ssh_pending_approvals


Description

{“what”:“Holds SSH action requests that require approval before execution.”,“why”:“Without it, unauthorized SSH actions could run and there would be no audit trail of approvals.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.524051567+00:00”}

Columns

Column Type Size Nulls Auto Default Children Parents Comments
id text 2147483647 null
changelogs.entity_id Implied Constraint R

{“what”:“Unique identifier for the approval request, typically a UUID.”,“why”:“Without it, requests cannot be referenced individually in logs or API calls.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.535693957+00:00”}

created_at timestamptz 35,6 null

{“what”:“Timestamp when the request was submitted, in UTC.”,“why”:“Without it, expiry and audit of request timing are impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.545987307+00:00”}

expires_at timestamptz 35,6 null

{“what”:“Timestamp after which the pending request becomes invalid, in UTC.”,“why”:“Without it, stale requests would remain pending and could be approved too late.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.559197512+00:00”}

action_type text 2147483647 null

{“what”:“Type of SSH action requested, e.g., ‘command’ or ‘tunnel’.”,“why”:“Without it, approvers cannot know what kind of operation they are approving.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.581505112+00:00”}

target text 2147483647 √ null

{“what”:“Target host or resource the SSH action applies to, if any.”,“why”:“Without it, the scope of the approval is ambiguous for host-specific actions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.603633195+00:00”}

description text 2147483647 null

{“what”:“Free-text explanation of the requested action, written by the requester.”,“why”:“Without it, approvers lack context to make an informed decision.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.615181159+00:00”}

action_payload text 2147483647 null

{“what”:“Serialized details of the SSH action, e.g., command line or JSON payload.”,“why”:“Without it, the exact operation to be executed is unknown, so approval cannot be tied to a concrete action.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.626075558+00:00”}

status text 2147483647 'pending'::text

{“what”:“Current state of the request: ‘pending’, ‘approved’, ‘denied’, or ‘expired’.”,“why”:“Without it, it is impossible to know whether the request is still actionable or has been resolved.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.636789748+00:00”}

resolved_at timestamptz 35,6 √ null

{“what”:“Timestamp when the request was approved or denied, in UTC; null while pending.”,“why”:“Without it, audit trails cannot show when a decision was made, and expiry logic cannot distinguish resolved from unresolved.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.649500763+00:00”}

Indexes

Constraint Name Type Sort Column(s)
ssh_pending_approvals_pkey Primary key Asc id
idx_ssh_approvals_status Performance Asc status

Relationships