openapi: 3.0.1 info: title: OpenMetadata APIs Agent Executions Security Services API description: Common types and API definition for OpenMetadata contact: name: OpenMetadata url: https://open-metadata.org email: openmetadata-dev@googlegroups.com license: name: Apache 2.0 url: https://www.apache.org/licenses/LICENSE-2.0 version: '1.13' servers: - url: /api description: Current Host - url: http://localhost:8585/api description: Endpoint URL security: - BearerAuth: [] tags: - name: Security Services description: APIs related to Security Service entities, such as Apache Ranger. paths: /v1/services/securityServices/{id}/followers: put: tags: - Security Services summary: Add a follower description: Add a user identified by `userId` as followed of this security service operationId: addFollowerToSecurityService parameters: - name: id in: path description: Id of the Security Service required: true schema: type: string format: uuid requestBody: description: Id of the user to be added as follower content: application/json: schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/ChangeEvent' '404': description: Security Service for instance {id} is not found /v1/services/securityServices/{id}/testConnectionResult: put: tags: - Security Services summary: Add test connection result description: Add test connection result to the service. operationId: addTestConnectionResult_11 parameters: - name: id in: path description: Id of the service required: true schema: type: string format: uuid requestBody: content: application/json: schema: $ref: '#/components/schemas/TestConnectionResult' responses: '200': description: Successfully updated the service content: application/json: schema: $ref: '#/components/schemas/SecurityService' /v1/services/securityServices: get: tags: - Security Services summary: List security services description: Get a list of security services. operationId: listSecurityServices parameters: - name: fields in: query description: Fields requested in the returned resource schema: type: string example: owners,tags,domains,followers - name: domain in: query description: Filter services by domain schema: type: string example: Marketing - name: limit in: query schema: maximum: 1000000 minimum: 0 type: integer format: int32 default: 10 - name: before in: query description: Returns list of security services before this cursor schema: type: string - name: after in: query description: Returns list of security services after this cursor schema: type: string - name: include in: query description: Include all, deleted, or non-deleted entities. schema: type: string default: non-deleted enum: - all - deleted - non-deleted responses: '200': description: List of security service instances content: application/json: schema: $ref: '#/components/schemas/SecurityServiceList' '400': description: Bad request put: tags: - Security Services summary: Update security service description: Update an existing or create a new security service. operationId: createOrUpdateSecurityService requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateSecurityService' responses: '200': description: Security service instance content: application/json: schema: $ref: '#/components/schemas/SecurityService' '400': description: Bad request post: tags: - Security Services summary: Create security service description: Create a new security service. operationId: createSecurityService requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateSecurityService' responses: '200': description: Security service instance content: application/json: schema: $ref: '#/components/schemas/SecurityService' '400': description: Bad request /v1/services/securityServices/name/{name}: get: tags: - Security Services summary: Get security service by name description: Get a security service by the service `name`. operationId: getSecurityServiceByFQN parameters: - name: name in: path description: Name of the security service required: true schema: type: string - name: fields in: query description: Fields requested in the returned resource schema: type: string example: owners,tags,domains,followers - name: include in: query description: Include all, deleted, or non-deleted entities. schema: type: string default: non-deleted enum: - all - deleted - non-deleted - name: includeRelations in: query description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.' schema: type: string example: owners:non-deleted,followers:all responses: '200': description: Security service instance content: application/json: schema: $ref: '#/components/schemas/SecurityService' '404': description: Security service for instance {name} is not found delete: tags: - Security Services summary: Delete a security service by name description: Delete a security services by `name`. If assets belong the service, it can't be deleted. operationId: deleteSecurityServiceByName parameters: - name: hardDelete in: query