orl authz policy create
Create a guardrail or a custom Cedar policy (needs `orl auth login`), part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing.
orl authz policy create --kind <kind> --name <name>Saves a guardrail (key networks, everyone networks or a model allowlist) or a custom Cedar policy and returns it, enabled unless you send enabled: false. Requires a signed-in session. Guardrails that apply to API keys only need guardrail.manage; the everyone_networks guardrail and every custom policy can block sessions and need policy.manage (owners). A policy that would take policy.manage or member.manage from the saving owner is refused with 409 WOULD_LOCK_OUT.
Flags
| Flag | Type | Required | |
|---|---|---|---|
--cedar-text | string | no | |
--description | string | no | |
--enabled | bool | no | Defaults to true. |
--endpoints | []string | no | |
--guardrail | key_networks, everyone_networks, model_allowlist | no | |
--ip-ranges | []string | no | |
--kind | guardrail, custom | yes | |
--models | []string | no | |
--name | string | yes | |
--body | string | no | a JSON object of request body fields, merged under any of this command's own flags that are also set, e.g. {"key":"value"} |
--body-file | string | no | read the --body JSON object from a file (- for stdin) |
This wraps the createPolicy API operation.
orl authz permission-catalog get
Get the permission catalog, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing. Usage, every flag and an example.
orl authz policy delete
Delete a policy (needs `orl auth login`) (asks for confirmation; --yes to skip), part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing.