Help Center/ Cloud Container Instance/ API Reference/ Permissions Policies and Supported Actions/ Category of CCI Actions
Updated on 2023-12-21 GMT+08:00
View PDF
Share

Category of CCI Actions

Table 1 Namespace management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Namespace

POST /api/v1/namespaces

CCI:namespace:create

√

√

Reading a Namespace

GET /api/v1/namespaces/{name}

CCI:namespace:get

√

√

Listing Namespaces

GET /api/v1/namespaces

CCI:namespace:list

√

√

Deleting a Namespace

DELETE /api/v1/namespaces/{name}

CCI:namespace:delete

√

√
Table 2 Pod management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Pod

POST /api/v1/namespaces/{namespace}/pods

CCI:namespaceSubResource:Create

√

√

Reading a Pod

GET /api/v1/namespaces/{namespace}/pods/{name}

CCI:namespaceSubResource:Get

√

√

Reading All Pods Under a Specified Namespace

GET /api/v1/namespaces/{namespace}/pods

CCI:namespaceSubResource:List

√

√

Reading the Status of a Pod

GET /api/v1/namespaces/{namespace}/pods/{name}/status

CCI:namespaceSubResource:Get

√

√

Reading Pod Logs

GET /api/v1/namespaces/{namespace}/pods/{name}/log

CCI:namespaceSubResource:Get

√

√

Listing All Pods of a User

GET /api/v1/pods

cci:namespaceSubResource:List

√

√

Replacing a Pod

PUT /api/v1/namespaces/{namespace}/pods/{name}

CCI:namespaceSubResource:Update

√

√

Updating a Pod

PATCH /api/v1/namespaces/{namespace}/pods/{name}

CCI:namespaceSubResource:Update

√

√

Deleting a Pod

DELETE /api/v1/namespaces/{namespace}/pods/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All Pods

DELETE /api/v1/namespaces/{namespace}/pods

CCI:namespaceSubResource:Delete

√

√
Table 3 Deployment management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Deployment

POST /apis/apps/v1/namespaces/{namespace}/deployments
  • CCI:namespaceSubResource:Create
  • elb:loadbalancers:create

√

√

Reading a Deployment

GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}

CCI:namespaceSubResource:Get

√

√

Reading All Deployments Under a Namespace

GET /apis/apps/v1/namespaces/{namespace}/deployments

CCI:namespaceSubResource:List

√

√

Reading the Status of a Deployment

GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status

CCI:namespaceSubResource:Get

√

√

Reading the Scaling Operation of a Specified Deployment

GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale

CCI:namespaceSubResource:Get

√

√

Listing All Deployments of a User

GET /apis/apps/v1/deployments

CCI:namespaceSubResource:List

√

√

Replacing a Deployment

PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}

CCI:namespaceSubResource:Update

√

√

Replacing the Scaling Operation of a Specified Deployment

PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale

CCI:namespaceSubResource:Update

√

√

Updating a Deployment

PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}

CCI:namespaceSubResource:Update

√

√

Updating the Scaling Operation of a Specified Deployment

PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale

CCI:namespaceSubResource:Update

√

√

Deleting a Deployment

DELETE /apis/apps/v1/namespaces/{namespace}/deployments/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All Deployments Under a Specified Namespace

DELETE /apis/apps/v1/namespaces/{namespace}/deployments

CCI:namespaceSubResource:Delete

√

√
Table 4 StatefulSet management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a StatefulSet

POST /apis/apps/v1/namespaces/{namespace}/statefulsets
  • CCI:namespaceSubResource:Create
  • elb:loadbalancers:create

