/github-trust-policies/{id} | id | POST | oauth2-proxy = deny
/api/github-trust-policies/{id} | id | POST | per-key-other-ns = deny
/api/github-trust-policies/{id} | id | POST | per-key-owned-ns = deny
/api/github-trust-policies/{id} | id | POST | spa = allow
/api/github-trust-policies/{id} | id | POST | user-key = deny
/api/github-trust-policies/{id} | id | POST | user-key-verified = allow
/api/github-trust-policies/{id} | id | QUERY | admin-spa = allow
/api/github-trust-policies/{id} | id | QUERY | cua-cli = allow
/api/github-trust-policies/{id} | id | QUERY | dcr-client = deny
/api/github-trust-policies/{id} | id | QUERY | empty-sub = deny
/api/github-trust-policies/{id} | id | QUERY | github-oidc = deny
/api/github-trust-policies/{id} | id | QUERY | oauth2-proxy = deny
/api/github-trust-policies/{id} | id | QUERY | per-key-other-ns = deny
/api/github-trust-policies/{id} | id | QUERY | per-key-owned-ns = deny
/api/github-trust-policies/{id} | id | QUERY | spa = allow
/api/github-trust-policies/{id} | id | QUERY | user-key = deny
/api/github-trust-policies/{id} | id | QUERY | user-key-verified = allow
/api/k8s/{path...} | capsule-tenants | DELETE | admin-spa = deny
/api/k8s/{path...} | capsule-tenants | DELETE | cua-cli = deny
/api/k8s/{path...} | capsule-tenants | DELETE | dcr-client = deny
/api/k8s/{path...} | capsule-tenants | DELETE | empty-sub = deny
/api/k8s/{path...} | capsule-tenants | DELETE | github-oidc = deny
/api/k8s/{path...} | capsule-tenants | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | capsule-tenants | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | capsule-tenants | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | capsule-tenants | DELETE | spa = deny
/api/k8s/{path...} | capsule-tenants | DELETE | user-key = deny
/api/k8s/{path...} | capsule-tenants | DELETE | user-key-verified = deny
/api/k8s/{path...} | capsule-tenants | GET | admin-spa = deny
/api/k8s/{path...} | capsule-tenants | GET | cua-cli = deny
/api/k8s/{path...} | capsule-tenants | GET | dcr-client = deny
/api/k8s/{path...} | capsule-tenants | GET | empty-sub = deny
/api/k8s/{path...} | capsule-tenants | GET | github-oidc = deny
/api/k8s/{path...} | capsule-tenants | GET | oauth2-proxy = deny
/api/k8s/{path...} | capsule-tenants | GET | per-key-other-ns = deny
/api/k8s/{path...} | capsule-tenants | GET | per-key-owned-ns = deny
/api/k8s/{path...} | capsule-tenants | GET | spa = deny
/api/k8s/{path...} | capsule-tenants | GET | user-key = deny
/api/k8s/{path...} | capsule-tenants | GET | user-key-verified = deny
/api/k8s/{path...} | capsule-tenants | PATCH | admin-spa = deny
/api/k8s/{path...} | capsule-tenants | PATCH | cua-cli = deny
/api/k8s/{path...} | capsule-tenants | PATCH | dcr-client = deny
/api/k8s/{path...} | capsule-tenants | PATCH | empty-sub = deny
/api/k8s/{path...} | capsule-tenants | PATCH | github-oidc = deny
/api/k8s/{path...} | capsule-tenants | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | capsule-tenants | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | capsule-tenants | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | capsule-tenants | PATCH | spa = deny
/api/k8s/{path...} | capsule-tenants | PATCH | user-key = deny
/api/k8s/{path...} | capsule-tenants | PATCH | user-key-verified = deny
/api/k8s/{path...} | capsule-tenants | POST | admin-spa = deny
/api/k8s/{path...} | capsule-tenants | POST | cua-cli = deny
/api/k8s/{path...} | capsule-tenants | POST | dcr-client = deny
/api/k8s/{path...} | capsule-tenants | POST | empty-sub = deny
/api/k8s/{path...} | capsule-tenants | POST | github-oidc = deny
/api/k8s/{path...} | capsule-tenants | POST | oauth2-proxy = deny
/api/k8s/{path...} | capsule-tenants | POST | per-key-other-ns = deny
/api/k8s/{path...} | capsule-tenants | POST | per-key-owned-ns = deny
/api/k8s/{path...} | capsule-tenants | POST | spa = deny
/api/k8s/{path...} | capsule-tenants | POST | user-key = deny
/api/k8s/{path...} | capsule-tenants | POST | user-key-verified = deny
/api/k8s/{path...} | capsule-tenants | QUERY | admin-spa = deny
/api/k8s/{path...} | capsule-tenants | QUERY | cua-cli = deny
/api/k8s/{path...} | capsule-tenants | QUERY | dcr-client = deny
/api/k8s/{path...} | capsule-tenants | QUERY | empty-sub = deny
/api/k8s/{path...} | capsule-tenants | QUERY | github-oidc = deny
/api/k8s/{path...} | capsule-tenants | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | capsule-tenants | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | capsule-tenants | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | capsule-tenants | QUERY | spa = deny
/api/k8s/{path...} | capsule-tenants | QUERY | user-key = deny
/api/k8s/{path...} | capsule-tenants | QUERY | user-key-verified = deny
/api/k8s/{path...} | claim-item | DELETE | admin-spa = allow
/api/k8s/{path...} | claim-item | DELETE | cua-cli = allow
/api/k8s/{path...} | claim-item | DELETE | dcr-client = deny
/api/k8s/{path...} | claim-item | DELETE | empty-sub = deny
/api/k8s/{path...} | claim-item | DELETE | github-oidc = allow
/api/k8s/{path...} | claim-item | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | claim-item | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | claim-item | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | claim-item | DELETE | spa = allow
/api/k8s/{path...} | claim-item | DELETE | user-key = allow
/api/k8s/{path...} | claim-item | DELETE | user-key-verified = allow
/api/k8s/{path...} | claim-item | GET | admin-spa = allow
/api/k8s/{path...} | claim-item | GET | cua-cli = allow
/api/k8s/{path...} | claim-item | GET | dcr-client = deny
/api/k8s/{path...} | claim-item | GET | empty-sub = deny
/api/k8s/{path...} | claim-item | GET | github-oidc = allow
/api/k8s/{path...} | claim-item | GET | oauth2-proxy = deny
/api/k8s/{path...} | claim-item | GET | per-key-other-ns = deny
/api/k8s/{path...} | claim-item | GET | per-key-owned-ns = deny
/api/k8s/{path...} | claim-item | GET | spa = allow
/api/k8s/{path...} | claim-item | GET | user-key = allow
/api/k8s/{path...} | claim-item | GET | user-key-verified = allow
/api/k8s/{path...} | claim-item | PATCH | admin-spa = allow
/api/k8s/{path...} | claim-item | PATCH | cua-cli = allow
/api/k8s/{path...} | claim-item | PATCH | dcr-client = deny
/api/k8s/{path...} | claim-item | PATCH | empty-sub = deny
/api/k8s/{path...} | claim-item | PATCH | github-oidc = allow
/api/k8s/{path...} | claim-item | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | claim-item | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | claim-item | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | claim-item | PATCH | spa = allow
/api/k8s/{path...} | claim-item | PATCH | user-key = allow
/api/k8s/{path...} | claim-item | PATCH | user-key-verified = allow
/api/k8s/{path...} | claim-item | POST | admin-spa = deny
/api/k8s/{path...} | claim-item | POST | cua-cli = deny
/api/k8s/{path...} | claim-item | POST | dcr-client = deny
/api/k8s/{path...} | claim-item | POST | empty-sub = deny
/api/k8s/{path...} | claim-item | POST | github-oidc = deny
/api/k8s/{path...} | claim-item | POST | oauth2-proxy = deny
/api/k8s/{path...} | claim-item | POST | per-key-other-ns = deny
/api/k8s/{path...} | claim-item | POST | per-key-owned-ns = deny
/api/k8s/{path...} | claim-item | POST | spa = deny
/api/k8s/{path...} | claim-item | POST | user-key = deny
/api/k8s/{path...} | claim-item | POST | user-key-verified = deny
/api/k8s/{path...} | claim-item | QUERY | admin-spa = deny
/api/k8s/{path...} | claim-item | QUERY | cua-cli = deny
/api/k8s/{path...} | claim-item | QUERY | dcr-client = deny
/api/k8s/{path...} | claim-item | QUERY | empty-sub = deny
/api/k8s/{path...} | claim-item | QUERY | github-oidc = deny
/api/k8s/{path...} | claim-item | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | claim-item | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | claim-item | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | claim-item | QUERY | spa = deny
/api/k8s/{path...} | claim-item | QUERY | user-key = deny
/api/k8s/{path...} | claim-item | QUERY | user-key-verified = deny
/api/k8s/{path...} | claim-status | DELETE | admin-spa = deny
/api/k8s/{path...} | claim-status | DELETE | cua-cli = deny
/api/k8s/{path...} | claim-status | DELETE | dcr-client = deny
/api/k8s/{path...} | claim-status | DELETE | empty-sub = deny
/api/k8s/{path...} | claim-status | DELETE | github-oidc = deny
/api/k8s/{path...} | claim-status | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | claim-status | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | claim-status | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | claim-status | DELETE | spa = deny
/api/k8s/{path...} | claim-status | DELETE | user-key = deny
/api/k8s/{path...} | claim-status | DELETE | user-key-verified = deny
/api/k8s/{path...} | claim-status | GET | admin-spa = deny
/api/k8s/{path...} | claim-status | GET | cua-cli = deny
/api/k8s/{path...} | claim-status | GET | dcr-client = deny
/api/k8s/{path...} | claim-status | GET | empty-sub = deny
/api/k8s/{path...} | claim-status | GET | github-oidc = deny
/api/k8s/{path...} | claim-status | GET | oauth2-proxy = deny
/api/k8s/{path...} | claim-status | GET | per-key-other-ns = deny
/api/k8s/{path...} | claim-status | GET | per-key-owned-ns = deny
/api/k8s/{path...} | claim-status | GET | spa = deny
/api/k8s/{path...} | claim-status | GET | user-key = deny
/api/k8s/{path...} | claim-status | GET | user-key-verified = deny
/api/k8s/{path...} | claim-status | PATCH | admin-spa = allow
/api/k8s/{path...} | claim-status | PATCH | cua-cli = allow
/api/k8s/{path...} | claim-status | PATCH | dcr-client = deny
/api/k8s/{path...} | claim-status | PATCH | empty-sub = deny
/api/k8s/{path...} | claim-status | PATCH | github-oidc = deny
/api/k8s/{path...} | claim-status | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | claim-status | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | claim-status | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | claim-status | PATCH | spa = allow
/api/k8s/{path...} | claim-status | PATCH | user-key = allow
/api/k8s/{path...} | claim-status | PATCH | user-key-verified = allow
/api/k8s/{path...} | claim-status | POST | admin-spa = deny
/api/k8s/{path...} | claim-status | POST | cua-cli = deny
/api/k8s/{path...} | claim-status | POST | dcr-client = deny
/api/k8s/{path...} | claim-status | POST | empty-sub = deny
/api/k8s/{path...} | claim-status | POST | github-oidc = deny
/api/k8s/{path...} | claim-status | POST | oauth2-proxy = deny
/api/k8s/{path...} | claim-status | POST | per-key-other-ns = deny
/api/k8s/{path...} | claim-status | POST | per-key-owned-ns = deny
/api/k8s/{path...} | claim-status | POST | spa = deny
/api/k8s/{path...} | claim-status | POST | user-key = deny
/api/k8s/{path...} | claim-status | POST | user-key-verified = deny
/api/k8s/{path...} | claim-status | QUERY | admin-spa = deny
/api/k8s/{path...} | claim-status | QUERY | cua-cli = deny
/api/k8s/{path...} | claim-status | QUERY | dcr-client = deny
/api/k8s/{path...} | claim-status | QUERY | empty-sub = deny
/api/k8s/{path...} | claim-status | QUERY | github-oidc = deny
/api/k8s/{path...} | claim-status | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | claim-status | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | claim-status | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | claim-status | QUERY | spa = deny
/api/k8s/{path...} | claim-status | QUERY | user-key = deny
/api/k8s/{path...} | claim-status | QUERY | user-key-verified = deny
/api/k8s/{path...} | cluster-claims | DELETE | admin-spa = deny
/api/k8s/{path...} | cluster-claims | DELETE | cua-cli = deny
/api/k8s/{path...} | cluster-claims | DELETE | dcr-client = deny
/api/k8s/{path...} | cluster-claims | DELETE | empty-sub = deny
/api/k8s/{path...} | cluster-claims | DELETE | github-oidc = deny
/api/k8s/{path...} | cluster-claims | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | cluster-claims | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | cluster-claims | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-claims | DELETE | spa = deny
/api/k8s/{path...} | cluster-claims | DELETE | user-key = deny
/api/k8s/{path...} | cluster-claims | DELETE | user-key-verified = deny
/api/k8s/{path...} | cluster-claims | GET | admin-spa = deny
/api/k8s/{path...} | cluster-claims | GET | cua-cli = deny
/api/k8s/{path...} | cluster-claims | GET | dcr-client = deny
/api/k8s/{path...} | cluster-claims | GET | empty-sub = deny
/api/k8s/{path...} | cluster-claims | GET | github-oidc = deny
/api/k8s/{path...} | cluster-claims | GET | oauth2-proxy = deny
/api/k8s/{path...} | cluster-claims | GET | per-key-other-ns = deny
/api/k8s/{path...} | cluster-claims | GET | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-claims | GET | spa = deny
/api/k8s/{path...} | cluster-claims | GET | user-key = deny
/api/k8s/{path...} | cluster-claims | GET | user-key-verified = deny
/api/k8s/{path...} | cluster-claims | PATCH | admin-spa = deny
/api/k8s/{path...} | cluster-claims | PATCH | cua-cli = deny
/api/k8s/{path...} | cluster-claims | PATCH | dcr-client = deny
/api/k8s/{path...} | cluster-claims | PATCH | empty-sub = deny
/api/k8s/{path...} | cluster-claims | PATCH | github-oidc = deny
/api/k8s/{path...} | cluster-claims | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | cluster-claims | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | cluster-claims | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-claims | PATCH | spa = deny
/api/k8s/{path...} | cluster-claims | PATCH | user-key = deny
/api/k8s/{path...} | cluster-claims | PATCH | user-key-verified = deny
/api/k8s/{path...} | cluster-claims | POST | admin-spa = deny
/api/k8s/{path...} | cluster-claims | POST | cua-cli = deny
/api/k8s/{path...} | cluster-claims | POST | dcr-client = deny
/api/k8s/{path...} | cluster-claims | POST | empty-sub = deny
/api/k8s/{path...} | cluster-claims | POST | github-oidc = deny
/api/k8s/{path...} | cluster-claims | POST | oauth2-proxy = deny
/api/k8s/{path...} | cluster-claims | POST | per-key-other-ns = deny
/api/k8s/{path...} | cluster-claims | POST | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-claims | POST | spa = deny
/api/k8s/{path...} | cluster-claims | POST | user-key = deny
/api/k8s/{path...} | cluster-claims | POST | user-key-verified = deny
/api/k8s/{path...} | cluster-claims | QUERY | admin-spa = deny
/api/k8s/{path...} | cluster-claims | QUERY | cua-cli = deny
/api/k8s/{path...} | cluster-claims | QUERY | dcr-client = deny
/api/k8s/{path...} | cluster-claims | QUERY | empty-sub = deny
/api/k8s/{path...} | cluster-claims | QUERY | github-oidc = deny
/api/k8s/{path...} | cluster-claims | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | cluster-claims | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | cluster-claims | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-claims | QUERY | spa = deny
/api/k8s/{path...} | cluster-claims | QUERY | user-key = deny
/api/k8s/{path...} | cluster-claims | QUERY | user-key-verified = deny
/api/k8s/{path...} | cluster-events | DELETE | admin-spa = deny
/api/k8s/{path...} | cluster-events | DELETE | cua-cli = deny
/api/k8s/{path...} | cluster-events | DELETE | dcr-client = deny
/api/k8s/{path...} | cluster-events | DELETE | empty-sub = deny
/api/k8s/{path...} | cluster-events | DELETE | github-oidc = deny
/api/k8s/{path...} | cluster-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | cluster-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | cluster-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-events | DELETE | spa = deny
/api/k8s/{path...} | cluster-events | DELETE | user-key = deny
/api/k8s/{path...} | cluster-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | cluster-events | GET | admin-spa = deny
/api/k8s/{path...} | cluster-events | GET | cua-cli = deny
/api/k8s/{path...} | cluster-events | GET | dcr-client = deny
/api/k8s/{path...} | cluster-events | GET | empty-sub = deny
/api/k8s/{path...} | cluster-events | GET | github-oidc = deny
/api/k8s/{path...} | cluster-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | cluster-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | cluster-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-events | GET | spa = deny
/api/k8s/{path...} | cluster-events | GET | user-key = deny
/api/k8s/{path...} | cluster-events | GET | user-key-verified = deny
/api/k8s/{path...} | cluster-events | PATCH | admin-spa = deny
/api/k8s/{path...} | cluster-events | PATCH | cua-cli = deny
/api/k8s/{path...} | cluster-events | PATCH | dcr-client = deny
/api/k8s/{path...} | cluster-events | PATCH | empty-sub = deny
/api/k8s/{path...} | cluster-events | PATCH | github-oidc = deny
/api/k8s/{path...} | cluster-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | cluster-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | cluster-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-events | PATCH | spa = deny
/api/k8s/{path...} | cluster-events | PATCH | user-key = deny
/api/k8s/{path...} | cluster-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | cluster-events | POST | admin-spa = deny
/api/k8s/{path...} | cluster-events | POST | cua-cli = deny
/api/k8s/{path...} | cluster-events | POST | dcr-client = deny
/api/k8s/{path...} | cluster-events | POST | empty-sub = deny
/api/k8s/{path...} | cluster-events | POST | github-oidc = deny
/api/k8s/{path...} | cluster-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | cluster-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | cluster-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-events | POST | spa = deny
/api/k8s/{path...} | cluster-events | POST | user-key = deny
/api/k8s/{path...} | cluster-events | POST | user-key-verified = deny
/api/k8s/{path...} | cluster-events | QUERY | admin-spa = deny
/api/k8s/{path...} | cluster-events | QUERY | cua-cli = deny
/api/k8s/{path...} | cluster-events | QUERY | dcr-client = deny
/api/k8s/{path...} | cluster-events | QUERY | empty-sub = deny
/api/k8s/{path...} | cluster-events | QUERY | github-oidc = deny
/api/k8s/{path...} | cluster-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | cluster-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | cluster-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-events | QUERY | spa = deny
/api/k8s/{path...} | cluster-events | QUERY | user-key = deny
/api/k8s/{path...} | cluster-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | cluster-nodes | DELETE | admin-spa = deny
/api/k8s/{path...} | cluster-nodes | DELETE | cua-cli = deny
/api/k8s/{path...} | cluster-nodes | DELETE | dcr-client = deny
/api/k8s/{path...} | cluster-nodes | DELETE | empty-sub = deny
/api/k8s/{path...} | cluster-nodes | DELETE | github-oidc = deny
/api/k8s/{path...} | cluster-nodes | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | cluster-nodes | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | cluster-nodes | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-nodes | DELETE | spa = deny
/api/k8s/{path...} | cluster-nodes | DELETE | user-key = deny
/api/k8s/{path...} | cluster-nodes | DELETE | user-key-verified = deny
/api/k8s/{path...} | cluster-nodes | GET | admin-spa = deny
/api/k8s/{path...} | cluster-nodes | GET | cua-cli = deny
/api/k8s/{path...} | cluster-nodes | GET | dcr-client = deny
/api/k8s/{path...} | cluster-nodes | GET | empty-sub = deny
/api/k8s/{path...} | cluster-nodes | GET | github-oidc = deny
/api/k8s/{path...} | cluster-nodes | GET | oauth2-proxy = deny
/api/k8s/{path...} | cluster-nodes | GET | per-key-other-ns = deny
/api/k8s/{path...} | cluster-nodes | GET | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-nodes | GET | spa = deny
/api/k8s/{path...} | cluster-nodes | GET | user-key = deny
/api/k8s/{path...} | cluster-nodes | GET | user-key-verified = deny
/api/k8s/{path...} | cluster-nodes | PATCH | admin-spa = deny
/api/k8s/{path...} | cluster-nodes | PATCH | cua-cli = deny
/api/k8s/{path...} | cluster-nodes | PATCH | dcr-client = deny
/api/k8s/{path...} | cluster-nodes | PATCH | empty-sub = deny
/api/k8s/{path...} | cluster-nodes | PATCH | github-oidc = deny
/api/k8s/{path...} | cluster-nodes | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | cluster-nodes | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | cluster-nodes | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-nodes | PATCH | spa = deny
