Allow Workload Access
allow_workload_accessDestructiveIdempotent
Let other workloads reach a workload inside the platform: adds the callers to what its internal firewall already admits, keeps every other firewall rule, and returns the internal URL the callers use. A caller in another GVC works by being listed. remove true takes callers off the list; a same-gvc or same-org rule still admits them. Network reach only: secret access is grant_workload_secret_access, cloud access is grant_cloud_access.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| gvc | Yes | GVC name. | |
| org | No | Organization slug. | |
| remove | No | true takes the callers out of the list instead. | |
| callers | Yes | Workloads that may reach it, including ones not created yet. | |
| workload | Yes | Workload to reach. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | ||
| data | No | The full result. Read this, not only the summary. | |
| details | No | ||
| summary | Yes | ||
| nextSteps | No |