√

√

Reading a StatefulSet

GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}

CCI:namespaceSubResource:Get

√

√

Reading All StatefulSets Under a Specified Namespace

GET /apis/apps/v1/namespaces/{namespace}/statefulsets

CCI:namespaceSubResource:List

√

√

Reading the Status of a StatefulSet

GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status

CCI:namespaceSubResource:Get

√

√

Listing All StatefulSets of a User

GET /apis/apps/v1/statefulsets

CCI:namespaceSubResource:List

√

√

Replacing a StatefulSet

PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}

CCI:namespaceSubResource:Update

√

√

Updating a StatefulSet

PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}

CCI:namespaceSubResource:Update

√

√

Deleting a StatefulSet

DELETE /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All StatefulSets

DELETE /apis/apps/v1/namespaces/{namespace}/statefulsets

CCI:namespaceSubResource:Delete

√

√
Table 5 Job management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Job

POST /apis/batch/v1/namespaces/{namespace}/jobs
  • CCI:namespaceSubResource:Create
  • elb:loadbalancers:create

√

√

Reading a Job

GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}

CCI:namespaceSubResource:Get

√

√

Reading All Jobs Under a Specified Namespace

GET /apis/batch/v1/namespaces/{namespace}/jobs

CCI:namespaceSubResource:List

√

√

Reading the Status of a Job

GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status

CCI:namespaceSubResource:Get

√

√

Listing All Jobs of a User

GET /apis/batch/v1/jobs

CCI:namespaceSubResource:List

√

√

Replacing a Job

PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}

CCI:namespaceSubResource:Update

√

√

Updating a Job

PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}

CCI:namespaceSubResource:Update

√

√

Deleting a Job

DELETE /apis/batch/v1/namespaces/{namespace}/jobs/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All Jobs

DELETE /apis/batch/v1/namespaces/{namespace}/jobs

CCI:namespaceSubResource:Delete

√

√
Table 6 Service management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Service

POST /api/v1/namespaces/{namespace}/services
  • CCI:namespaceSubResource:Create
  • elb:loadbalancers:create

√

√

Reading a Service

GET /api/v1/namespaces/{namespace}/services/{name}

CCI:namespaceSubResource:Get

√

√

Listing Services

GET /api/v1/namespaces/{namespace}/services

CCI:namespaceSubResource:List

√

√

Reading the Status of a Service

GET /api/v1/namespaces/{namespace}/services/{name}/status

CCI:namespaceSubResource:Get

√

√

Deleting a Service

DELETE /api/v1/namespaces/{namespace}/services/{name}

CCI:namespaceSubResource:Delete

√

√
Table 7 Ingress management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating an Ingress

POST /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
  • CCI:namespaceSubResource:Create
  • elb:loadbalancers:create

√

√

Reading an Ingress

GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}

CCI:namespaceSubResource:Get

√

√

Listing Ingresses

GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses

CCI:namespaceSubResource:List

√

√

Reading the Status of an Ingress

GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status

CCI:namespaceSubResource:Get

√

√

Replacing an Ingress

PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}

CCI:namespaceSubResource:Update

√

√

Updating an Ingress

PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}

CCI:namespaceSubResource:Update

√

√

Deleting an Ingress

DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All Ingresses

DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses

CCI:namespaceSubResource:Delete

√

√
Table 8 Network management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Network

POST /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks
  • CCI:network:Create
  • vpc:vpcs:create
  • vpc:ports:create
  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:publicIps:get
  • vpc:bandwidths:get
  • vpc:ports:get
  • vpc:peerings:get
  • vpc:quotas:list
  • vpc:privateIps:get
  • vpc:securityGroups:get
  • vpc:securityGroupRules:get
  • vpc:networks:get
  • vpc:routers:get
  • vpc:floatingIps:get
  • vpc:firewallRules:get

√

√

Reading a Network

GET /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks/{name}

CCI:network:Get

√

√

Listing Networks

GET /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks

CCI:network:List

√

√

Reading the Status of a Network

GET /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks/{name}/status

CCI:network:Get

√

√

Deleting a Network

DELETE /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks/{name}
  • CCI:network:Delete
  • vpc:vpcs:delete
  • vpc:ports:delete

√

√

Deleting All Networks

DELETE /apis/networking.cci.io/v1beta1/namespaces/{namespace}/networks
  • CCI:network:Delete
  • vpc:vpcs:delete
  • vpc:ports:delete

√

√
Table 9 PersistentVolumeClaim management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a PersistentVolumeClaim