/api/k8s/{path...} | cluster-nodes | PATCH | user-key = deny
/api/k8s/{path...} | cluster-nodes | PATCH | user-key-verified = deny
/api/k8s/{path...} | cluster-nodes | POST | admin-spa = deny
/api/k8s/{path...} | cluster-nodes | POST | cua-cli = deny
/api/k8s/{path...} | cluster-nodes | POST | dcr-client = deny
/api/k8s/{path...} | cluster-nodes | POST | empty-sub = deny
/api/k8s/{path...} | cluster-nodes | POST | github-oidc = deny
/api/k8s/{path...} | cluster-nodes | POST | oauth2-proxy = deny
/api/k8s/{path...} | cluster-nodes | POST | per-key-other-ns = deny
/api/k8s/{path...} | cluster-nodes | POST | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-nodes | POST | spa = deny
/api/k8s/{path...} | cluster-nodes | POST | user-key = deny
/api/k8s/{path...} | cluster-nodes | POST | user-key-verified = deny
/api/k8s/{path...} | cluster-nodes | QUERY | admin-spa = deny
/api/k8s/{path...} | cluster-nodes | QUERY | cua-cli = deny
/api/k8s/{path...} | cluster-nodes | QUERY | dcr-client = deny
/api/k8s/{path...} | cluster-nodes | QUERY | empty-sub = deny
/api/k8s/{path...} | cluster-nodes | QUERY | github-oidc = deny
/api/k8s/{path...} | cluster-nodes | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | cluster-nodes | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | cluster-nodes | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-nodes | QUERY | spa = deny
/api/k8s/{path...} | cluster-nodes | QUERY | user-key = deny
/api/k8s/{path...} | cluster-nodes | QUERY | user-key-verified = deny
/api/k8s/{path...} | cluster-pods | DELETE | admin-spa = deny
/api/k8s/{path...} | cluster-pods | DELETE | cua-cli = deny
/api/k8s/{path...} | cluster-pods | DELETE | dcr-client = deny
/api/k8s/{path...} | cluster-pods | DELETE | empty-sub = deny
/api/k8s/{path...} | cluster-pods | DELETE | github-oidc = deny
/api/k8s/{path...} | cluster-pods | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | cluster-pods | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | cluster-pods | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-pods | DELETE | spa = deny
/api/k8s/{path...} | cluster-pods | DELETE | user-key = deny
/api/k8s/{path...} | cluster-pods | DELETE | user-key-verified = deny
/api/k8s/{path...} | cluster-pods | GET | admin-spa = deny
/api/k8s/{path...} | cluster-pods | GET | cua-cli = deny
/api/k8s/{path...} | cluster-pods | GET | dcr-client = deny
/api/k8s/{path...} | cluster-pods | GET | empty-sub = deny
/api/k8s/{path...} | cluster-pods | GET | github-oidc = deny
/api/k8s/{path...} | cluster-pods | GET | oauth2-proxy = deny
/api/k8s/{path...} | cluster-pods | GET | per-key-other-ns = deny
/api/k8s/{path...} | cluster-pods | GET | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-pods | GET | spa = deny
/api/k8s/{path...} | cluster-pods | GET | user-key = deny
/api/k8s/{path...} | cluster-pods | GET | user-key-verified = deny
/api/k8s/{path...} | cluster-pods | PATCH | admin-spa = deny
/api/k8s/{path...} | cluster-pods | PATCH | cua-cli = deny
/api/k8s/{path...} | cluster-pods | PATCH | dcr-client = deny
/api/k8s/{path...} | cluster-pods | PATCH | empty-sub = deny
/api/k8s/{path...} | cluster-pods | PATCH | github-oidc = deny
/api/k8s/{path...} | cluster-pods | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | cluster-pods | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | cluster-pods | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-pods | PATCH | spa = deny
/api/k8s/{path...} | cluster-pods | PATCH | user-key = deny
/api/k8s/{path...} | cluster-pods | PATCH | user-key-verified = deny
/api/k8s/{path...} | cluster-pods | POST | admin-spa = deny
/api/k8s/{path...} | cluster-pods | POST | cua-cli = deny
/api/k8s/{path...} | cluster-pods | POST | dcr-client = deny
/api/k8s/{path...} | cluster-pods | POST | empty-sub = deny
/api/k8s/{path...} | cluster-pods | POST | github-oidc = deny
/api/k8s/{path...} | cluster-pods | POST | oauth2-proxy = deny
/api/k8s/{path...} | cluster-pods | POST | per-key-other-ns = deny
/api/k8s/{path...} | cluster-pods | POST | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-pods | POST | spa = deny
/api/k8s/{path...} | cluster-pods | POST | user-key = deny
/api/k8s/{path...} | cluster-pods | POST | user-key-verified = deny
/api/k8s/{path...} | cluster-pods | QUERY | admin-spa = deny
/api/k8s/{path...} | cluster-pods | QUERY | cua-cli = deny
/api/k8s/{path...} | cluster-pods | QUERY | dcr-client = deny
/api/k8s/{path...} | cluster-pods | QUERY | empty-sub = deny
/api/k8s/{path...} | cluster-pods | QUERY | github-oidc = deny
/api/k8s/{path...} | cluster-pods | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | cluster-pods | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | cluster-pods | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | cluster-pods | QUERY | spa = deny
/api/k8s/{path...} | cluster-pods | QUERY | user-key = deny
/api/k8s/{path...} | cluster-pods | QUERY | user-key-verified = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | admin-spa = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | cua-cli = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | dcr-client = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | empty-sub = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | github-oidc = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | spa = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | user-key = deny
/api/k8s/{path...} | cyclops-configmaps | DELETE | user-key-verified = deny
/api/k8s/{path...} | cyclops-configmaps | GET | admin-spa = deny
/api/k8s/{path...} | cyclops-configmaps | GET | cua-cli = deny
/api/k8s/{path...} | cyclops-configmaps | GET | dcr-client = deny
/api/k8s/{path...} | cyclops-configmaps | GET | empty-sub = deny
/api/k8s/{path...} | cyclops-configmaps | GET | github-oidc = deny
/api/k8s/{path...} | cyclops-configmaps | GET | oauth2-proxy = deny
/api/k8s/{path...} | cyclops-configmaps | GET | per-key-other-ns = deny
/api/k8s/{path...} | cyclops-configmaps | GET | per-key-owned-ns = deny
/api/k8s/{path...} | cyclops-configmaps | GET | spa = deny
/api/k8s/{path...} | cyclops-configmaps | GET | user-key = deny
/api/k8s/{path...} | cyclops-configmaps | GET | user-key-verified = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | admin-spa = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | cua-cli = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | dcr-client = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | empty-sub = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | github-oidc = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | spa = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | user-key = deny
/api/k8s/{path...} | cyclops-configmaps | PATCH | user-key-verified = deny
/api/k8s/{path...} | cyclops-configmaps | POST | admin-spa = deny
/api/k8s/{path...} | cyclops-configmaps | POST | cua-cli = deny
/api/k8s/{path...} | cyclops-configmaps | POST | dcr-client = deny
/api/k8s/{path...} | cyclops-configmaps | POST | empty-sub = deny
/api/k8s/{path...} | cyclops-configmaps | POST | github-oidc = deny
/api/k8s/{path...} | cyclops-configmaps | POST | oauth2-proxy = deny
/api/k8s/{path...} | cyclops-configmaps | POST | per-key-other-ns = deny
/api/k8s/{path...} | cyclops-configmaps | POST | per-key-owned-ns = deny
/api/k8s/{path...} | cyclops-configmaps | POST | spa = deny
/api/k8s/{path...} | cyclops-configmaps | POST | user-key = deny
/api/k8s/{path...} | cyclops-configmaps | POST | user-key-verified = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | admin-spa = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | cua-cli = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | dcr-client = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | empty-sub = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | github-oidc = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | spa = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | user-key = deny
/api/k8s/{path...} | cyclops-configmaps | QUERY | user-key-verified = deny
/api/k8s/{path...} | discovery | DELETE | admin-spa = deny
/api/k8s/{path...} | discovery | DELETE | cua-cli = deny
/api/k8s/{path...} | discovery | DELETE | dcr-client = deny
/api/k8s/{path...} | discovery | DELETE | empty-sub = deny
/api/k8s/{path...} | discovery | DELETE | github-oidc = deny
/api/k8s/{path...} | discovery | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | discovery | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | discovery | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | discovery | DELETE | spa = deny
/api/k8s/{path...} | discovery | DELETE | user-key = deny
/api/k8s/{path...} | discovery | DELETE | user-key-verified = deny
/api/k8s/{path...} | discovery | GET | admin-spa = allow
/api/k8s/{path...} | discovery | GET | cua-cli = allow
/api/k8s/{path...} | discovery | GET | dcr-client = deny
/api/k8s/{path...} | discovery | GET | empty-sub = deny
/api/k8s/{path...} | discovery | GET | github-oidc = deny
/api/k8s/{path...} | discovery | GET | oauth2-proxy = deny
/api/k8s/{path...} | discovery | GET | per-key-other-ns = deny
/api/k8s/{path...} | discovery | GET | per-key-owned-ns = deny
/api/k8s/{path...} | discovery | GET | spa = allow
/api/k8s/{path...} | discovery | GET | user-key = allow
/api/k8s/{path...} | discovery | GET | user-key-verified = allow
/api/k8s/{path...} | discovery | PATCH | admin-spa = deny
/api/k8s/{path...} | discovery | PATCH | cua-cli = deny
/api/k8s/{path...} | discovery | PATCH | dcr-client = deny
/api/k8s/{path...} | discovery | PATCH | empty-sub = deny
/api/k8s/{path...} | discovery | PATCH | github-oidc = deny
/api/k8s/{path...} | discovery | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | discovery | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | discovery | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | discovery | PATCH | spa = deny
/api/k8s/{path...} | discovery | PATCH | user-key = deny
/api/k8s/{path...} | discovery | PATCH | user-key-verified = deny
/api/k8s/{path...} | discovery | POST | admin-spa = deny
/api/k8s/{path...} | discovery | POST | cua-cli = deny
/api/k8s/{path...} | discovery | POST | dcr-client = deny
/api/k8s/{path...} | discovery | POST | empty-sub = deny
/api/k8s/{path...} | discovery | POST | github-oidc = deny
/api/k8s/{path...} | discovery | POST | oauth2-proxy = deny
/api/k8s/{path...} | discovery | POST | per-key-other-ns = deny
/api/k8s/{path...} | discovery | POST | per-key-owned-ns = deny
/api/k8s/{path...} | discovery | POST | spa = deny
/api/k8s/{path...} | discovery | POST | user-key = deny
/api/k8s/{path...} | discovery | POST | user-key-verified = deny
/api/k8s/{path...} | discovery | QUERY | admin-spa = deny
/api/k8s/{path...} | discovery | QUERY | cua-cli = deny
/api/k8s/{path...} | discovery | QUERY | dcr-client = deny
/api/k8s/{path...} | discovery | QUERY | empty-sub = deny
/api/k8s/{path...} | discovery | QUERY | github-oidc = deny
/api/k8s/{path...} | discovery | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | discovery | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | discovery | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | discovery | QUERY | spa = deny
/api/k8s/{path...} | discovery | QUERY | user-key = deny
/api/k8s/{path...} | discovery | QUERY | user-key-verified = deny
/api/k8s/{path...} | event-group-collision | DELETE | admin-spa = deny
/api/k8s/{path...} | event-group-collision | DELETE | cua-cli = deny
/api/k8s/{path...} | event-group-collision | DELETE | dcr-client = deny
/api/k8s/{path...} | event-group-collision | DELETE | empty-sub = deny
/api/k8s/{path...} | event-group-collision | DELETE | github-oidc = deny
/api/k8s/{path...} | event-group-collision | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | event-group-collision | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | event-group-collision | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | event-group-collision | DELETE | spa = deny
/api/k8s/{path...} | event-group-collision | DELETE | user-key = deny
/api/k8s/{path...} | event-group-collision | DELETE | user-key-verified = deny
/api/k8s/{path...} | event-group-collision | GET | admin-spa = deny
/api/k8s/{path...} | event-group-collision | GET | cua-cli = deny
/api/k8s/{path...} | event-group-collision | GET | dcr-client = deny
/api/k8s/{path...} | event-group-collision | GET | empty-sub = deny
/api/k8s/{path...} | event-group-collision | GET | github-oidc = deny
/api/k8s/{path...} | event-group-collision | GET | oauth2-proxy = deny
/api/k8s/{path...} | event-group-collision | GET | per-key-other-ns = deny
/api/k8s/{path...} | event-group-collision | GET | per-key-owned-ns = deny
/api/k8s/{path...} | event-group-collision | GET | spa = deny
/api/k8s/{path...} | event-group-collision | GET | user-key = deny
/api/k8s/{path...} | event-group-collision | GET | user-key-verified = deny
/api/k8s/{path...} | event-group-collision | PATCH | admin-spa = deny
/api/k8s/{path...} | event-group-collision | PATCH | cua-cli = deny
/api/k8s/{path...} | event-group-collision | PATCH | dcr-client = deny
/api/k8s/{path...} | event-group-collision | PATCH | empty-sub = deny
/api/k8s/{path...} | event-group-collision | PATCH | github-oidc = deny
/api/k8s/{path...} | event-group-collision | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | event-group-collision | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | event-group-collision | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | event-group-collision | PATCH | spa = deny
/api/k8s/{path...} | event-group-collision | PATCH | user-key = deny
/api/k8s/{path...} | event-group-collision | PATCH | user-key-verified = deny
/api/k8s/{path...} | event-group-collision | POST | admin-spa = deny
/api/k8s/{path...} | event-group-collision | POST | cua-cli = deny
/api/k8s/{path...} | event-group-collision | POST | dcr-client = deny
/api/k8s/{path...} | event-group-collision | POST | empty-sub = deny
/api/k8s/{path...} | event-group-collision | POST | github-oidc = deny
/api/k8s/{path...} | event-group-collision | POST | oauth2-proxy = deny
/api/k8s/{path...} | event-group-collision | POST | per-key-other-ns = deny
/api/k8s/{path...} | event-group-collision | POST | per-key-owned-ns = deny
/api/k8s/{path...} | event-group-collision | POST | spa = deny
/api/k8s/{path...} | event-group-collision | POST | user-key = deny
/api/k8s/{path...} | event-group-collision | POST | user-key-verified = deny
/api/k8s/{path...} | event-group-collision | QUERY | admin-spa = deny
/api/k8s/{path...} | event-group-collision | QUERY | cua-cli = deny
/api/k8s/{path...} | event-group-collision | QUERY | dcr-client = deny
/api/k8s/{path...} | event-group-collision | QUERY | empty-sub = deny
/api/k8s/{path...} | event-group-collision | QUERY | github-oidc = deny
/api/k8s/{path...} | event-group-collision | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | event-group-collision | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | event-group-collision | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | event-group-collision | QUERY | spa = deny
/api/k8s/{path...} | event-group-collision | QUERY | user-key = deny
/api/k8s/{path...} | event-group-collision | QUERY | user-key-verified = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | admin-spa = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | cua-cli = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | dcr-client = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | empty-sub = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | github-oidc = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | spa = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | user-key = deny
/api/k8s/{path...} | granted-ns-claims | DELETE | user-key-verified = deny
/api/k8s/{path...} | granted-ns-claims | GET | admin-spa = allow
/api/k8s/{path...} | granted-ns-claims | GET | cua-cli = allow
/api/k8s/{path...} | granted-ns-claims | GET | dcr-client = deny
/api/k8s/{path...} | granted-ns-claims | GET | empty-sub = deny
/api/k8s/{path...} | granted-ns-claims | GET | github-oidc = allow
/api/k8s/{path...} | granted-ns-claims | GET | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-claims | GET | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-claims | GET | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-claims | GET | spa = allow
/api/k8s/{path...} | granted-ns-claims | GET | user-key = allow
/api/k8s/{path...} | granted-ns-claims | GET | user-key-verified = allow
/api/k8s/{path...} | granted-ns-claims | PATCH | admin-spa = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | cua-cli = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | dcr-client = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | empty-sub = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | github-oidc = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | spa = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | user-key = deny
/api/k8s/{path...} | granted-ns-claims | PATCH | user-key-verified = deny
/api/k8s/{path...} | granted-ns-claims | POST | admin-spa = allow
/api/k8s/{path...} | granted-ns-claims | POST | cua-cli = allow
/api/k8s/{path...} | granted-ns-claims | POST | dcr-client = deny
/api/k8s/{path...} | granted-ns-claims | POST | empty-sub = deny
/api/k8s/{path...} | granted-ns-claims | POST | github-oidc = allow
/api/k8s/{path...} | granted-ns-claims | POST | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-claims | POST | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-claims | POST | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-claims | POST | spa = allow
/api/k8s/{path...} | granted-ns-claims | POST | user-key = allow
/api/k8s/{path...} | granted-ns-claims | POST | user-key-verified = allow
/api/k8s/{path...} | granted-ns-claims | QUERY | admin-spa = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | cua-cli = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | dcr-client = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | empty-sub = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | github-oidc = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | spa = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | user-key = deny
/api/k8s/{path...} | granted-ns-claims | QUERY | user-key-verified = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | admin-spa = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | cua-cli = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | dcr-client = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | empty-sub = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | github-oidc = allow
/api/k8s/{path...} | granted-ns-pools | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | spa = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | user-key = deny
/api/k8s/{path...} | granted-ns-pools | DELETE | user-key-verified = deny
/api/k8s/{path...} | granted-ns-pools | GET | admin-spa = allow
/api/k8s/{path...} | granted-ns-pools | GET | cua-cli = allow
/api/k8s/{path...} | granted-ns-pools | GET | dcr-client = deny
/api/k8s/{path...} | granted-ns-pools | GET | empty-sub = deny
/api/k8s/{path...} | granted-ns-pools | GET | github-oidc = allow
/api/k8s/{path...} | granted-ns-pools | GET | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-pools | GET | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-pools | GET | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-pools | GET | spa = allow
/api/k8s/{path...} | granted-ns-pools | GET | user-key = allow
/api/k8s/{path...} | granted-ns-pools | GET | user-key-verified = allow
/api/k8s/{path...} | granted-ns-pools | PATCH | admin-spa = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | cua-cli = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | dcr-client = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | empty-sub = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | github-oidc = allow
/api/k8s/{path...} | granted-ns-pools | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | spa = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | user-key = deny
/api/k8s/{path...} | granted-ns-pools | PATCH | user-key-verified = deny
