Skip to main content
POST
Push Discovery

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization
string
header
required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The TBControlPlaneServicePushDiscoveryRequest message.

credentials
string[] | null

The credentials field.

destinations
object

The destinations field.

ingressScopes
string[] | null

The ingressScopes field.

postures
string[] | null

The postures field.

principals
string[] | null

The principals field.

routes
string[] | null

The routes field.

tbInstanceId
string

The tbInstanceId field.

Response

200 - application/json

Successful response

The TBControlPlaneServicePushDiscoveryResponse message.

snapshot
Tb Discovery Snapshot · object | null

TBDiscoverySnapshot is one Time Bandit instance's self-reported vocabulary: the principals, ingress scopes, destinations, credential recipe names, posture names, and route names it knows about. Names only -- never token values or credential material.

Dynamo-only: the control plane has no query pattern that needs Postgres (lookup is always a direct tenant_id+tb_instance_id get).