POST /api/v1/namespaces/{namespace}/persistentvolumeclaims
  • CCI:namespaceSubResource:Create
    • For EVS volumes:

      evs:volumes:create

      evs:volumes:get

      evs:types:get

    • For SFS volumes:

      sfs:shares:createShare

      sfs:shares:getOSQuotaSets

      sfs:shares:ShareAction

√

√

Reading a PersistentVolumeClaim

GET /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}
  • CCI:namespaceSubResource:Get
    • For EVS volumes:

      evs:volumes:get

    • For SFS volumes:

      sfs:shares:getAllSharesDetail

√

√

Listing PersistentVolumeClaims

GET /api/v1/namespaces/{namespace}/persistentvolumeclaims
  • CCI:namespaceSubResource:List
  • For EVS volumes:

    evs:volumes:list

  • For SFS volumes:

    sfs:shares:getAllSharesDetail

    sfs:shares:ShareAction

  • For OBS volumes:

    obs:bucket:ListAllMyBuckets

√

√

Deleting a PersistentVolumeClaim

DELETE /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}
  • CCI:namespaceSubResource:Delete
  • For EVS volumes:

    evs:volumes:delete

    evs:volumes:get

  • For SFS volumes:

    sfs:shares:deleteShare

√

√
Table 10 ConfigMap management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a ConfigMap

POST /api/v1/namespaces/{namespace}/configmaps

CCI:namespaceSubResource:Create

√

√

Reading a ConfigMap

GET /api/v1/namespaces/{namespace}/configmaps/{name}

CCI:namespaceSubResource:Get

√

√

Listing ConfigMaps

GET /api/v1/namespaces/{namespace}/configmaps

CCI:namespaceSubResource:List

√

√

Replacing a ConfigMap

PUT /api/v1/namespaces/{namespace}/configmaps/{name}

CCI:namespaceSubResource:Update

√

√

Updating a ConfigMap

PATCH /api/v1/namespaces/{namespace}/configmaps/{name}

CCI:namespaceSubResource:Update

√

√

Deleting a ConfigMap

DELETE /api/v1/namespaces/{namespace}/configmaps/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All ConfigMaps

DELETE /api/v1/namespaces/{namespace}/configmaps

CCI:namespaceSubResource:Delete

√

√
Table 11 Secret management actions

Permissions

API

Action

IAM Project

Enterprise Project

Creating a Secret

POST /api/v1/namespaces/{namespace}/secrets

CCI:namespaceSubResource:Create

√

√

Replacing a Secret

PUT /api/v1/namespaces/{namespace}/secrets/{name}

CCI:namespaceSubResource:Update

√

√

Updating a Secret

PATCH /api/v1/namespaces/{namespace}/secrets/{name}

CCI:namespaceSubResource:Update

√

√

Deleting a Secret

DELETE /api/v1/namespaces/{namespace}/secrets/{name}

CCI:namespaceSubResource:Delete

√

√

Deleting All Secrets

DELETE /api/v1/namespaces/{namespace}/secrets

CCI:namespaceSubResource:Delete

√

√
Table 12 ClusterRole

Permissions

API

Action

IAM Project

Enterprise Project

Reading a Specified ClusterRole

GET /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}

CCI:rbac:Get

√

√

Reading the ClusterRole List

GET /apis/rbac.authorization.k8s.io/v1/clusterroles

CCI:rbac:List

√

√
Table 13 RoleBinding

Permissions

API

Action

IAM Project

Enterprise Project

Creating a RoleBinding

POST /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings

CCI:rbac:Create

√

√

Updating a Specified RoleBinding

PATCH /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}

CCI:rbac:Update

√

√

Replacing a Specified RoleBinding

PUT /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}

CCI:rbac:Update

√

√

Deleting a Specified RoleBinding

DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}

CCI:rbac:Delete

√

√

Reading a Specified RoleBinding

GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}

CCI:rbac:Get

√

√

Obtaining the RoleBinding List Under a Specified Namespace

GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings

CCI:rbac:List

√

√

Obtaining the RoleBinding List

GET /apis/rbac.authorization.k8s.io/v1/rolebindings

CCI:rbac:List

√

√