/api/k8s/{path...} | granted-ns-pools | POST | admin-spa = allow
/api/k8s/{path...} | granted-ns-pools | POST | cua-cli = allow
/api/k8s/{path...} | granted-ns-pools | POST | dcr-client = deny
/api/k8s/{path...} | granted-ns-pools | POST | empty-sub = deny
/api/k8s/{path...} | granted-ns-pools | POST | github-oidc = allow
/api/k8s/{path...} | granted-ns-pools | POST | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-pools | POST | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-pools | POST | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-pools | POST | spa = allow
/api/k8s/{path...} | granted-ns-pools | POST | user-key = allow
/api/k8s/{path...} | granted-ns-pools | POST | user-key-verified = allow
/api/k8s/{path...} | granted-ns-pools | QUERY | admin-spa = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | cua-cli = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | dcr-client = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | empty-sub = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | github-oidc = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | spa = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | user-key = deny
/api/k8s/{path...} | granted-ns-pools | QUERY | user-key-verified = deny
/api/k8s/{path...} | group-cluster-events | DELETE | admin-spa = deny
/api/k8s/{path...} | group-cluster-events | DELETE | cua-cli = deny
/api/k8s/{path...} | group-cluster-events | DELETE | dcr-client = deny
/api/k8s/{path...} | group-cluster-events | DELETE | empty-sub = deny
/api/k8s/{path...} | group-cluster-events | DELETE | github-oidc = deny
/api/k8s/{path...} | group-cluster-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | group-cluster-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | group-cluster-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | group-cluster-events | DELETE | spa = deny
/api/k8s/{path...} | group-cluster-events | DELETE | user-key = deny
/api/k8s/{path...} | group-cluster-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | group-cluster-events | GET | admin-spa = deny
/api/k8s/{path...} | group-cluster-events | GET | cua-cli = deny
/api/k8s/{path...} | group-cluster-events | GET | dcr-client = deny
/api/k8s/{path...} | group-cluster-events | GET | empty-sub = deny
/api/k8s/{path...} | group-cluster-events | GET | github-oidc = deny
/api/k8s/{path...} | group-cluster-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | group-cluster-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | group-cluster-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | group-cluster-events | GET | spa = deny
/api/k8s/{path...} | group-cluster-events | GET | user-key = deny
/api/k8s/{path...} | group-cluster-events | GET | user-key-verified = deny
/api/k8s/{path...} | group-cluster-events | PATCH | admin-spa = deny
/api/k8s/{path...} | group-cluster-events | PATCH | cua-cli = deny
/api/k8s/{path...} | group-cluster-events | PATCH | dcr-client = deny
/api/k8s/{path...} | group-cluster-events | PATCH | empty-sub = deny
/api/k8s/{path...} | group-cluster-events | PATCH | github-oidc = deny
/api/k8s/{path...} | group-cluster-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | group-cluster-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | group-cluster-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | group-cluster-events | PATCH | spa = deny
/api/k8s/{path...} | group-cluster-events | PATCH | user-key = deny
/api/k8s/{path...} | group-cluster-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | group-cluster-events | POST | admin-spa = deny
/api/k8s/{path...} | group-cluster-events | POST | cua-cli = deny
/api/k8s/{path...} | group-cluster-events | POST | dcr-client = deny
/api/k8s/{path...} | group-cluster-events | POST | empty-sub = deny
/api/k8s/{path...} | group-cluster-events | POST | github-oidc = deny
/api/k8s/{path...} | group-cluster-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | group-cluster-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | group-cluster-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | group-cluster-events | POST | spa = deny
/api/k8s/{path...} | group-cluster-events | POST | user-key = deny
/api/k8s/{path...} | group-cluster-events | POST | user-key-verified = deny
/api/k8s/{path...} | group-cluster-events | QUERY | admin-spa = deny
/api/k8s/{path...} | group-cluster-events | QUERY | cua-cli = deny
/api/k8s/{path...} | group-cluster-events | QUERY | dcr-client = deny
/api/k8s/{path...} | group-cluster-events | QUERY | empty-sub = deny
/api/k8s/{path...} | group-cluster-events | QUERY | github-oidc = deny
/api/k8s/{path...} | group-cluster-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | group-cluster-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | group-cluster-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | group-cluster-events | QUERY | spa = deny
/api/k8s/{path...} | group-cluster-events | QUERY | user-key = deny
/api/k8s/{path...} | group-cluster-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | admin-spa = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | cua-cli = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | dcr-client = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | empty-sub = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | github-oidc = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | spa = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | user-key = deny
/api/k8s/{path...} | group-namespaced-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | group-namespaced-events | GET | admin-spa = deny
/api/k8s/{path...} | group-namespaced-events | GET | cua-cli = deny
/api/k8s/{path...} | group-namespaced-events | GET | dcr-client = deny
/api/k8s/{path...} | group-namespaced-events | GET | empty-sub = deny
/api/k8s/{path...} | group-namespaced-events | GET | github-oidc = deny
/api/k8s/{path...} | group-namespaced-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | group-namespaced-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | group-namespaced-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | group-namespaced-events | GET | spa = deny
/api/k8s/{path...} | group-namespaced-events | GET | user-key = deny
/api/k8s/{path...} | group-namespaced-events | GET | user-key-verified = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | admin-spa = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | cua-cli = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | dcr-client = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | empty-sub = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | github-oidc = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | spa = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | user-key = deny
/api/k8s/{path...} | group-namespaced-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | group-namespaced-events | POST | admin-spa = deny
/api/k8s/{path...} | group-namespaced-events | POST | cua-cli = deny
/api/k8s/{path...} | group-namespaced-events | POST | dcr-client = deny
/api/k8s/{path...} | group-namespaced-events | POST | empty-sub = deny
/api/k8s/{path...} | group-namespaced-events | POST | github-oidc = deny
/api/k8s/{path...} | group-namespaced-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | group-namespaced-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | group-namespaced-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | group-namespaced-events | POST | spa = deny
/api/k8s/{path...} | group-namespaced-events | POST | user-key = deny
/api/k8s/{path...} | group-namespaced-events | POST | user-key-verified = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | admin-spa = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | cua-cli = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | dcr-client = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | empty-sub = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | github-oidc = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | spa = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | user-key = deny
/api/k8s/{path...} | group-namespaced-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | DELETE | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | GET | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | PATCH | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | POST | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-nodes | QUERY | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | DELETE | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | GET | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | PATCH | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | POST | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | admin-spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | cua-cli = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | dcr-client = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | empty-sub = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | github-oidc = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | spa = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | user-key = deny
/api/k8s/{path...} | legacy-watch-cluster-pods | QUERY | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | admin-spa = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | cua-cli = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | dcr-client = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | empty-sub = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | github-oidc = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | spa = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | user-key = deny
/api/k8s/{path...} | legacy-watch-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-events | GET | admin-spa = deny
/api/k8s/{path...} | legacy-watch-events | GET | cua-cli = deny
/api/k8s/{path...} | legacy-watch-events | GET | dcr-client = deny
/api/k8s/{path...} | legacy-watch-events | GET | empty-sub = deny
/api/k8s/{path...} | legacy-watch-events | GET | github-oidc = deny
/api/k8s/{path...} | legacy-watch-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-events | GET | spa = deny
/api/k8s/{path...} | legacy-watch-events | GET | user-key = deny
/api/k8s/{path...} | legacy-watch-events | GET | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | admin-spa = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | cua-cli = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | dcr-client = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | empty-sub = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | github-oidc = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | spa = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | user-key = deny
/api/k8s/{path...} | legacy-watch-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-events | POST | admin-spa = deny
/api/k8s/{path...} | legacy-watch-events | POST | cua-cli = deny
/api/k8s/{path...} | legacy-watch-events | POST | dcr-client = deny
/api/k8s/{path...} | legacy-watch-events | POST | empty-sub = deny
/api/k8s/{path...} | legacy-watch-events | POST | github-oidc = deny
/api/k8s/{path...} | legacy-watch-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-events | POST | spa = deny
/api/k8s/{path...} | legacy-watch-events | POST | user-key = deny
/api/k8s/{path...} | legacy-watch-events | POST | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | admin-spa = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | cua-cli = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | dcr-client = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | empty-sub = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | github-oidc = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | spa = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | user-key = deny
/api/k8s/{path...} | legacy-watch-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | admin-spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | cua-cli = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | dcr-client = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | empty-sub = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | github-oidc = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | user-key = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | admin-spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | cua-cli = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | dcr-client = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | empty-sub = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | github-oidc = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | user-key = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | GET | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | admin-spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | cua-cli = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | dcr-client = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | empty-sub = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | github-oidc = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | user-key = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | admin-spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | cua-cli = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | dcr-client = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | empty-sub = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | github-oidc = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | user-key = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | POST | user-key-verified = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | admin-spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | cua-cli = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | dcr-client = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | empty-sub = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | github-oidc = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | spa = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | user-key = deny
/api/k8s/{path...} | legacy-watch-namespaced-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | namespaced-events | DELETE | admin-spa = deny
/api/k8s/{path...} | namespaced-events | DELETE | cua-cli = deny
/api/k8s/{path...} | namespaced-events | DELETE | dcr-client = deny
/api/k8s/{path...} | namespaced-events | DELETE | empty-sub = deny
/api/k8s/{path...} | namespaced-events | DELETE | github-oidc = deny
/api/k8s/{path...} | namespaced-events | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-events | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-events | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-events | DELETE | spa = deny
/api/k8s/{path...} | namespaced-events | DELETE | user-key = deny
/api/k8s/{path...} | namespaced-events | DELETE | user-key-verified = deny
/api/k8s/{path...} | namespaced-events | GET | admin-spa = deny
/api/k8s/{path...} | namespaced-events | GET | cua-cli = deny
/api/k8s/{path...} | namespaced-events | GET | dcr-client = deny
/api/k8s/{path...} | namespaced-events | GET | empty-sub = deny
/api/k8s/{path...} | namespaced-events | GET | github-oidc = deny
/api/k8s/{path...} | namespaced-events | GET | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-events | GET | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-events | GET | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-events | GET | spa = deny
/api/k8s/{path...} | namespaced-events | GET | user-key = deny
/api/k8s/{path...} | namespaced-events | GET | user-key-verified = deny
/api/k8s/{path...} | namespaced-events | PATCH | admin-spa = deny
/api/k8s/{path...} | namespaced-events | PATCH | cua-cli = deny
/api/k8s/{path...} | namespaced-events | PATCH | dcr-client = deny
/api/k8s/{path...} | namespaced-events | PATCH | empty-sub = deny
/api/k8s/{path...} | namespaced-events | PATCH | github-oidc = deny
/api/k8s/{path...} | namespaced-events | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-events | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-events | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-events | PATCH | spa = deny
/api/k8s/{path...} | namespaced-events | PATCH | user-key = deny
/api/k8s/{path...} | namespaced-events | PATCH | user-key-verified = deny
/api/k8s/{path...} | namespaced-events | POST | admin-spa = deny
/api/k8s/{path...} | namespaced-events | POST | cua-cli = deny
/api/k8s/{path...} | namespaced-events | POST | dcr-client = deny
/api/k8s/{path...} | namespaced-events | POST | empty-sub = deny
/api/k8s/{path...} | namespaced-events | POST | github-oidc = deny
/api/k8s/{path...} | namespaced-events | POST | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-events | POST | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-events | POST | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-events | POST | spa = deny
/api/k8s/{path...} | namespaced-events | POST | user-key = deny
/api/k8s/{path...} | namespaced-events | POST | user-key-verified = deny
/api/k8s/{path...} | namespaced-events | QUERY | admin-spa = deny
/api/k8s/{path...} | namespaced-events | QUERY | cua-cli = deny
/api/k8s/{path...} | namespaced-events | QUERY | dcr-client = deny
/api/k8s/{path...} | namespaced-events | QUERY | empty-sub = deny
/api/k8s/{path...} | namespaced-events | QUERY | github-oidc = deny
/api/k8s/{path...} | namespaced-events | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-events | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-events | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-events | QUERY | spa = deny
/api/k8s/{path...} | namespaced-events | QUERY | user-key = deny
/api/k8s/{path...} | namespaced-events | QUERY | user-key-verified = deny
/api/k8s/{path...} | namespaced-pods | DELETE | admin-spa = deny
/api/k8s/{path...} | namespaced-pods | DELETE | cua-cli = deny
/api/k8s/{path...} | namespaced-pods | DELETE | dcr-client = deny
/api/k8s/{path...} | namespaced-pods | DELETE | empty-sub = deny
/api/k8s/{path...} | namespaced-pods | DELETE | github-oidc = deny
/api/k8s/{path...} | namespaced-pods | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-pods | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-pods | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-pods | DELETE | spa = deny
/api/k8s/{path...} | namespaced-pods | DELETE | user-key = deny
/api/k8s/{path...} | namespaced-pods | DELETE | user-key-verified = deny
/api/k8s/{path...} | namespaced-pods | GET | admin-spa = allow
/api/k8s/{path...} | namespaced-pods | GET | cua-cli = allow
/api/k8s/{path...} | namespaced-pods | GET | dcr-client = deny
/api/k8s/{path...} | namespaced-pods | GET | empty-sub = deny
/api/k8s/{path...} | namespaced-pods | GET | github-oidc = deny
/api/k8s/{path...} | namespaced-pods | GET | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-pods | GET | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-pods | GET | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-pods | GET | spa = allow
/api/k8s/{path...} | namespaced-pods | GET | user-key = allow
/api/k8s/{path...} | namespaced-pods | GET | user-key-verified = allow
/api/k8s/{path...} | namespaced-pods | PATCH | admin-spa = deny
/api/k8s/{path...} | namespaced-pods | PATCH | cua-cli = deny
/api/k8s/{path...} | namespaced-pods | PATCH | dcr-client = deny
/api/k8s/{path...} | namespaced-pods | PATCH | empty-sub = deny
/api/k8s/{path...} | namespaced-pods | PATCH | github-oidc = deny
/api/k8s/{path...} | namespaced-pods | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-pods | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-pods | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-pods | PATCH | spa = deny
/api/k8s/{path...} | namespaced-pods | PATCH | user-key = deny
/api/k8s/{path...} | namespaced-pods | PATCH | user-key-verified = deny
/api/k8s/{path...} | namespaced-pods | POST | admin-spa = deny
/api/k8s/{path...} | namespaced-pods | POST | cua-cli = deny
/api/k8s/{path...} | namespaced-pods | POST | dcr-client = deny
/api/k8s/{path...} | namespaced-pods | POST | empty-sub = deny
/api/k8s/{path...} | namespaced-pods | POST | github-oidc = deny
/api/k8s/{path...} | namespaced-pods | POST | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-pods | POST | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-pods | POST | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-pods | POST | spa = deny
