Missing REST API documentation

[lukehoban]

Ideally we address https://github.com/pulumi/pulumi-cloud-requests/issues/100 imminently and deliver a "full" OpenAPI spec for the Pulumi Cloud REST API.

But in the meantime - using this issue to catalogue APIs that exist but are undocumented:

• [ ] Policies
  • [x] /orgs/{orgName}/policygroups (GET)
  • [x] /orgs/{orgName}/policygroups/{policyGroup} (GET)
  • [x] /orgs/{orgName}/policypacks (GET)
  • [x] /orgs/{orgName}/policypacks/{policyPackName}/latest (GET)
  • [x] /orgs/{orgName}/policypacks/{policyPackName}/versions/{version} (GET)
  • [x] /orgs/{orgName}/policypacks/{policyPackName}/versions/{version}/schema (GET)
  • [ ] /orgs/{orgName}/policygroups (POST)
  • [ ] /orgs/{orgName}/policygroups/{policyGroup} (PATCH, DELETE)
  • [ ] /orgs/{orgName}/policypacks (POST)
  • [ ] /orgs/{orgName}/policypacks/{policyPackName} (DELETE)
  • [ ] /orgs/{orgName}/policypacks/{policyPackName}/latest (POST)
  • [ ] /orgs/{orgName}/policypacks/{policyPackName}/versions/{version} (DELETE)
  • A few more...
• [ ] Stacks
  • [x] Create Stack
  • [ ] /stacks/{orgName}/{projectName}/{stackName}/downstreamreferences (GET)
  • [ ] /stacks/{orgName}/{projectName}/{stackName}/metadata (GET)
  • [ ] /stacks/{orgName}/{projectName}/{stackName}/resources/count (GET)
  • [ ] /stacks/{orgName}/{projectName}/{stackName}/resources/latest (GET)
  • [ ] /stacks/{orgName}/{projectName}/{stackName}/resources/{version} (GET)
  • [x] /stacks/{orgName}/{projectName}/{stackName}/policygroups (GET)
  • [x] /stacks/{orgName}/{projectName}/{stackName}/policypacks (GET)
• [ ] Encryption/decryption
• [ ] New Project Wizard Templates and Template Sources
• [ ] Agent Pools
• [ ] Org Tokens
• [ ] Team Tokens
  • [ ] /api/orgs/{orgName}/teams/{team}/tokens (POST)
• [ ] OIDC Issuers
• More...

[meagancojocar]

Tacking on to this:

• Combine Deployment REST API with Cloud REST API docs.

[komalali]

CreateStack API is also undocumented

[meagancojocar]

Isn't Delete Stack which we use for TTL also undocumented

[komalali]

Isn't Delete Stack which we use for TTL also undocumented

That's the deleteAfterDestroy option in the deployment settings. But yes.

[meagancojocar]

I thought that the API endpoint we used for deleteAfterDestroy was yet o be documented and it was something that even non-deployments customers could use.

[ringods]

Customer wants to create team tokens via the REST api. Via reverse engineering, they found this endpoint:

/api/orgs/{orgName}/teams/{team}/tokens

They would like to have this in the official public API too.