Skip to main content

UpsertCatalogProvider

PUT 
/admin/v1/catalog/providers/{provider.id}

Admin-key catalog WRITES (fraser#8451).

The identity-authenticated CatalogService.UpsertProvider/UpsertModel are mounted on the IA mux, which accepts only a session token or an <address>.<body> public.api_keys key -- so a platform admin_api_keys key can never reach them. That is the same wall #6025 hit for READS, solved the same way: expose the operation behind the admin auth path.

These delegate to catalog.Server, so validation, metadata handling, suppress_route_regen semantics and the per-gateway fan-out are the SAME code as the identity surface rather than a parallel implementation.

The motivating caller is the catalog-sync CronJob, whose only credential on a provisioned management plane is that plane's admin key.

Request​

Responses​

Success