/api/k8s/{path...} | namespaced-pods | POST | user-key = deny
/api/k8s/{path...} | namespaced-pods | POST | user-key-verified = deny
/api/k8s/{path...} | namespaced-pods | QUERY | admin-spa = deny
/api/k8s/{path...} | namespaced-pods | QUERY | cua-cli = deny
/api/k8s/{path...} | namespaced-pods | QUERY | dcr-client = deny
/api/k8s/{path...} | namespaced-pods | QUERY | empty-sub = deny
/api/k8s/{path...} | namespaced-pods | QUERY | github-oidc = deny
/api/k8s/{path...} | namespaced-pods | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-pods | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-pods | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-pods | QUERY | spa = deny
/api/k8s/{path...} | namespaced-pods | QUERY | user-key = deny
/api/k8s/{path...} | namespaced-pods | QUERY | user-key-verified = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | admin-spa = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | cua-cli = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | dcr-client = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | empty-sub = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | github-oidc = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | spa = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | user-key = deny
/api/k8s/{path...} | namespaced-secrets | DELETE | user-key-verified = deny
/api/k8s/{path...} | namespaced-secrets | GET | admin-spa = deny
/api/k8s/{path...} | namespaced-secrets | GET | cua-cli = deny
/api/k8s/{path...} | namespaced-secrets | GET | dcr-client = deny
/api/k8s/{path...} | namespaced-secrets | GET | empty-sub = deny
/api/k8s/{path...} | namespaced-secrets | GET | github-oidc = deny
/api/k8s/{path...} | namespaced-secrets | GET | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-secrets | GET | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-secrets | GET | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-secrets | GET | spa = deny
/api/k8s/{path...} | namespaced-secrets | GET | user-key = deny
/api/k8s/{path...} | namespaced-secrets | GET | user-key-verified = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | admin-spa = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | cua-cli = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | dcr-client = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | empty-sub = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | github-oidc = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | spa = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | user-key = deny
/api/k8s/{path...} | namespaced-secrets | PATCH | user-key-verified = deny
/api/k8s/{path...} | namespaced-secrets | POST | admin-spa = deny
/api/k8s/{path...} | namespaced-secrets | POST | cua-cli = deny
/api/k8s/{path...} | namespaced-secrets | POST | dcr-client = deny
/api/k8s/{path...} | namespaced-secrets | POST | empty-sub = deny
/api/k8s/{path...} | namespaced-secrets | POST | github-oidc = deny
/api/k8s/{path...} | namespaced-secrets | POST | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-secrets | POST | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-secrets | POST | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-secrets | POST | spa = deny
/api/k8s/{path...} | namespaced-secrets | POST | user-key = deny
/api/k8s/{path...} | namespaced-secrets | POST | user-key-verified = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | admin-spa = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | cua-cli = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | dcr-client = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | empty-sub = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | github-oidc = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | spa = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | user-key = deny
/api/k8s/{path...} | namespaced-secrets | QUERY | user-key-verified = deny
/api/k8s/{path...} | namespaced-services | DELETE | admin-spa = deny
/api/k8s/{path...} | namespaced-services | DELETE | cua-cli = deny
/api/k8s/{path...} | namespaced-services | DELETE | dcr-client = deny
/api/k8s/{path...} | namespaced-services | DELETE | empty-sub = deny
/api/k8s/{path...} | namespaced-services | DELETE | github-oidc = deny
/api/k8s/{path...} | namespaced-services | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-services | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-services | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-services | DELETE | spa = deny
/api/k8s/{path...} | namespaced-services | DELETE | user-key = deny
/api/k8s/{path...} | namespaced-services | DELETE | user-key-verified = deny
/api/k8s/{path...} | namespaced-services | GET | admin-spa = allow
/api/k8s/{path...} | namespaced-services | GET | cua-cli = allow
/api/k8s/{path...} | namespaced-services | GET | dcr-client = deny
/api/k8s/{path...} | namespaced-services | GET | empty-sub = deny
/api/k8s/{path...} | namespaced-services | GET | github-oidc = deny
/api/k8s/{path...} | namespaced-services | GET | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-services | GET | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-services | GET | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-services | GET | spa = allow
/api/k8s/{path...} | namespaced-services | GET | user-key = allow
/api/k8s/{path...} | namespaced-services | GET | user-key-verified = allow
/api/k8s/{path...} | namespaced-services | PATCH | admin-spa = deny
/api/k8s/{path...} | namespaced-services | PATCH | cua-cli = deny
/api/k8s/{path...} | namespaced-services | PATCH | dcr-client = deny
/api/k8s/{path...} | namespaced-services | PATCH | empty-sub = deny
/api/k8s/{path...} | namespaced-services | PATCH | github-oidc = deny
/api/k8s/{path...} | namespaced-services | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-services | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-services | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-services | PATCH | spa = deny
/api/k8s/{path...} | namespaced-services | PATCH | user-key = deny
/api/k8s/{path...} | namespaced-services | PATCH | user-key-verified = deny
/api/k8s/{path...} | namespaced-services | POST | admin-spa = deny
/api/k8s/{path...} | namespaced-services | POST | cua-cli = deny
/api/k8s/{path...} | namespaced-services | POST | dcr-client = deny
/api/k8s/{path...} | namespaced-services | POST | empty-sub = deny
/api/k8s/{path...} | namespaced-services | POST | github-oidc = deny
/api/k8s/{path...} | namespaced-services | POST | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-services | POST | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-services | POST | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-services | POST | spa = deny
/api/k8s/{path...} | namespaced-services | POST | user-key = deny
/api/k8s/{path...} | namespaced-services | POST | user-key-verified = deny
/api/k8s/{path...} | namespaced-services | QUERY | admin-spa = deny
/api/k8s/{path...} | namespaced-services | QUERY | cua-cli = deny
/api/k8s/{path...} | namespaced-services | QUERY | dcr-client = deny
/api/k8s/{path...} | namespaced-services | QUERY | empty-sub = deny
/api/k8s/{path...} | namespaced-services | QUERY | github-oidc = deny
/api/k8s/{path...} | namespaced-services | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | namespaced-services | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | namespaced-services | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | namespaced-services | QUERY | spa = deny
/api/k8s/{path...} | namespaced-services | QUERY | user-key = deny
/api/k8s/{path...} | namespaced-services | QUERY | user-key-verified = deny
/api/k8s/{path...} | pod-logs | DELETE | admin-spa = deny
/api/k8s/{path...} | pod-logs | DELETE | cua-cli = deny
/api/k8s/{path...} | pod-logs | DELETE | dcr-client = deny
/api/k8s/{path...} | pod-logs | DELETE | empty-sub = deny
/api/k8s/{path...} | pod-logs | DELETE | github-oidc = deny
/api/k8s/{path...} | pod-logs | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | pod-logs | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | pod-logs | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | pod-logs | DELETE | spa = deny
/api/k8s/{path...} | pod-logs | DELETE | user-key = deny
/api/k8s/{path...} | pod-logs | DELETE | user-key-verified = deny
/api/k8s/{path...} | pod-logs | GET | admin-spa = allow
/api/k8s/{path...} | pod-logs | GET | cua-cli = allow
/api/k8s/{path...} | pod-logs | GET | dcr-client = deny
/api/k8s/{path...} | pod-logs | GET | empty-sub = deny
/api/k8s/{path...} | pod-logs | GET | github-oidc = deny
/api/k8s/{path...} | pod-logs | GET | oauth2-proxy = deny
/api/k8s/{path...} | pod-logs | GET | per-key-other-ns = deny
/api/k8s/{path...} | pod-logs | GET | per-key-owned-ns = deny
/api/k8s/{path...} | pod-logs | GET | spa = allow
/api/k8s/{path...} | pod-logs | GET | user-key = allow
/api/k8s/{path...} | pod-logs | GET | user-key-verified = allow
/api/k8s/{path...} | pod-logs | PATCH | admin-spa = deny
/api/k8s/{path...} | pod-logs | PATCH | cua-cli = deny
/api/k8s/{path...} | pod-logs | PATCH | dcr-client = deny
/api/k8s/{path...} | pod-logs | PATCH | empty-sub = deny
/api/k8s/{path...} | pod-logs | PATCH | github-oidc = deny
/api/k8s/{path...} | pod-logs | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | pod-logs | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | pod-logs | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | pod-logs | PATCH | spa = deny
/api/k8s/{path...} | pod-logs | PATCH | user-key = deny
/api/k8s/{path...} | pod-logs | PATCH | user-key-verified = deny
/api/k8s/{path...} | pod-logs | POST | admin-spa = deny
/api/k8s/{path...} | pod-logs | POST | cua-cli = deny
/api/k8s/{path...} | pod-logs | POST | dcr-client = deny
/api/k8s/{path...} | pod-logs | POST | empty-sub = deny
/api/k8s/{path...} | pod-logs | POST | github-oidc = deny
/api/k8s/{path...} | pod-logs | POST | oauth2-proxy = deny
/api/k8s/{path...} | pod-logs | POST | per-key-other-ns = deny
/api/k8s/{path...} | pod-logs | POST | per-key-owned-ns = deny
/api/k8s/{path...} | pod-logs | POST | spa = deny
/api/k8s/{path...} | pod-logs | POST | user-key = deny
/api/k8s/{path...} | pod-logs | POST | user-key-verified = deny
/api/k8s/{path...} | pod-logs | QUERY | admin-spa = deny
/api/k8s/{path...} | pod-logs | QUERY | cua-cli = deny
/api/k8s/{path...} | pod-logs | QUERY | dcr-client = deny
/api/k8s/{path...} | pod-logs | QUERY | empty-sub = deny
/api/k8s/{path...} | pod-logs | QUERY | github-oidc = deny
/api/k8s/{path...} | pod-logs | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | pod-logs | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | pod-logs | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | pod-logs | QUERY | spa = deny
/api/k8s/{path...} | pod-logs | QUERY | user-key = deny
/api/k8s/{path...} | pod-logs | QUERY | user-key-verified = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | admin-spa = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | cua-cli = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | dcr-client = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | empty-sub = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | github-oidc = allow
/api/k8s/{path...} | pool-create-allowed-image | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | spa = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | user-key = deny
/api/k8s/{path...} | pool-create-allowed-image | DELETE | user-key-verified = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | admin-spa = allow
/api/k8s/{path...} | pool-create-allowed-image | GET | cua-cli = allow
/api/k8s/{path...} | pool-create-allowed-image | GET | dcr-client = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | empty-sub = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | github-oidc = allow
/api/k8s/{path...} | pool-create-allowed-image | GET | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | GET | spa = allow
/api/k8s/{path...} | pool-create-allowed-image | GET | user-key = allow
/api/k8s/{path...} | pool-create-allowed-image | GET | user-key-verified = allow
/api/k8s/{path...} | pool-create-allowed-image | PATCH | admin-spa = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | cua-cli = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | dcr-client = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | empty-sub = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | github-oidc = allow
/api/k8s/{path...} | pool-create-allowed-image | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | spa = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | user-key = deny
/api/k8s/{path...} | pool-create-allowed-image | PATCH | user-key-verified = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | admin-spa = allow
/api/k8s/{path...} | pool-create-allowed-image | POST | cua-cli = allow
/api/k8s/{path...} | pool-create-allowed-image | POST | dcr-client = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | empty-sub = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | github-oidc = allow
/api/k8s/{path...} | pool-create-allowed-image | POST | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | POST | spa = allow
/api/k8s/{path...} | pool-create-allowed-image | POST | user-key = allow
/api/k8s/{path...} | pool-create-allowed-image | POST | user-key-verified = allow
/api/k8s/{path...} | pool-create-allowed-image | QUERY | admin-spa = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | cua-cli = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | dcr-client = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | empty-sub = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | github-oidc = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | spa = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | user-key = deny
/api/k8s/{path...} | pool-create-allowed-image | QUERY | user-key-verified = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | admin-spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | cua-cli = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | dcr-client = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | empty-sub = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | github-oidc = allow
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | user-key = deny
/api/k8s/{path...} | pool-create-disallowed-image | DELETE | user-key-verified = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | admin-spa = allow
/api/k8s/{path...} | pool-create-disallowed-image | GET | cua-cli = allow
/api/k8s/{path...} | pool-create-disallowed-image | GET | dcr-client = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | empty-sub = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | github-oidc = allow
/api/k8s/{path...} | pool-create-disallowed-image | GET | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | GET | spa = allow
/api/k8s/{path...} | pool-create-disallowed-image | GET | user-key = allow
/api/k8s/{path...} | pool-create-disallowed-image | GET | user-key-verified = allow
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | admin-spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | cua-cli = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | dcr-client = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | empty-sub = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | github-oidc = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | user-key = deny
/api/k8s/{path...} | pool-create-disallowed-image | PATCH | user-key-verified = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | admin-spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | cua-cli = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | dcr-client = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | empty-sub = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | github-oidc = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | user-key = deny
/api/k8s/{path...} | pool-create-disallowed-image | POST | user-key-verified = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | admin-spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | cua-cli = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | dcr-client = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | empty-sub = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | github-oidc = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | spa = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | user-key = deny
/api/k8s/{path...} | pool-create-disallowed-image | QUERY | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | admin-spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | cua-cli = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | dcr-client = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | empty-sub = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | github-oidc = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | user-key = deny
/api/k8s/{path...} | sandbox-item-image-patch | DELETE | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | admin-spa = allow
/api/k8s/{path...} | sandbox-item-image-patch | GET | cua-cli = allow
/api/k8s/{path...} | sandbox-item-image-patch | GET | dcr-client = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | empty-sub = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | github-oidc = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | GET | spa = allow
/api/k8s/{path...} | sandbox-item-image-patch | GET | user-key = allow
/api/k8s/{path...} | sandbox-item-image-patch | GET | user-key-verified = allow
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | admin-spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | cua-cli = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | dcr-client = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | empty-sub = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | github-oidc = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | user-key = deny
/api/k8s/{path...} | sandbox-item-image-patch | PATCH | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | admin-spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | cua-cli = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | dcr-client = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | empty-sub = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | github-oidc = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | user-key = deny
/api/k8s/{path...} | sandbox-item-image-patch | POST | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | admin-spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | cua-cli = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | dcr-client = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | empty-sub = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | github-oidc = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | spa = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | user-key = deny
/api/k8s/{path...} | sandbox-item-image-patch | QUERY | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | admin-spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | cua-cli = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | dcr-client = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | empty-sub = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | github-oidc = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | user-key = deny
/api/k8s/{path...} | sandbox-item-services-patch | DELETE | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | admin-spa = allow
/api/k8s/{path...} | sandbox-item-services-patch | GET | cua-cli = allow
/api/k8s/{path...} | sandbox-item-services-patch | GET | dcr-client = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | empty-sub = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | github-oidc = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | GET | spa = allow
/api/k8s/{path...} | sandbox-item-services-patch | GET | user-key = allow
/api/k8s/{path...} | sandbox-item-services-patch | GET | user-key-verified = allow
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | admin-spa = allow
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | cua-cli = allow
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | dcr-client = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | empty-sub = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | github-oidc = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | spa = allow