description: Hard delete the entity. (Default = `false`) schema: type: boolean default: false - name: recursive in: query description: Recursively delete this entity and it's children. (Default `false`) schema: type: boolean default: false - name: name in: path description: Name of the security service required: true schema: type: string responses: '200': description: OK '404': description: SecurityService service for instance {name} is not found /v1/services/securityServices/{id}: get: tags: - Security Services summary: Get a security service description: Get a security service by `id`. operationId: getSecurityServiceByID parameters: - name: id in: path description: Id of the security service required: true schema: type: string format: uuid - name: fields in: query description: Fields requested in the returned resource schema: type: string example: owners,tags,domains,followers - name: include in: query description: Include all, deleted, or non-deleted entities. schema: type: string default: non-deleted enum: - all - deleted - non-deleted - name: includeRelations in: query description: 'Per-relation include control. Format: field:value,field2:value2. Example: owners:non-deleted,followers:all. Valid values: all, deleted, non-deleted. If not specified for a field, uses the entity''s include value.' schema: type: string example: owners:non-deleted,followers:all responses: '200': description: Security service instance content: application/json: schema: $ref: '#/components/schemas/SecurityService' '404': description: Security service for instance {id} is not found delete: tags: - Security Services summary: Delete a security service by Id description: Delete a security services. If assets belong the service, it can't be deleted. operationId: deleteSecurityService parameters: - name: recursive in: query description: Recursively delete this entity and it's children. (Default `false`) schema: type: boolean default: false - name: hardDelete in: query description: Hard delete the entity. (Default = `false`) schema: type: boolean default: false - name: id in: path description: Id of the security service required: true schema: type: string format: uuid responses: '200': description: OK '404': description: SecurityService service for instance {id} is not found patch: tags: - Security Services summary: Update a security service description: Update an existing security service using JsonPatch. externalDocs: description: JsonPatch RFC url: https://tools.ietf.org/html/rfc6902 operationId: patchSecurityService_1 parameters: - name: id in: path description: Id of the security service required: true schema: type: string format: uuid requestBody: description: JsonPatch with array of operations content: application/json-patch+json: schema: $ref: '#/components/schemas/JsonPatch' example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]' responses: default: description: default response content: application/json: {} /v1/services/securityServices/async/{id}: delete: tags: - Security Services summary: Asynchronously delete a security service by Id description: Asynchronously delete a security services. If assets belong the service, it can't be deleted. operationId: deleteSecurityServiceAsync parameters: - name: recursive in: query description: Recursively delete this entity and it's children. (Default `false`) schema: type: boolean default: false - name: hardDelete in: query description: Hard delete the entity. (Default = `false`) schema: type: boolean default: false - name: id in: path description: Id of the security service required: true schema: type: string format: uuid responses: '200': description: OK '404': description: SecurityService service for instance {id} is not found /v1/services/securityServices/{id}/followers/{userId}: delete: tags: - Security Services summary: Remove a follower description: Remove the user identified `userId` as a follower of the entity. operationId: deleteFollower_26 parameters: - name: id in: path description: Id of the Entity required: true schema: type: string format: uuid - name: userId in: path description: Id of the user being removed as follower required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/ChangeEvent' /v1/services/securityServices/name/{name}/export: get: tags: - Security Services summary: Export security service in CSV format operationId: exportSecurityServices parameters: - name: name in: path description: Name of the Security Service required: true schema: type: string responses: '200': description: Exported csv with services from the security services content: application/json: schema: type: string /v1/services/securityServices/name/{name}/exportAsync: get: tags: - Security Services summary: Export security service in CSV format operationId: exportSecurityService parameters: - name: name in: path description: Name of the Security Service required: true schema: type: string responses: '200': description: Exported csv with security services content: application/json: schema: $ref: '#/components/schemas/CSVExportResponse' /v1/services/securityServices/{id}/versions/{version}: get: tags: - Security Services summary: Get a version of the security service description: Get a version of the security service by given `Id` operationId: getSpecificSecurityServiceVersion parameters: - name: id in: path description: Id of the security service required: true schema: type: string format: uuid - name: version in: path description: security service version number in the form `major`.`minor` required: true schema: type: string example: 0.1 or 1.1 responses: '200': description: security service content: application/json: schema: $ref: '#/components/schemas/SecurityService' '404': description: Security service for instance {id} and version {version} is not found /v1/services/securityServices/name/{name}/import: put: tags: - Security Services summary: Import service from CSV to update security service (no creation allowed) operationId: importSecurityService parameters: - name: name in: path description: Name of the Security Service required: true schema: type: string - name: dryRun in: query description: Dry-run when true is used for validating the CSV without really importing it. (default=true) schema: type: boolean default: true requestBody: content: text/plain; charset=UTF-8: schema: type: string responses: '200': description: Import result content: application/json: schema: $ref: '#/components/schemas/CsvImportResult' /v1/services/securityServices/name/{name}/importAsync: put: tags: - Security Services summary: Import service from CSV to update security service asynchronously (no creation allowed) operationId: importSecurityServiceAsync parameters: - name: name in: path description: Name of the Security Service required: true schema: type: string - name: dryRun in: query description: Dry-run when true is used for validating the CSV without really importing it. (default=true) schema: type: boolean default: true requestBody: content: text/plain; charset=UTF-8: schema: type: string responses: '200': description: Import initiated successfully content: application/json: schema: $ref: '#/components/schemas/CsvImportResult' /v1/services/securityServices/history: get: tags: - Security Services summary: List all entity versions within a time range description: 'Get a paginated list of all entity versions within a given time range specified by `startTs` and `endTs` in milliseconds since epoch. ' operationId: listAllEntityVersionsByTimestamp_52 parameters: - name: startTs in: query description: Start timestamp in milliseconds since epoch required: true schema: type: integer format: int64 - name: endTs in: query description: End timestamp in milliseconds since epoch required: true schema: type: integer format: int64 - name: limit in: query description: Limit the number of entity returned (1 to 1000000, default = 10) schema: maximum: 500 minimum: 1 type: integer format: int32 default: 10 - name: before in: query description: Returns list of entity versions before this cursor schema: type: string - name: after in: query description: Returns list of entity versions after this cursor schema: type: string responses: '200': description: List of all versions content: application/json: schema: $ref: '#/components/schemas/ResultList' /v1/services/securityServices/{id}/versions: get: tags: - Security Services summary: List security service versions description: Get a list of all the versions of a security service identified by `Id` operationId: listAllSecurityServiceVersion parameters: - name: id in: path description: Id of the security service required: true schema: type: string format: uuid responses: '200': description: List of security service versions content: application/json: schema: $ref: '#/components/schemas/EntityHistory' /v1/services/securityServices/name/{fqn}: patch: tags: - Security Services summary: Update a security service using name. description: Update an existing security service using JsonPatch. externalDocs: description: JsonPatch RFC url: https://tools.ietf.org/html/rfc6902 operationId: patchSecurityService parameters: - name: fqn in: path description: Name of the security service required: true schema: type: string requestBody: description: JsonPatch with array of operations content: application/json-patch+json: schema: $ref: '#/components/schemas/JsonPatch' example: '[{op:remove, path:/a},{op:add, path: /b, value: val}]' responses: default: description: default response content: application/json: {} /v1/services/securityServices/restore: put: tags: - Security Services summary: Restore a soft deleted security service description: Restore a soft deleted security service. operationId: restore_42 requestBody: content: application/json: schema: $ref: '#/components/schemas/RestoreEntity' responses: '200': description: Successfully restored the SecurityService. content: application/json: schema: $ref: '#/components/schemas/SecurityService' components: schemas: TagLabelRecognizerMetadata: required: - recognizerId - recognizerName - score type: object properties: recognizerId: type: string format: uuid recognizerName: type: string score: type: number format: double target: type: string enum: - content - column_name patterns: type: array items: $ref: '#/components/schemas/PatternMatch' ChangeSummaryMap: type: object AccessDetails: required: - timestamp type: object properties: timestamp: type: integer format: int64 accessedBy: $ref: '#/components/schemas/EntityReference' accessedByAProcess: type: string FieldChange: type: object properties: name: type: string oldValue: type: object newValue: type: object CoverImage: type: object properties: url: type: string position: type: string SecurityServiceList: required: - data type: object properties: data: type: array items: $ref: '#/components/schemas/SecurityService' paging: $ref: '#/components/schemas/Paging' errors: type: array items: $ref: '#/components/schemas/EntityError' warningsCount: type: integer format: int32 warnings: type: array items: $ref: '#/components/schemas/EntityError' RestoreEntity: required: - id type: object properties: id: type: string format: uuid LifeCycle: type: object properties: created: $ref: '#/components/schemas/AccessDetails' updated: $ref: '#/components/schemas/AccessDetails' accessed: $ref: '#/components/schemas/AccessDetails' EntityHistory: required: - entityType - versions type: object properties: entityType: type: string versions: type: array items: type: object AssetCertification: required: - appliedDate - expiryDate - tagLabel type: object properties: tagLabel: $ref: '#/components/schemas/TagLabel' appliedDate: type: integer format: int64 expiryDate: type: integer format: int64 ResultList: required: - data type: object properties: data: type: array items: type: object paging: $ref: '#/components/schemas/Paging' errors: type: array items: $ref: '#/components/schemas/EntityError' warningsCount: type: integer format: int32 warnings: type: array items: $ref: '#/components/schemas/EntityError' Paging: required: - total type: object properties: before: type: string after: type: string offset: type: integer format: int32 limit: type: integer format: int32 total: type: integer format: int32 TestConnectionResult: required: - steps type: object properties: lastUpdatedAt: type: integer format: int64 status: type: string enum: - Successful - Failed - Running steps: type: array items: $ref: '#/components/schemas/TestConnectionStepResult' JsonPatch: type: object SecurityConnection: type: object properties: config: type: object ChangeDescription: type: object properties: fieldsAdded: type: array items: $ref: '#/components/schemas/FieldChange' fieldsUpdated: type: array items: $ref: '#/components/schemas/FieldChange' fieldsDeleted: type: array items: $ref: '#/components/schemas/FieldChange' previousVersion: type: number format: double changeSummary: $ref: '#/components/schemas/ChangeSummaryMap' CSVExportResponse: type: object properties: jobId: type: string message: type: string ChangeEvent: required: - entityId - entityType - eventType - id - timestamp type: object properties: id: type: string format: uuid eventType: type: string enum: - entityCreated - entityUpdated - entityFieldsChanged - entityNoChange - entitySoftDeleted - entityDeleted - entityRestored - threadCreated - threadUpdated - postCreated - postUpdated - taskResolved - taskClosed - logicalTestCaseAdded - suggestionCreated - suggestionUpdated - suggestionAccepted - suggestionRejected - suggestionDeleted - userLogin - userLogout entityType: type: string entityId: type: string format: uuid domains: type: array items: type: string format: uuid entityFullyQualifiedName: type: string previousVersion: type: number format: double currentVersion: type: number format: double userName: type: string impersonatedBy: type: string timestamp: type: integer format: int64 changeDescription: $ref: '#/components/schemas/ChangeDescription' incrementalChangeDescription: $ref: '#/components/schemas/ChangeDescription' entity: type: object UsageStats: required: - count type: object properties: count: minimum: 0 exclusiveMinimum: false type: integer format: int32 percentileRank: type: number format: double Style: type: object properties: color: type: string iconURL: type: string coverImage: $ref: '#/components/schemas/CoverImage' Votes: type: object properties: upVotes: type: integer format: int32 downVotes: type: integer format: int32 upVoters: type: array items: $ref: '#/components/schemas/EntityReference' downVoters: type: array items: $ref: '#/components/schemas/EntityReference' CsvImportResult: type: object properties: dryRun: type: boolean status: type: string enum: - success - failure - aborted - partialSuccess - running abortReason: type: string numberOfRowsProcessed: minimum: 0 exclusiveMinimum: false type: integer format: int32 numberOfRowsPassed: minimum: 0 exclusiveMinimum: false type: integer format: int32 numberOfRowsFailed: minimum: 0 exclusiveMinimum: false type: integer format: int32 importResultsCsv: type: string TagLabel: required: - labelType - source - state - tagFQN type: object properties: tagFQN: type: string name: type: string displayName: type: string description: type: string style: $ref: '#/components/schemas/Style' source: type: string enum: - Classification - Glossary labelType: type: string enum: - Manual - Propagated - Automated - Derived - Generated state: type: string enum: - Suggested - Confirmed href: type: string format: uri reason: type: string appliedAt: type: string format: date-time appliedBy: type: string metadata: $ref: '#/components/schemas/TagLabelMetadata' PatternMatch: required: - name - score type: object properties: name: type: string regex: type: string score: type: number format: double CreateSecurityService: required: - name - serviceType type: object properties: name: maxLength: 256 minLength: 1 pattern: ^((?!::).)*$ type: string displayName: type: string description: type: string serviceType: type: string enum: - Ranger connection: $ref: '#/components/schemas/SecurityConnection' tags: type: array items: $ref: '#/components/schemas/TagLabel' owners: type: array items: $ref: '#/components/schemas/EntityReference' dataProducts: type: array items: type: string domains: type: array items: type: string ingestionRunner: $ref: '#/components/schemas/EntityReference' extension: type: object reviewers: type: array items: $ref: '#/components/schemas/EntityReference' lifeCycle: $ref: '#/components/schemas/LifeCycle' TagLabelMetadata: type: object properties: recognizer: $ref: '#/components/schemas/TagLabelRecognizerMetadata' expiryDate: type: integer format: int64 EntityError: type: object properties: message: type: string entity: type: object TestConnectionStepResult: required: - mandatory - name - passed type: object properties: name: type: string mandatory: type: boolean passed: type: boolean message: type: string errorLog: type: string EntityReference: required: - id - type type: object properties: id: type: string format: uuid type: type: string name: type: string fullyQualifiedName: type: string description: type: string displayName: type: string deleted: type: boolean inherited: type: boolean href: type: string format: uri SecurityService: required: - id - name - serviceType type: object properties: id: type: string format: uuid name: maxLength: 256 minLength: 1 pattern: ^((?!::).)*$ type: string fullyQualifiedName: maxLength: 3072 minLength: 1 type: string serviceType: type: string enum: - Ranger description: type: string displayName: type: string version: type: number format: double updatedAt: type: integer format: int64 updatedBy: type: string impersonatedBy: type: string testConnectionResult: $ref: '#/components/schemas/TestConnectionResult' tags: type: array items: $ref: '#/components/schemas/TagLabel' connection: $ref: '#/components/schemas/SecurityConnection' pipelines: type: array items: $ref: '#/components/schemas/EntityReference' owners: type: array items: $ref: '#/components/schemas/EntityReference' href: type: string format: uri changeDescription: $ref: '#/components/schemas/ChangeDescription' incrementalChangeDescription: $ref: '#/components/schemas/ChangeDescription' deleted: type: boolean dataProducts: type: array items: $ref: '#/components/schemas/EntityReference' dataContract: $ref: '#/components/schemas/EntityReference' followers: type: array items: $ref: '#/components/schemas/EntityReference' domains: type: array items: $ref: '#/components/schemas/EntityReference' ingestionRunner: $ref: '#/components/schemas/EntityReference' provider: type: string enum: - system - user - automation extension: type: object children: type: array items: $ref: '#/components/schemas/EntityReference' service: $ref: '#/components/schemas/EntityReference' style: $ref: '#/components/schemas/Style' experts: type: array items: $ref: '#/components/schemas/EntityReference' reviewers: type: array items: $ref: '#/components/schemas/EntityReference' usageSummary: $ref: '#/components/schemas/UsageDetails' entityStatus: type: string enum: - Draft - In Review - Approved - Archived - Deprecated - Rejected - Unprocessed votes: $ref: '#/components/schemas/Votes' lifeCycle: $ref: '#/components/schemas/LifeCycle' certification: $ref: '#/components/schemas/AssetCertification' UsageDetails: required: - dailyStats - date type: object properties: dailyStats: $ref: '#/components/schemas/UsageStats' weeklyStats: $ref: '#/components/schemas/UsageStats' monthlyStats: $ref: '#/components/schemas/UsageStats' date: type: string securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: JWT