Get Egress Policy
GetEgressPolicy returns both the typed rules (for the authoring UI) and the compiled TB policy YAML + generation (for timebanditd’s poller) in one call — one instance’s policy is small enough that splitting the two reads into separate RPCs would be pure surface area, not a real cost saving for either caller.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.
Path Parameters
The tbInstanceId field.
Response
Successful response
The TBControlPlaneServiceGetEgressPolicyResponse message.
The compiled TB policy YAML for the current generation, empty when
policy.rules is empty.
TBEgressPolicy is the typed policy document for one TB instance. Binds per-instance, not per-tenant-across-instances, keyed by tb_instance_id exactly as discovery reports it.