Skip to main content
ZStack
Monitoring & Collection/Monitoring Misc

ValidateIsolationQuery

Validate that a PromQL query complies with tenant isolation boundaries

POST/api/v1/monitoring/isolation/validate

Operation ID

ValidateIsolationQuery

Since

1.0.0

Execution Mode

Synchronous

Auth Context

Auth Required

Auth Context

Send these values as request headers when calling this API.

AuthorizationstringRequired

Bearer Token

X-Tenant-IDstring

X-Tenant-ID

Request Inputs

application/json

Body Fields

  • tenantId
    StringRequired

    Tenant ID to validate the query against

    Example: tenant-001-xyz

  • query
    StringRequired

    PromQL query string to validate

    Example: cpu_usage_percent{job="node"}

Responses

200 OK
200 OK

On success, this API returns the following response structure.

  • valid
    Boolean

    Whether the query passes tenant isolation validation

    Example: true

  • originalQuery
    String

    The original submitted query string

    Example: cpu_usage_percent{job="node"}

  • filteredQuery
    String

    The query after tenant filter injection

    Example: cpu_usage_percent{job="node",tenant_id="tenant-001"}

  • tenantId
    String

    Tenant identifier used for validation

    Example: tenant-001-xyz

  • violations
    List

    Violations for this resource

    Example: item1,item2

  • errorCode
    String

    Machine-readable error code if validation failed

    Example: INVALID_CONFIG

  • message
    String

    Human-readable validation result message

    Example: Query is compliant with tenant isolation policy