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | user-key = allow
/api/k8s/{path...} | sandbox-item-services-patch | PATCH | user-key-verified = allow
/api/k8s/{path...} | sandbox-item-services-patch | POST | admin-spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | cua-cli = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | dcr-client = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | empty-sub = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | github-oidc = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | user-key = deny
/api/k8s/{path...} | sandbox-item-services-patch | POST | user-key-verified = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | admin-spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | cua-cli = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | dcr-client = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | empty-sub = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | github-oidc = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | spa = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | user-key = deny
/api/k8s/{path...} | sandbox-item-services-patch | QUERY | user-key-verified = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | admin-spa = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | cua-cli = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | dcr-client = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | empty-sub = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | github-oidc = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | oauth2-proxy = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | per-key-other-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | per-key-owned-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | spa = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | user-key = deny
/api/k8s/{path...} | ungranted-ns-pools | DELETE | user-key-verified = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | admin-spa = allow
/api/k8s/{path...} | ungranted-ns-pools | GET | cua-cli = allow
/api/k8s/{path...} | ungranted-ns-pools | GET | dcr-client = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | empty-sub = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | github-oidc = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | oauth2-proxy = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | per-key-other-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | per-key-owned-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | GET | spa = allow
/api/k8s/{path...} | ungranted-ns-pools | GET | user-key = allow
/api/k8s/{path...} | ungranted-ns-pools | GET | user-key-verified = allow
/api/k8s/{path...} | ungranted-ns-pools | PATCH | admin-spa = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | cua-cli = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | dcr-client = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | empty-sub = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | github-oidc = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | oauth2-proxy = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | per-key-other-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | per-key-owned-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | spa = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | user-key = deny
/api/k8s/{path...} | ungranted-ns-pools | PATCH | user-key-verified = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | admin-spa = allow
/api/k8s/{path...} | ungranted-ns-pools | POST | cua-cli = allow
/api/k8s/{path...} | ungranted-ns-pools | POST | dcr-client = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | empty-sub = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | github-oidc = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | oauth2-proxy = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | per-key-other-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | per-key-owned-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | POST | spa = allow
/api/k8s/{path...} | ungranted-ns-pools | POST | user-key = allow
/api/k8s/{path...} | ungranted-ns-pools | POST | user-key-verified = allow
/api/k8s/{path...} | ungranted-ns-pools | QUERY | admin-spa = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | cua-cli = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | dcr-client = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | empty-sub = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | github-oidc = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | oauth2-proxy = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | per-key-other-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | per-key-owned-ns = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | spa = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | user-key = deny
/api/k8s/{path...} | ungranted-ns-pools | QUERY | user-key-verified = deny
/api/keys | plain | DELETE | admin-spa = allow
/api/keys | plain | DELETE | cua-cli = allow
/api/keys | plain | DELETE | dcr-client = deny
/api/keys | plain | DELETE | empty-sub = deny
/api/keys | plain | DELETE | github-oidc = deny
/api/keys | plain | DELETE | oauth2-proxy = deny
/api/keys | plain | DELETE | per-key-other-ns = deny
/api/keys | plain | DELETE | per-key-owned-ns = deny
/api/keys | plain | DELETE | spa = allow
/api/keys | plain | DELETE | user-key = deny
/api/keys | plain | DELETE | user-key-verified = deny
/api/keys | plain | GET | admin-spa = allow
/api/keys | plain | GET | cua-cli = allow
/api/keys | plain | GET | dcr-client = deny
/api/keys | plain | GET | empty-sub = deny
/api/keys | plain | GET | github-oidc = deny
/api/keys | plain | GET | oauth2-proxy = deny
/api/keys | plain | GET | per-key-other-ns = deny
/api/keys | plain | GET | per-key-owned-ns = deny
/api/keys | plain | GET | spa = allow
/api/keys | plain | GET | user-key = deny
/api/keys | plain | GET | user-key-verified = deny
/api/keys | plain | PATCH | admin-spa = allow
/api/keys | plain | PATCH | cua-cli = allow
/api/keys | plain | PATCH | dcr-client = deny
/api/keys | plain | PATCH | empty-sub = deny
/api/keys | plain | PATCH | github-oidc = deny
/api/keys | plain | PATCH | oauth2-proxy = deny
/api/keys | plain | PATCH | per-key-other-ns = deny
/api/keys | plain | PATCH | per-key-owned-ns = deny
/api/keys | plain | PATCH | spa = allow
/api/keys | plain | PATCH | user-key = deny
/api/keys | plain | PATCH | user-key-verified = deny
/api/keys | plain | POST | admin-spa = allow
/api/keys | plain | POST | cua-cli = allow
/api/keys | plain | POST | dcr-client = deny
/api/keys | plain | POST | empty-sub = deny
/api/keys | plain | POST | github-oidc = deny
/api/keys | plain | POST | oauth2-proxy = deny
/api/keys | plain | POST | per-key-other-ns = deny
/api/keys | plain | POST | per-key-owned-ns = deny
/api/keys | plain | POST | spa = allow
/api/keys | plain | POST | user-key = deny
/api/keys | plain | POST | user-key-verified = deny
/api/keys | plain | QUERY | admin-spa = allow
/api/keys | plain | QUERY | cua-cli = allow
/api/keys | plain | QUERY | dcr-client = deny
/api/keys | plain | QUERY | empty-sub = deny
/api/keys | plain | QUERY | github-oidc = deny
/api/keys | plain | QUERY | oauth2-proxy = deny
/api/keys | plain | QUERY | per-key-other-ns = deny
/api/keys | plain | QUERY | per-key-owned-ns = deny
/api/keys | plain | QUERY | spa = allow
/api/keys | plain | QUERY | user-key = deny
/api/keys | plain | QUERY | user-key-verified = deny
/api/keys/{id} | id | DELETE | admin-spa = allow
/api/keys/{id} | id | DELETE | cua-cli = allow
/api/keys/{id} | id | DELETE | dcr-client = deny
/api/keys/{id} | id | DELETE | empty-sub = deny
/api/keys/{id} | id | DELETE | github-oidc = deny
/api/keys/{id} | id | DELETE | oauth2-proxy = deny
/api/keys/{id} | id | DELETE | per-key-other-ns = deny
/api/keys/{id} | id | DELETE | per-key-owned-ns = deny
/api/keys/{id} | id | DELETE | spa = allow
/api/keys/{id} | id | DELETE | user-key = deny
/api/keys/{id} | id | DELETE | user-key-verified = deny
/api/keys/{id} | id | GET | admin-spa = allow
/api/keys/{id} | id | GET | cua-cli = allow
/api/keys/{id} | id | GET | dcr-client = deny
/api/keys/{id} | id | GET | empty-sub = deny
/api/keys/{id} | id | GET | github-oidc = deny
/api/keys/{id} | id | GET | oauth2-proxy = deny
/api/keys/{id} | id | GET | per-key-other-ns = deny
/api/keys/{id} | id | GET | per-key-owned-ns = deny
/api/keys/{id} | id | GET | spa = allow
/api/keys/{id} | id | GET | user-key = deny
/api/keys/{id} | id | GET | user-key-verified = deny
/api/keys/{id} | id | PATCH | admin-spa = allow
/api/keys/{id} | id | PATCH | cua-cli = allow
/api/keys/{id} | id | PATCH | dcr-client = deny
/api/keys/{id} | id | PATCH | empty-sub = deny
/api/keys/{id} | id | PATCH | github-oidc = deny
/api/keys/{id} | id | PATCH | oauth2-proxy = deny
/api/keys/{id} | id | PATCH | per-key-other-ns = deny
/api/keys/{id} | id | PATCH | per-key-owned-ns = deny
/api/keys/{id} | id | PATCH | spa = allow
/api/keys/{id} | id | PATCH | user-key = deny
/api/keys/{id} | id | PATCH | user-key-verified = deny
/api/keys/{id} | id | POST | admin-spa = allow
/api/keys/{id} | id | POST | cua-cli = allow
/api/keys/{id} | id | POST | dcr-client = deny
/api/keys/{id} | id | POST | empty-sub = deny
/api/keys/{id} | id | POST | github-oidc = deny
/api/keys/{id} | id | POST | oauth2-proxy = deny
/api/keys/{id} | id | POST | per-key-other-ns = deny
/api/keys/{id} | id | POST | per-key-owned-ns = deny
/api/keys/{id} | id | POST | spa = allow
/api/keys/{id} | id | POST | user-key = deny
/api/keys/{id} | id | POST | user-key-verified = deny
/api/keys/{id} | id | QUERY | admin-spa = allow
/api/keys/{id} | id | QUERY | cua-cli = allow
/api/keys/{id} | id | QUERY | dcr-client = deny
/api/keys/{id} | id | QUERY | empty-sub = deny
/api/keys/{id} | id | QUERY | github-oidc = deny
/api/keys/{id} | id | QUERY | oauth2-proxy = deny
/api/keys/{id} | id | QUERY | per-key-other-ns = deny
/api/keys/{id} | id | QUERY | per-key-owned-ns = deny
/api/keys/{id} | id | QUERY | spa = allow
/api/keys/{id} | id | QUERY | user-key = deny
/api/keys/{id} | id | QUERY | user-key-verified = deny
/api/namespaces | plain | DELETE | admin-spa = allow
/api/namespaces | plain | DELETE | cua-cli = allow
/api/namespaces | plain | DELETE | dcr-client = deny
/api/namespaces | plain | DELETE | empty-sub = deny
/api/namespaces | plain | DELETE | github-oidc = allow
/api/namespaces | plain | DELETE | oauth2-proxy = deny
/api/namespaces | plain | DELETE | per-key-other-ns = deny
/api/namespaces | plain | DELETE | per-key-owned-ns = deny
/api/namespaces | plain | DELETE | spa = allow
/api/namespaces | plain | DELETE | user-key = allow
/api/namespaces | plain | DELETE | user-key-verified = allow
/api/namespaces | plain | GET | admin-spa = allow
/api/namespaces | plain | GET | cua-cli = allow
/api/namespaces | plain | GET | dcr-client = deny
/api/namespaces | plain | GET | empty-sub = deny
/api/namespaces | plain | GET | github-oidc = allow
/api/namespaces | plain | GET | oauth2-proxy = deny
/api/namespaces | plain | GET | per-key-other-ns = deny
/api/namespaces | plain | GET | per-key-owned-ns = deny
/api/namespaces | plain | GET | spa = allow
/api/namespaces | plain | GET | user-key = allow
/api/namespaces | plain | GET | user-key-verified = allow
/api/namespaces | plain | PATCH | admin-spa = allow
/api/namespaces | plain | PATCH | cua-cli = allow
/api/namespaces | plain | PATCH | dcr-client = deny
/api/namespaces | plain | PATCH | empty-sub = deny
/api/namespaces | plain | PATCH | github-oidc = allow
/api/namespaces | plain | PATCH | oauth2-proxy = deny
/api/namespaces | plain | PATCH | per-key-other-ns = deny
/api/namespaces | plain | PATCH | per-key-owned-ns = deny
/api/namespaces | plain | PATCH | spa = allow
/api/namespaces | plain | PATCH | user-key = allow
/api/namespaces | plain | PATCH | user-key-verified = allow
/api/namespaces | plain | POST | admin-spa = allow
/api/namespaces | plain | POST | cua-cli = allow
/api/namespaces | plain | POST | dcr-client = deny
/api/namespaces | plain | POST | empty-sub = deny
/api/namespaces | plain | POST | github-oidc = allow
/api/namespaces | plain | POST | oauth2-proxy = deny
/api/namespaces | plain | POST | per-key-other-ns = deny
/api/namespaces | plain | POST | per-key-owned-ns = deny
/api/namespaces | plain | POST | spa = allow
/api/namespaces | plain | POST | user-key = allow
/api/namespaces | plain | POST | user-key-verified = allow
/api/namespaces | plain | QUERY | admin-spa = allow
/api/namespaces | plain | QUERY | cua-cli = allow
/api/namespaces | plain | QUERY | dcr-client = deny
/api/namespaces | plain | QUERY | empty-sub = deny
/api/namespaces | plain | QUERY | github-oidc = allow
/api/namespaces | plain | QUERY | oauth2-proxy = deny
/api/namespaces | plain | QUERY | per-key-other-ns = deny
/api/namespaces | plain | QUERY | per-key-owned-ns = deny
/api/namespaces | plain | QUERY | spa = allow
/api/namespaces | plain | QUERY | user-key = allow
/api/namespaces | plain | QUERY | user-key-verified = allow
/api/namespaces/{name} | name | DELETE | admin-spa = allow
/api/namespaces/{name} | name | DELETE | cua-cli = allow
/api/namespaces/{name} | name | DELETE | dcr-client = deny
/api/namespaces/{name} | name | DELETE | empty-sub = deny
/api/namespaces/{name} | name | DELETE | github-oidc = allow
/api/namespaces/{name} | name | DELETE | oauth2-proxy = deny
/api/namespaces/{name} | name | DELETE | per-key-other-ns = deny
/api/namespaces/{name} | name | DELETE | per-key-owned-ns = deny
/api/namespaces/{name} | name | DELETE | spa = allow
/api/namespaces/{name} | name | DELETE | user-key = allow
/api/namespaces/{name} | name | DELETE | user-key-verified = allow
/api/namespaces/{name} | name | GET | admin-spa = allow
/api/namespaces/{name} | name | GET | cua-cli = allow
/api/namespaces/{name} | name | GET | dcr-client = deny
/api/namespaces/{name} | name | GET | empty-sub = deny
/api/namespaces/{name} | name | GET | github-oidc = allow
/api/namespaces/{name} | name | GET | oauth2-proxy = deny
/api/namespaces/{name} | name | GET | per-key-other-ns = deny
/api/namespaces/{name} | name | GET | per-key-owned-ns = deny
/api/namespaces/{name} | name | GET | spa = allow
/api/namespaces/{name} | name | GET | user-key = allow
/api/namespaces/{name} | name | GET | user-key-verified = allow
/api/namespaces/{name} | name | PATCH | admin-spa = allow
/api/namespaces/{name} | name | PATCH | cua-cli = allow
/api/namespaces/{name} | name | PATCH | dcr-client = deny
/api/namespaces/{name} | name | PATCH | empty-sub = deny
/api/namespaces/{name} | name | PATCH | github-oidc = allow
/api/namespaces/{name} | name | PATCH | oauth2-proxy = deny
/api/namespaces/{name} | name | PATCH | per-key-other-ns = deny
/api/namespaces/{name} | name | PATCH | per-key-owned-ns = deny
/api/namespaces/{name} | name | PATCH | spa = allow
/api/namespaces/{name} | name | PATCH | user-key = allow
/api/namespaces/{name} | name | PATCH | user-key-verified = allow
/api/namespaces/{name} | name | POST | admin-spa = allow
/api/namespaces/{name} | name | POST | cua-cli = allow
/api/namespaces/{name} | name | POST | dcr-client = deny
/api/namespaces/{name} | name | POST | empty-sub = deny
/api/namespaces/{name} | name | POST | github-oidc = allow
/api/namespaces/{name} | name | POST | oauth2-proxy = deny
/api/namespaces/{name} | name | POST | per-key-other-ns = deny
/api/namespaces/{name} | name | POST | per-key-owned-ns = deny
/api/namespaces/{name} | name | POST | spa = allow
/api/namespaces/{name} | name | POST | user-key = allow
/api/namespaces/{name} | name | POST | user-key-verified = allow
/api/namespaces/{name} | name | QUERY | admin-spa = allow
/api/namespaces/{name} | name | QUERY | cua-cli = allow
/api/namespaces/{name} | name | QUERY | dcr-client = deny
/api/namespaces/{name} | name | QUERY | empty-sub = deny
/api/namespaces/{name} | name | QUERY | github-oidc = allow
/api/namespaces/{name} | name | QUERY | oauth2-proxy = deny
/api/namespaces/{name} | name | QUERY | per-key-other-ns = deny
/api/namespaces/{name} | name | QUERY | per-key-owned-ns = deny
/api/namespaces/{name} | name | QUERY | spa = allow
/api/namespaces/{name} | name | QUERY | user-key = allow
/api/namespaces/{name} | name | QUERY | user-key-verified = allow
/api/namespaces/{name} | unowned-name | DELETE | admin-spa = allow
/api/namespaces/{name} | unowned-name | DELETE | cua-cli = allow
/api/namespaces/{name} | unowned-name | DELETE | dcr-client = deny
/api/namespaces/{name} | unowned-name | DELETE | empty-sub = deny
/api/namespaces/{name} | unowned-name | DELETE | github-oidc = allow
/api/namespaces/{name} | unowned-name | DELETE | oauth2-proxy = deny
/api/namespaces/{name} | unowned-name | DELETE | per-key-other-ns = deny
/api/namespaces/{name} | unowned-name | DELETE | per-key-owned-ns = deny
/api/namespaces/{name} | unowned-name | DELETE | spa = allow
/api/namespaces/{name} | unowned-name | DELETE | user-key = allow
/api/namespaces/{name} | unowned-name | DELETE | user-key-verified = allow
/api/namespaces/{name} | unowned-name | GET | admin-spa = deny
/api/namespaces/{name} | unowned-name | GET | cua-cli = deny
/api/namespaces/{name} | unowned-name | GET | dcr-client = deny
/api/namespaces/{name} | unowned-name | GET | empty-sub = deny
/api/namespaces/{name} | unowned-name | GET | github-oidc = deny
/api/namespaces/{name} | unowned-name | GET | oauth2-proxy = deny
/api/namespaces/{name} | unowned-name | GET | per-key-other-ns = deny
/api/namespaces/{name} | unowned-name | GET | per-key-owned-ns = deny
/api/namespaces/{name} | unowned-name | GET | spa = deny
/api/namespaces/{name} | unowned-name | GET | user-key = deny
/api/namespaces/{name} | unowned-name | GET | user-key-verified = deny
/api/namespaces/{name} | unowned-name | PATCH | admin-spa = allow
/api/namespaces/{name} | unowned-name | PATCH | cua-cli = allow
/api/namespaces/{name} | unowned-name | PATCH | dcr-client = deny
/api/namespaces/{name} | unowned-name | PATCH | empty-sub = deny
/api/namespaces/{name} | unowned-name | PATCH | github-oidc = allow
/api/namespaces/{name} | unowned-name | PATCH | oauth2-proxy = deny
/api/namespaces/{name} | unowned-name | PATCH | per-key-other-ns = deny
/api/namespaces/{name} | unowned-name | PATCH | per-key-owned-ns = deny
/api/namespaces/{name} | unowned-name | PATCH | spa = allow
/api/namespaces/{name} | unowned-name | PATCH | user-key = allow
/api/namespaces/{name} | unowned-name | PATCH | user-key-verified = allow
/api/namespaces/{name} | unowned-name | POST | admin-spa = allow
/api/namespaces/{name} | unowned-name | POST | cua-cli = allow
/api/namespaces/{name} | unowned-name | POST | dcr-client = deny
/api/namespaces/{name} | unowned-name | POST | empty-sub = deny
/api/namespaces/{name} | unowned-name | POST | github-oidc = allow
/api/namespaces/{name} | unowned-name | POST | oauth2-proxy = deny
/api/namespaces/{name} | unowned-name | POST | per-key-other-ns = deny
/api/namespaces/{name} | unowned-name | POST | per-key-owned-ns = deny
/api/namespaces/{name} | unowned-name | POST | spa = allow
/api/namespaces/{name} | unowned-name | POST | user-key = allow
/api/namespaces/{name} | unowned-name | POST | user-key-verified = allow
/api/namespaces/{name} | unowned-name | QUERY | admin-spa = allow
/api/namespaces/{name} | unowned-name | QUERY | cua-cli = allow
/api/namespaces/{name} | unowned-name | QUERY | dcr-client = deny
/api/namespaces/{name} | unowned-name | QUERY | empty-sub = deny
/api/namespaces/{name} | unowned-name | QUERY | github-oidc = allow
/api/namespaces/{name} | unowned-name | QUERY | oauth2-proxy = deny
/api/namespaces/{name} | unowned-name | QUERY | per-key-other-ns = deny
/api/namespaces/{name} | unowned-name | QUERY | per-key-owned-ns = deny
/api/namespaces/{name} | unowned-name | QUERY | spa = allow
/api/namespaces/{name} | unowned-name | QUERY | user-key = allow
/api/namespaces/{name} | unowned-name | QUERY | user-key-verified = allow
/api/namespaces/{name} | unreachable-name | DELETE | admin-spa = allow
/api/namespaces/{name} | unreachable-name | DELETE | cua-cli = allow
/api/namespaces/{name} | unreachable-name | DELETE | dcr-client = deny
/api/namespaces/{name} | unreachable-name | DELETE | empty-sub = deny
/api/namespaces/{name} | unreachable-name | DELETE | github-oidc = allow
/api/namespaces/{name} | unreachable-name | DELETE | oauth2-proxy = deny
/api/namespaces/{name} | unreachable-name | DELETE | per-key-other-ns = deny
/api/namespaces/{name} | unreachable-name | DELETE | per-key-owned-ns = deny
/api/namespaces/{name} | unreachable-name | DELETE | spa = allow
/api/namespaces/{name} | unreachable-name | DELETE | user-key = allow
/api/namespaces/{name} | unreachable-name | DELETE | user-key-verified = allow
/api/namespaces/{name} | unreachable-name | GET | admin-spa = error
/api/namespaces/{name} | unreachable-name | GET | cua-cli = error
/api/namespaces/{name} | unreachable-name | GET | dcr-client = deny
/api/namespaces/{name} | unreachable-name | GET | empty-sub = deny
/api/namespaces/{name} | unreachable-name | GET | github-oidc = deny
/api/namespaces/{name} | unreachable-name | GET | oauth2-proxy = deny
/api/namespaces/{name} | unreachable-name | GET | per-key-other-ns = deny
/api/namespaces/{name} | unreachable-name | GET | per-key-owned-ns = deny
/api/namespaces/{name} | unreachable-name | GET | spa = error
/api/namespaces/{name} | unreachable-name | GET | user-key = error
/api/namespaces/{name} | unreachable-name | GET | user-key-verified = error
/api/namespaces/{name} | unreachable-name | PATCH | admin-spa = allow
/api/namespaces/{name} | unreachable-name | PATCH | cua-cli = allow
/api/namespaces/{name} | unreachable-name | PATCH | dcr-client = deny
/api/namespaces/{name} | unreachable-name | PATCH | empty-sub = deny
/api/namespaces/{name} | unreachable-name | PATCH | github-oidc = allow
/api/namespaces/{name} | unreachable-name | PATCH | oauth2-proxy = deny
/api/namespaces/{name} | unreachable-name | PATCH | per-key-other-ns = deny
/api/namespaces/{name} | unreachable-name | PATCH | per-key-owned-ns = deny
/api/namespaces/{name} | unreachable-name | PATCH | spa = allow
/api/namespaces/{name} | unreachable-name | PATCH | user-key = allow
/api/namespaces/{name} | unreachable-name | PATCH | user-key-verified = allow
/api/namespaces/{name} | unreachable-name | POST | admin-spa = allow
/api/namespaces/{name} | unreachable-name | POST | cua-cli = allow
/api/namespaces/{name} | unreachable-name | POST | dcr-client = deny
/api/namespaces/{name} | unreachable-name | POST | empty-sub = deny
/api/namespaces/{name} | unreachable-name | POST | github-oidc = allow
/api/namespaces/{name} | unreachable-name | POST | oauth2-proxy = deny
/api/namespaces/{name} | unreachable-name | POST | per-key-other-ns = deny
/api/namespaces/{name} | unreachable-name | POST | per-key-owned-ns = deny
/api/namespaces/{name} | unreachable-name | POST | spa = allow
/api/namespaces/{name} | unreachable-name | POST | user-key = allow
/api/namespaces/{name} | unreachable-name | POST | user-key-verified = allow
/api/namespaces/{name} | unreachable-name | QUERY | admin-spa = allow
/api/namespaces/{name} | unreachable-name | QUERY | cua-cli = allow
/api/namespaces/{name} | unreachable-name | QUERY | dcr-client = deny
/api/namespaces/{name} | unreachable-name | QUERY | empty-sub = deny
/api/namespaces/{name} | unreachable-name | QUERY | github-oidc = allow
/api/namespaces/{name} | unreachable-name | QUERY | oauth2-proxy = deny
/api/namespaces/{name} | unreachable-name | QUERY | per-key-other-ns = deny
/api/namespaces/{name} | unreachable-name | QUERY | per-key-owned-ns = deny
/api/namespaces/{name} | unreachable-name | QUERY | spa = allow
/api/namespaces/{name} | unreachable-name | QUERY | user-key = allow
/api/namespaces/{name} | unreachable-name | QUERY | user-key-verified = allow
/api/signed-service-urls/{namespace} | empty-ns | DELETE | admin-spa = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | cua-cli = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | dcr-client = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | spa = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | user-key = deny
/api/signed-service-urls/{namespace} | empty-ns | DELETE | user-key-verified = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | admin-spa = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | cua-cli = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | dcr-client = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | spa = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | user-key = deny
/api/signed-service-urls/{namespace} | empty-ns | GET | user-key-verified = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | admin-spa = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | cua-cli = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | dcr-client = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | spa = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | user-key = deny
/api/signed-service-urls/{namespace} | empty-ns | PATCH | user-key-verified = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | admin-spa = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | cua-cli = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | dcr-client = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | spa = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | user-key = deny
/api/signed-service-urls/{namespace} | empty-ns | POST | user-key-verified = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | admin-spa = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | cua-cli = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | dcr-client = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | spa = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | user-key = deny
/api/signed-service-urls/{namespace} | empty-ns | QUERY | user-key-verified = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | admin-spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | cua-cli = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | dcr-client = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | user-key = deny
/api/signed-service-urls/{namespace} | invalid-ns | DELETE | user-key-verified = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | admin-spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | cua-cli = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | dcr-client = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | user-key = deny
/api/signed-service-urls/{namespace} | invalid-ns | GET | user-key-verified = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | admin-spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | cua-cli = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | dcr-client = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | user-key = deny
/api/signed-service-urls/{namespace} | invalid-ns | PATCH | user-key-verified = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | admin-spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | cua-cli = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | dcr-client = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | user-key = deny
/api/signed-service-urls/{namespace} | invalid-ns | POST | user-key-verified = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | admin-spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | cua-cli = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | dcr-client = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | spa = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | user-key = deny
/api/signed-service-urls/{namespace} | invalid-ns | QUERY | user-key-verified = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | admin-spa = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | cua-cli = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | dcr-client = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | spa = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | user-key = deny
/api/signed-service-urls/{namespace} | other-ns | DELETE | user-key-verified = deny
/api/signed-service-urls/{namespace} | other-ns | GET | admin-spa = deny
/api/signed-service-urls/{namespace} | other-ns | GET | cua-cli = deny
/api/signed-service-urls/{namespace} | other-ns | GET | dcr-client = deny
/api/signed-service-urls/{namespace} | other-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace} | other-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace} | other-ns | GET | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | other-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | other-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | other-ns | GET | spa = deny
/api/signed-service-urls/{namespace} | other-ns | GET | user-key = deny
/api/signed-service-urls/{namespace} | other-ns | GET | user-key-verified = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | admin-spa = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | cua-cli = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | dcr-client = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | spa = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | user-key = deny
/api/signed-service-urls/{namespace} | other-ns | PATCH | user-key-verified = deny
/api/signed-service-urls/{namespace} | other-ns | POST | admin-spa = deny
/api/signed-service-urls/{namespace} | other-ns | POST | cua-cli = deny
/api/signed-service-urls/{namespace} | other-ns | POST | dcr-client = deny
/api/signed-service-urls/{namespace} | other-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace} | other-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace} | other-ns | POST | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | other-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | other-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | other-ns | POST | spa = deny
/api/signed-service-urls/{namespace} | other-ns | POST | user-key = deny
/api/signed-service-urls/{namespace} | other-ns | POST | user-key-verified = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | admin-spa = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | cua-cli = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | dcr-client = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | oauth2-proxy = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | spa = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | user-key = deny
/api/signed-service-urls/{namespace} | other-ns | QUERY | user-key-verified = deny
/api/signed-service-urls/{namespace} | owned-ns | DELETE | admin-spa = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | cua-cli = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | dcr-client = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace} | owned-ns | DELETE | github-oidc = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | oauth2-proxy = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | owned-ns | DELETE | per-key-owned-ns = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | spa = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | user-key = allow
/api/signed-service-urls/{namespace} | owned-ns | DELETE | user-key-verified = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | admin-spa = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | cua-cli = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | dcr-client = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace} | owned-ns | GET | github-oidc = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | oauth2-proxy = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | owned-ns | GET | per-key-owned-ns = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | spa = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | user-key = allow
/api/signed-service-urls/{namespace} | owned-ns | GET | user-key-verified = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | admin-spa = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | cua-cli = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | dcr-client = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace} | owned-ns | PATCH | github-oidc = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | oauth2-proxy = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | owned-ns | PATCH | per-key-owned-ns = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | spa = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | user-key = allow
/api/signed-service-urls/{namespace} | owned-ns | PATCH | user-key-verified = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | admin-spa = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | cua-cli = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | dcr-client = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace} | owned-ns | POST | github-oidc = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | oauth2-proxy = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | owned-ns | POST | per-key-owned-ns = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | spa = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | user-key = allow
/api/signed-service-urls/{namespace} | owned-ns | POST | user-key-verified = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | admin-spa = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | cua-cli = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | dcr-client = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace} | owned-ns | QUERY | github-oidc = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | oauth2-proxy = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | owned-ns | QUERY | per-key-owned-ns = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | spa = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | user-key = allow
/api/signed-service-urls/{namespace} | owned-ns | QUERY | user-key-verified = allow
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | admin-spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | cua-cli = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | dcr-client = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | oauth2-proxy = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | user-key = error
/api/signed-service-urls/{namespace} | unreachable-ns | DELETE | user-key-verified = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | admin-spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | cua-cli = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | dcr-client = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace} | unreachable-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace} | unreachable-ns | GET | oauth2-proxy = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | GET | spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | user-key = error
/api/signed-service-urls/{namespace} | unreachable-ns | GET | user-key-verified = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | admin-spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | cua-cli = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | dcr-client = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | oauth2-proxy = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | user-key = error
/api/signed-service-urls/{namespace} | unreachable-ns | PATCH | user-key-verified = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | admin-spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | cua-cli = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | dcr-client = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace} | unreachable-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace} | unreachable-ns | POST | oauth2-proxy = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | POST | spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | user-key = error
/api/signed-service-urls/{namespace} | unreachable-ns | POST | user-key-verified = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | admin-spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | cua-cli = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | dcr-client = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | oauth2-proxy = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | spa = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | user-key = error
/api/signed-service-urls/{namespace} | unreachable-ns | QUERY | user-key-verified = error
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | user-key = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | DELETE | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | user-key = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | GET | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | user-key = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | PATCH | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | user-key = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | POST | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | spa = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | user-key = deny
/api/signed-service-urls/{namespace}/{id} | empty-id | QUERY | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | user-key = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | DELETE | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | user-key = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | GET | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | user-key = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | PATCH | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | user-key = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | POST | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | admin-spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | cua-cli = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | dcr-client = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | oauth2-proxy = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | spa = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | user-key = deny
/api/signed-service-urls/{namespace}/{id} | other-ns | QUERY | user-key-verified = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | admin-spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | cua-cli = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | dcr-client = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | github-oidc = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | oauth2-proxy = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | per-key-owned-ns = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | user-key = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | DELETE | user-key-verified = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | admin-spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | cua-cli = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | dcr-client = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | github-oidc = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | oauth2-proxy = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | per-key-owned-ns = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | user-key = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | GET | user-key-verified = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | admin-spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | cua-cli = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | dcr-client = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | github-oidc = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | oauth2-proxy = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | per-key-owned-ns = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | user-key = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | PATCH | user-key-verified = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | admin-spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | cua-cli = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | dcr-client = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | github-oidc = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | oauth2-proxy = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | per-key-owned-ns = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | user-key = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | POST | user-key-verified = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | admin-spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | cua-cli = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | dcr-client = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | github-oidc = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | oauth2-proxy = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | per-key-owned-ns = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | spa = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | user-key = allow
/api/signed-service-urls/{namespace}/{id} | owned-ns | QUERY | user-key-verified = allow
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | admin-spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | cua-cli = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | dcr-client = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | oauth2-proxy = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | user-key = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | DELETE | user-key-verified = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | admin-spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | cua-cli = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | dcr-client = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | oauth2-proxy = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | user-key = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | GET | user-key-verified = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | admin-spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | cua-cli = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | dcr-client = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | oauth2-proxy = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | user-key = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | PATCH | user-key-verified = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | admin-spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | cua-cli = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | dcr-client = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | oauth2-proxy = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | user-key = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | POST | user-key-verified = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | admin-spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | cua-cli = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | dcr-client = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | empty-sub = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | github-oidc = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | oauth2-proxy = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | per-key-other-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | per-key-owned-ns = deny
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | spa = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | user-key = error
/api/signed-service-urls/{namespace}/{id} | unreachable-ns | QUERY | user-key-verified = error
/api/state/query | plain | DELETE | admin-spa = deny
/api/state/query | plain | DELETE | cua-cli = deny
/api/state/query | plain | DELETE | dcr-client = deny
/api/state/query | plain | DELETE | empty-sub = deny
/api/state/query | plain | DELETE | github-oidc = deny
/api/state/query | plain | DELETE | oauth2-proxy = deny
/api/state/query | plain | DELETE | per-key-other-ns = deny
/api/state/query | plain | DELETE | per-key-owned-ns = deny
/api/state/query | plain | DELETE | spa = deny
/api/state/query | plain | DELETE | user-key = deny
/api/state/query | plain | DELETE | user-key-verified = deny
/api/state/query | plain | GET | admin-spa = deny
/api/state/query | plain | GET | cua-cli = deny
/api/state/query | plain | GET | dcr-client = deny
/api/state/query | plain | GET | empty-sub = deny
/api/state/query | plain | GET | github-oidc = deny
/api/state/query | plain | GET | oauth2-proxy = deny
/api/state/query | plain | GET | per-key-other-ns = deny
/api/state/query | plain | GET | per-key-owned-ns = deny
/api/state/query | plain | GET | spa = deny
/api/state/query | plain | GET | user-key = deny
/api/state/query | plain | GET | user-key-verified = deny
/api/state/query | plain | PATCH | admin-spa = deny
/api/state/query | plain | PATCH | cua-cli = deny
/api/state/query | plain | PATCH | dcr-client = deny
/api/state/query | plain | PATCH | empty-sub = deny
/api/state/query | plain | PATCH | github-oidc = deny
/api/state/query | plain | PATCH | oauth2-proxy = deny
/api/state/query | plain | PATCH | per-key-other-ns = deny
/api/state/query | plain | PATCH | per-key-owned-ns = deny
/api/state/query | plain | PATCH | spa = deny
/api/state/query | plain | PATCH | user-key = deny
/api/state/query | plain | PATCH | user-key-verified = deny
/api/state/query | plain | POST | admin-spa = deny
/api/state/query | plain | POST | cua-cli = deny
/api/state/query | plain | POST | dcr-client = deny
/api/state/query | plain | POST | empty-sub = deny
/api/state/query | plain | POST | github-oidc = deny
/api/state/query | plain | POST | oauth2-proxy = deny
/api/state/query | plain | POST | per-key-other-ns = deny
/api/state/query | plain | POST | per-key-owned-ns = deny
/api/state/query | plain | POST | spa = deny
/api/state/query | plain | POST | user-key = deny
/api/state/query | plain | POST | user-key-verified = deny
/api/state/query | plain | QUERY | admin-spa = allow
/api/state/query | plain | QUERY | cua-cli = allow
/api/state/query | plain | QUERY | dcr-client = deny
/api/state/query | plain | QUERY | empty-sub = deny
/api/state/query | plain | QUERY | github-oidc = deny
/api/state/query | plain | QUERY | oauth2-proxy = deny
/api/state/query | plain | QUERY | per-key-other-ns = deny
/api/state/query | plain | QUERY | per-key-owned-ns = deny
/api/state/query | plain | QUERY | spa = allow
/api/state/query | plain | QUERY | user-key = allow
/api/state/query | plain | QUERY | user-key-verified = allow
/api/svc/{namespace}/{service} | empty-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | spa = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service} | empty-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service} | empty-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service} | empty-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service} | empty-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service} | empty-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service} | empty-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service} | empty-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service} | empty-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | empty-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | empty-ns | GET | spa = deny
/api/svc/{namespace}/{service} | empty-ns | GET | user-key = deny
/api/svc/{namespace}/{service} | empty-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | spa = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service} | empty-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service} | empty-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service} | empty-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service} | empty-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service} | empty-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service} | empty-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service} | empty-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service} | empty-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | empty-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | empty-ns | POST | spa = deny
/api/svc/{namespace}/{service} | empty-ns | POST | user-key = deny
/api/svc/{namespace}/{service} | empty-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | spa = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service} | empty-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | spa = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service} | invalid-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | spa = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | user-key = deny
/api/svc/{namespace}/{service} | invalid-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | spa = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service} | invalid-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | spa = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | user-key = deny
/api/svc/{namespace}/{service} | invalid-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | spa = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service} | invalid-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | spa = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | user-key = deny
/api/svc/{namespace}/{service} | invalid-service | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-service | GET | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-service | GET | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-service | GET | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-service | GET | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-service | GET | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-service | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-service | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-service | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-service | GET | spa = deny
/api/svc/{namespace}/{service} | invalid-service | GET | user-key = deny
/api/svc/{namespace}/{service} | invalid-service | GET | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | spa = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | user-key = deny
/api/svc/{namespace}/{service} | invalid-service | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-service | POST | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-service | POST | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-service | POST | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-service | POST | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-service | POST | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-service | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-service | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-service | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-service | POST | spa = deny
/api/svc/{namespace}/{service} | invalid-service | POST | user-key = deny
/api/svc/{namespace}/{service} | invalid-service | POST | user-key-verified = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | admin-spa = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | cua-cli = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | dcr-client = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | github-oidc = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | spa = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | user-key = deny
/api/svc/{namespace}/{service} | invalid-service | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | spa = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service} | other-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service} | other-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service} | other-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service} | other-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service} | other-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service} | other-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service} | other-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service} | other-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | other-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | other-ns | GET | spa = deny
/api/svc/{namespace}/{service} | other-ns | GET | user-key = deny
/api/svc/{namespace}/{service} | other-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | spa = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service} | other-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service} | other-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service} | other-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service} | other-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service} | other-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service} | other-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service} | other-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service} | other-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | other-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | other-ns | POST | spa = deny
/api/svc/{namespace}/{service} | other-ns | POST | user-key = deny
/api/svc/{namespace}/{service} | other-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | spa = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service} | other-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service} | owned-ns | DELETE | admin-spa = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | cua-cli = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | dcr-client = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | owned-ns | DELETE | github-oidc = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | oauth2-proxy = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | owned-ns | DELETE | per-key-owned-ns = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | spa = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | user-key = allow
/api/svc/{namespace}/{service} | owned-ns | DELETE | user-key-verified = allow
/api/svc/{namespace}/{service} | owned-ns | GET | admin-spa = allow
/api/svc/{namespace}/{service} | owned-ns | GET | cua-cli = allow
/api/svc/{namespace}/{service} | owned-ns | GET | dcr-client = allow
/api/svc/{namespace}/{service} | owned-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service} | owned-ns | GET | github-oidc = allow
/api/svc/{namespace}/{service} | owned-ns | GET | oauth2-proxy = allow
/api/svc/{namespace}/{service} | owned-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | owned-ns | GET | per-key-owned-ns = allow
/api/svc/{namespace}/{service} | owned-ns | GET | spa = allow
/api/svc/{namespace}/{service} | owned-ns | GET | user-key = allow
/api/svc/{namespace}/{service} | owned-ns | GET | user-key-verified = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | admin-spa = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | cua-cli = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | dcr-client = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | owned-ns | PATCH | github-oidc = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | oauth2-proxy = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | owned-ns | PATCH | per-key-owned-ns = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | spa = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | user-key = allow
/api/svc/{namespace}/{service} | owned-ns | PATCH | user-key-verified = allow
/api/svc/{namespace}/{service} | owned-ns | POST | admin-spa = allow
/api/svc/{namespace}/{service} | owned-ns | POST | cua-cli = allow
/api/svc/{namespace}/{service} | owned-ns | POST | dcr-client = allow
/api/svc/{namespace}/{service} | owned-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service} | owned-ns | POST | github-oidc = allow
/api/svc/{namespace}/{service} | owned-ns | POST | oauth2-proxy = allow
/api/svc/{namespace}/{service} | owned-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | owned-ns | POST | per-key-owned-ns = allow
/api/svc/{namespace}/{service} | owned-ns | POST | spa = allow
/api/svc/{namespace}/{service} | owned-ns | POST | user-key = allow
/api/svc/{namespace}/{service} | owned-ns | POST | user-key-verified = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | admin-spa = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | cua-cli = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | dcr-client = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | owned-ns | QUERY | github-oidc = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | oauth2-proxy = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | owned-ns | QUERY | per-key-owned-ns = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | spa = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | user-key = allow
/api/svc/{namespace}/{service} | owned-ns | QUERY | user-key-verified = allow
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | admin-spa = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | cua-cli = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | dcr-client = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | oauth2-proxy = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | spa = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | user-key = error
/api/svc/{namespace}/{service} | unreachable-ns | DELETE | user-key-verified = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | admin-spa = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | cua-cli = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | dcr-client = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service} | unreachable-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service} | unreachable-ns | GET | oauth2-proxy = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | GET | spa = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | user-key = error
/api/svc/{namespace}/{service} | unreachable-ns | GET | user-key-verified = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | admin-spa = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | cua-cli = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | dcr-client = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | oauth2-proxy = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | spa = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | user-key = error
/api/svc/{namespace}/{service} | unreachable-ns | PATCH | user-key-verified = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | admin-spa = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | cua-cli = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | dcr-client = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service} | unreachable-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service} | unreachable-ns | POST | oauth2-proxy = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | POST | spa = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | user-key = error
/api/svc/{namespace}/{service} | unreachable-ns | POST | user-key-verified = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | admin-spa = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | cua-cli = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | dcr-client = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | oauth2-proxy = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | spa = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | user-key = error
/api/svc/{namespace}/{service} | unreachable-ns | QUERY | user-key-verified = error
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | user-key = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | user-key = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | spa = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service}/{path...} | empty-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | GET | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | POST | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | spa = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | user-key = deny
/api/svc/{namespace}/{service}/{path...} | invalid-service | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | user-key = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | DELETE | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | user-key = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | GET | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | user-key = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | PATCH | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | user-key = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | POST | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | admin-spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | cua-cli = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | dcr-client = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | oauth2-proxy = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | spa = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | user-key = deny
/api/svc/{namespace}/{service}/{path...} | other-ns | QUERY | user-key-verified = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | admin-spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | cua-cli = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | dcr-client = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | github-oidc = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | oauth2-proxy = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | per-key-owned-ns = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | user-key = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | DELETE | user-key-verified = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | admin-spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | cua-cli = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | dcr-client = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | github-oidc = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | oauth2-proxy = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | per-key-owned-ns = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | user-key = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | GET | user-key-verified = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | admin-spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | cua-cli = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | dcr-client = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | github-oidc = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | oauth2-proxy = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | per-key-owned-ns = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | user-key = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | PATCH | user-key-verified = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | admin-spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | cua-cli = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | dcr-client = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | github-oidc = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | oauth2-proxy = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | per-key-owned-ns = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | user-key = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | POST | user-key-verified = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | admin-spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | cua-cli = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | dcr-client = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | github-oidc = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | oauth2-proxy = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | per-key-owned-ns = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | spa = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | user-key = allow
/api/svc/{namespace}/{service}/{path...} | owned-ns | QUERY | user-key-verified = allow
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | admin-spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | cua-cli = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | dcr-client = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | oauth2-proxy = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | user-key = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | DELETE | user-key-verified = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | admin-spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | cua-cli = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | dcr-client = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | oauth2-proxy = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | user-key = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | GET | user-key-verified = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | admin-spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | cua-cli = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | dcr-client = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | oauth2-proxy = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | user-key = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | PATCH | user-key-verified = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | admin-spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | cua-cli = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | dcr-client = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | oauth2-proxy = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | user-key = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | POST | user-key-verified = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | admin-spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | cua-cli = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | dcr-client = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | empty-sub = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | github-oidc = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | oauth2-proxy = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | per-key-other-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | per-key-owned-ns = deny
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | spa = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | user-key = error
/api/svc/{namespace}/{service}/{path...} | unreachable-ns | QUERY | user-key-verified = error
/api/usage/browser-timings | plain | DELETE | admin-spa = deny
/api/usage/browser-timings | plain | DELETE | cua-cli = deny
/api/usage/browser-timings | plain | DELETE | dcr-client = deny
/api/usage/browser-timings | plain | DELETE | empty-sub = deny
/api/usage/browser-timings | plain | DELETE | github-oidc = deny
/api/usage/browser-timings | plain | DELETE | oauth2-proxy = deny
/api/usage/browser-timings | plain | DELETE | per-key-other-ns = deny
/api/usage/browser-timings | plain | DELETE | per-key-owned-ns = deny
/api/usage/browser-timings | plain | DELETE | spa = deny
/api/usage/browser-timings | plain | DELETE | user-key = deny
/api/usage/browser-timings | plain | DELETE | user-key-verified = deny
/api/usage/browser-timings | plain | GET | admin-spa = deny
/api/usage/browser-timings | plain | GET | cua-cli = deny
/api/usage/browser-timings | plain | GET | dcr-client = deny
/api/usage/browser-timings | plain | GET | empty-sub = deny
/api/usage/browser-timings | plain | GET | github-oidc = deny
/api/usage/browser-timings | plain | GET | oauth2-proxy = deny
/api/usage/browser-timings | plain | GET | per-key-other-ns = deny
/api/usage/browser-timings | plain | GET | per-key-owned-ns = deny
/api/usage/browser-timings | plain | GET | spa = deny
/api/usage/browser-timings | plain | GET | user-key = deny
/api/usage/browser-timings | plain | GET | user-key-verified = deny
/api/usage/browser-timings | plain | PATCH | admin-spa = deny
/api/usage/browser-timings | plain | PATCH | cua-cli = deny
/api/usage/browser-timings | plain | PATCH | dcr-client = deny
/api/usage/browser-timings | plain | PATCH | empty-sub = deny
/api/usage/browser-timings | plain | PATCH | github-oidc = deny
/api/usage/browser-timings | plain | PATCH | oauth2-proxy = deny
/api/usage/browser-timings | plain | PATCH | per-key-other-ns = deny
/api/usage/browser-timings | plain | PATCH | per-key-owned-ns = deny
/api/usage/browser-timings | plain | PATCH | spa = deny
/api/usage/browser-timings | plain | PATCH | user-key = deny
/api/usage/browser-timings | plain | PATCH | user-key-verified = deny
/api/usage/browser-timings | plain | POST | admin-spa = allow
/api/usage/browser-timings | plain | POST | cua-cli = deny
/api/usage/browser-timings | plain | POST | dcr-client = deny
/api/usage/browser-timings | plain | POST | empty-sub = deny
/api/usage/browser-timings | plain | POST | github-oidc = deny
/api/usage/browser-timings | plain | POST | oauth2-proxy = deny
/api/usage/browser-timings | plain | POST | per-key-other-ns = deny
/api/usage/browser-timings | plain | POST | per-key-owned-ns = deny
/api/usage/browser-timings | plain | POST | spa = allow
/api/usage/browser-timings | plain | POST | user-key = deny
/api/usage/browser-timings | plain | POST | user-key-verified = deny
/api/usage/browser-timings | plain | QUERY | admin-spa = deny
/api/usage/browser-timings | plain | QUERY | cua-cli = deny
/api/usage/browser-timings | plain | QUERY | dcr-client = deny
/api/usage/browser-timings | plain | QUERY | empty-sub = deny
/api/usage/browser-timings | plain | QUERY | github-oidc = deny
/api/usage/browser-timings | plain | QUERY | oauth2-proxy = deny
/api/usage/browser-timings | plain | QUERY | per-key-other-ns = deny
/api/usage/browser-timings | plain | QUERY | per-key-owned-ns = deny
/api/usage/browser-timings | plain | QUERY | spa = deny
/api/usage/browser-timings | plain | QUERY | user-key = deny
/api/usage/browser-timings | plain | QUERY | user-key-verified = deny
/api/usage/overview | plain | DELETE | admin-spa = deny
/api/usage/overview | plain | DELETE | cua-cli = deny
/api/usage/overview | plain | DELETE | dcr-client = deny
/api/usage/overview | plain | DELETE | empty-sub = deny
/api/usage/overview | plain | DELETE | github-oidc = deny
/api/usage/overview | plain | DELETE | oauth2-proxy = deny
/api/usage/overview | plain | DELETE | per-key-other-ns = deny
/api/usage/overview | plain | DELETE | per-key-owned-ns = deny
/api/usage/overview | plain | DELETE | spa = deny
/api/usage/overview | plain | DELETE | user-key = deny
/api/usage/overview | plain | DELETE | user-key-verified = deny
/api/usage/overview | plain | GET | admin-spa = allow
/api/usage/overview | plain | GET | cua-cli = deny
/api/usage/overview | plain | GET | dcr-client = deny
/api/usage/overview | plain | GET | empty-sub = deny
/api/usage/overview | plain | GET | github-oidc = deny
/api/usage/overview | plain | GET | oauth2-proxy = deny
/api/usage/overview | plain | GET | per-key-other-ns = deny
/api/usage/overview | plain | GET | per-key-owned-ns = deny
/api/usage/overview | plain | GET | spa = allow
/api/usage/overview | plain | GET | user-key = deny
/api/usage/overview | plain | GET | user-key-verified = deny
/api/usage/overview | plain | PATCH | admin-spa = deny
/api/usage/overview | plain | PATCH | cua-cli = deny
/api/usage/overview | plain | PATCH | dcr-client = deny
/api/usage/overview | plain | PATCH | empty-sub = deny
/api/usage/overview | plain | PATCH | github-oidc = deny
/api/usage/overview | plain | PATCH | oauth2-proxy = deny
/api/usage/overview | plain | PATCH | per-key-other-ns = deny
/api/usage/overview | plain | PATCH | per-key-owned-ns = deny
/api/usage/overview | plain | PATCH | spa = deny
/api/usage/overview | plain | PATCH | user-key = deny
/api/usage/overview | plain | PATCH | user-key-verified = deny
/api/usage/overview | plain | POST | admin-spa = deny
/api/usage/overview | plain | POST | cua-cli = deny
/api/usage/overview | plain | POST | dcr-client = deny
/api/usage/overview | plain | POST | empty-sub = deny
/api/usage/overview | plain | POST | github-oidc = deny
/api/usage/overview | plain | POST | oauth2-proxy = deny
/api/usage/overview | plain | POST | per-key-other-ns = deny
/api/usage/overview | plain | POST | per-key-owned-ns = deny
/api/usage/overview | plain | POST | spa = deny
/api/usage/overview | plain | POST | user-key = deny
/api/usage/overview | plain | POST | user-key-verified = deny
/api/usage/overview | plain | QUERY | admin-spa = deny
/api/usage/overview | plain | QUERY | cua-cli = deny
/api/usage/overview | plain | QUERY | dcr-client = deny
/api/usage/overview | plain | QUERY | empty-sub = deny
/api/usage/overview | plain | QUERY | github-oidc = deny
/api/usage/overview | plain | QUERY | oauth2-proxy = deny
/api/usage/overview | plain | QUERY | per-key-other-ns = deny
/api/usage/overview | plain | QUERY | per-key-owned-ns = deny
/api/usage/overview | plain | QUERY | spa = deny
/api/usage/overview | plain | QUERY | user-key = deny
/api/usage/overview | plain | QUERY | user-key-verified = deny
/api/usage/pool | plain | DELETE | admin-spa = deny
/api/usage/pool | plain | DELETE | cua-cli = deny
/api/usage/pool | plain | DELETE | dcr-client = deny
/api/usage/pool | plain | DELETE | empty-sub = deny
/api/usage/pool | plain | DELETE | github-oidc = deny
/api/usage/pool | plain | DELETE | oauth2-proxy = deny
/api/usage/pool | plain | DELETE | per-key-other-ns = deny
/api/usage/pool | plain | DELETE | per-key-owned-ns = deny
/api/usage/pool | plain | DELETE | spa = deny
/api/usage/pool | plain | DELETE | user-key = deny
/api/usage/pool | plain | DELETE | user-key-verified = deny
/api/usage/pool | plain | GET | admin-spa = allow
/api/usage/pool | plain | GET | cua-cli = deny
/api/usage/pool | plain | GET | dcr-client = deny
/api/usage/pool | plain | GET | empty-sub = deny
/api/usage/pool | plain | GET | github-oidc = deny
/api/usage/pool | plain | GET | oauth2-proxy = deny
/api/usage/pool | plain | GET | per-key-other-ns = deny
/api/usage/pool | plain | GET | per-key-owned-ns = deny
/api/usage/pool | plain | GET | spa = allow
/api/usage/pool | plain | GET | user-key = deny
/api/usage/pool | plain | GET | user-key-verified = deny
/api/usage/pool | plain | PATCH | admin-spa = deny
/api/usage/pool | plain | PATCH | cua-cli = deny
/api/usage/pool | plain | PATCH | dcr-client = deny
/api/usage/pool | plain | PATCH | empty-sub = deny
/api/usage/pool | plain | PATCH | github-oidc = deny
/api/usage/pool | plain | PATCH | oauth2-proxy = deny
/api/usage/pool | plain | PATCH | per-key-other-ns = deny
/api/usage/pool | plain | PATCH | per-key-owned-ns = deny
/api/usage/pool | plain | PATCH | spa = deny
/api/usage/pool | plain | PATCH | user-key = deny
/api/usage/pool | plain | PATCH | user-key-verified = deny
/api/usage/pool | plain | POST | admin-spa = deny
/api/usage/pool | plain | POST | cua-cli = deny
/api/usage/pool | plain | POST | dcr-client = deny
/api/usage/pool | plain | POST | empty-sub = deny
/api/usage/pool | plain | POST | github-oidc = deny
/api/usage/pool | plain | POST | oauth2-proxy = deny
/api/usage/pool | plain | POST | per-key-other-ns = deny
/api/usage/pool | plain | POST | per-key-owned-ns = deny
/api/usage/pool | plain | POST | spa = deny
/api/usage/pool | plain | POST | user-key = deny
/api/usage/pool | plain | POST | user-key-verified = deny
/api/usage/pool | plain | QUERY | admin-spa = deny
/api/usage/pool | plain | QUERY | cua-cli = deny
/api/usage/pool | plain | QUERY | dcr-client = deny
/api/usage/pool | plain | QUERY | empty-sub = deny
/api/usage/pool | plain | QUERY | github-oidc = deny
/api/usage/pool | plain | QUERY | oauth2-proxy = deny
/api/usage/pool | plain | QUERY | per-key-other-ns = deny
/api/usage/pool | plain | QUERY | per-key-owned-ns = deny
/api/usage/pool | plain | QUERY | spa = deny
/api/usage/pool | plain | QUERY | user-key = deny
/api/usage/pool | plain | QUERY | user-key-verified = deny
/api/user-keys | plain | DELETE | admin-spa = allow
/api/user-keys | plain | DELETE | cua-cli = allow
/api/user-keys | plain | DELETE | dcr-client = deny
/api/user-keys | plain | DELETE | empty-sub = deny
/api/user-keys | plain | DELETE | github-oidc = deny
/api/user-keys | plain | DELETE | oauth2-proxy = deny
/api/user-keys | plain | DELETE | per-key-other-ns = deny
/api/user-keys | plain | DELETE | per-key-owned-ns = deny
/api/user-keys | plain | DELETE | spa = allow
/api/user-keys | plain | DELETE | user-key = deny
/api/user-keys | plain | DELETE | user-key-verified = deny
/api/user-keys | plain | GET | admin-spa = allow
/api/user-keys | plain | GET | cua-cli = allow
/api/user-keys | plain | GET | dcr-client = deny
/api/user-keys | plain | GET | empty-sub = deny
/api/user-keys | plain | GET | github-oidc = deny
/api/user-keys | plain | GET | oauth2-proxy = deny
/api/user-keys | plain | GET | per-key-other-ns = deny
/api/user-keys | plain | GET | per-key-owned-ns = deny
/api/user-keys | plain | GET | spa = allow
/api/user-keys | plain | GET | user-key = deny
/api/user-keys | plain | GET | user-key-verified = deny
/api/user-keys | plain | PATCH | admin-spa = allow
/api/user-keys | plain | PATCH | cua-cli = allow
/api/user-keys | plain | PATCH | dcr-client = deny
/api/user-keys | plain | PATCH | empty-sub = deny
/api/user-keys | plain | PATCH | github-oidc = deny
/api/user-keys | plain | PATCH | oauth2-proxy = deny
/api/user-keys | plain | PATCH | per-key-other-ns = deny
/api/user-keys | plain | PATCH | per-key-owned-ns = deny
/api/user-keys | plain | PATCH | spa = allow
/api/user-keys | plain | PATCH | user-key = deny
/api/user-keys | plain | PATCH | user-key-verified = deny
/api/user-keys | plain | POST | admin-spa = allow
/api/user-keys | plain | POST | cua-cli = allow
/api/user-keys | plain | POST | dcr-client = deny
/api/user-keys | plain | POST | empty-sub = deny
/api/user-keys | plain | POST | github-oidc = deny
/api/user-keys | plain | POST | oauth2-proxy = deny
/api/user-keys | plain | POST | per-key-other-ns = deny
/api/user-keys | plain | POST | per-key-owned-ns = deny
/api/user-keys | plain | POST | spa = allow
/api/user-keys | plain | POST | user-key = deny
/api/user-keys | plain | POST | user-key-verified = deny
/api/user-keys | plain | QUERY | admin-spa = allow
/api/user-keys | plain | QUERY | cua-cli = allow
/api/user-keys | plain | QUERY | dcr-client = deny
/api/user-keys | plain | QUERY | empty-sub = deny
/api/user-keys | plain | QUERY | github-oidc = deny
/api/user-keys | plain | QUERY | oauth2-proxy = deny
/api/user-keys | plain | QUERY | per-key-other-ns = deny
/api/user-keys | plain | QUERY | per-key-owned-ns = deny
/api/user-keys | plain | QUERY | spa = allow
/api/user-keys | plain | QUERY | user-key = deny
/api/user-keys | plain | QUERY | user-key-verified = deny
/api/user-keys/{id} | id | DELETE | admin-spa = allow
/api/user-keys/{id} | id | DELETE | cua-cli = allow
/api/user-keys/{id} | id | DELETE | dcr-client = deny
/api/user-keys/{id} | id | DELETE | empty-sub = deny
/api/user-keys/{id} | id | DELETE | github-oidc = deny
/api/user-keys/{id} | id | DELETE | oauth2-proxy = deny
/api/user-keys/{id} | id | DELETE | per-key-other-ns = deny
/api/user-keys/{id} | id | DELETE | per-key-owned-ns = deny
/api/user-keys/{id} | id | DELETE | spa = allow
/api/user-keys/{id} | id | DELETE | user-key = deny
/api/user-keys/{id} | id | DELETE | user-key-verified = deny
/api/user-keys/{id} | id | GET | admin-spa = allow
/api/user-keys/{id} | id | GET | cua-cli = allow
/api/user-keys/{id} | id | GET | dcr-client = deny
/api/user-keys/{id} | id | GET | empty-sub = deny
/api/user-keys/{id} | id | GET | github-oidc = deny
/api/user-keys/{id} | id | GET | oauth2-proxy = deny
/api/user-keys/{id} | id | GET | per-key-other-ns = deny
/api/user-keys/{id} | id | GET | per-key-owned-ns = deny
/api/user-keys/{id} | id | GET | spa = allow
/api/user-keys/{id} | id | GET | user-key = deny
/api/user-keys/{id} | id | GET | user-key-verified = deny
/api/user-keys/{id} | id | PATCH | admin-spa = allow
/api/user-keys/{id} | id | PATCH | cua-cli = allow
/api/user-keys/{id} | id | PATCH | dcr-client = deny
/api/user-keys/{id} | id | PATCH | empty-sub = deny
/api/user-keys/{id} | id | PATCH | github-oidc = deny
/api/user-keys/{id} | id | PATCH | oauth2-proxy = deny
/api/user-keys/{id} | id | PATCH | per-key-other-ns = deny
/api/user-keys/{id} | id | PATCH | per-key-owned-ns = deny
/api/user-keys/{id} | id | PATCH | spa = allow
/api/user-keys/{id} | id | PATCH | user-key = deny
/api/user-keys/{id} | id | PATCH | user-key-verified = deny
/api/user-keys/{id} | id | POST | admin-spa = allow
/api/user-keys/{id} | id | POST | cua-cli = allow
/api/user-keys/{id} | id | POST | dcr-client = deny
/api/user-keys/{id} | id | POST | empty-sub = deny
/api/user-keys/{id} | id | POST | github-oidc = deny
/api/user-keys/{id} | id | POST | oauth2-proxy = deny
/api/user-keys/{id} | id | POST | per-key-other-ns = deny
/api/user-keys/{id} | id | POST | per-key-owned-ns = deny
/api/user-keys/{id} | id | POST | spa = allow
/api/user-keys/{id} | id | POST | user-key = deny
/api/user-keys/{id} | id | POST | user-key-verified = deny
/api/user-keys/{id} | id | QUERY | admin-spa = allow
/api/user-keys/{id} | id | QUERY | cua-cli = allow
/api/user-keys/{id} | id | QUERY | dcr-client = deny
/api/user-keys/{id} | id | QUERY | empty-sub = deny
/api/user-keys/{id} | id | QUERY | github-oidc = deny
/api/user-keys/{id} | id | QUERY | oauth2-proxy = deny
/api/user-keys/{id} | id | QUERY | per-key-other-ns = deny
/api/user-keys/{id} | id | QUERY | per-key-owned-ns = deny
/api/user-keys/{id} | id | QUERY | spa = allow
/api/user-keys/{id} | id | QUERY | user-key = deny
/api/user-keys/{id} | id | QUERY | user-key-verified = deny
