scenario:
  id: edfc5eea-5727-4ec5-9513-82cbaab6c1c6
  context:
    auth:
      type: digest
    base_path: null
    host: api.env.tidbcloud.com
  description: rbac_v1beta_cm_403
  name: rbac_v1beta_cm_403
steps:
- operation_id: ListProviderRegions
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/clusters/provider/regions",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 0
- operation_id: ListAwsCmek
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/aws-cmek",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 1
- operation_id: CreateAwsCmek
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/aws-cmek",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "specs": [
          {
            "region": "us-west-2",
            "kms_arn": "arn:aws:kms:example"
          }
        ]
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 2
- operation_id: ListClustersOfProject
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters?page=1&page_size=10",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 3
- operation_id: CreateCluster
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/clusters",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "name": "Cluster0",
        "cluster_type": "DEDICATED",
        "cloud_provider": "AWS",
        "region": "us-west-2",
        "config": {
          "root_password": "password_example",
          "port": 4000,
          "components": {
            "tidb": {
              "node_size": "8C16G",
              "node_quantity": 2
            },
            "tikv": {
              "node_size": "8C32G",
              "storage_size_gib": 1024,
              "node_quantity": 3
            }
          },
          "ip_access_list": [
            {
              "cidr": "8.8.8.8/32",
              "description": "My Current IP Address"
            }
          ]
        }
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 4
- operation_id: GetCluster
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 5
- operation_id: DeleteCluster
  request_type: http
  request: |-
    {
      "method": "DELETE",
      "path": "/api/v1beta/projects/3199728/clusters/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 6
- operation_id: UpdateCluster
  request_type: http
  request: |-
    {
      "method": "PATCH",
      "path": "/api/v1beta/projects/3199728/clusters/123",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "config": {
          "components": {
            "tidb": {
              "node_size": "16C32G",
              "node_quantity": 3
            },
            "tikv": {
              "node_size": "16C64G",
              "storage_size_gib": 2048,
              "node_quantity": 6
            },
            "tiflash": {
              "node_size": "16C128G",
              "storage_size_gib": 2048,
              "node_quantity": 2
            }
          }
        }
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 7
- operation_id: ListAccesspoints
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 8
- operation_id: CreateAccesspoint
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "display_name": "Accesspoint",
        "public_endpoint": {
          "ip_allowlist": [
            {
              "cidr": "0.0.0.0/0"
            }
          ]
        }
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 9
- operation_id: GetAccesspoint
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 10
- operation_id: DeleteAccesspoint
  request_type: http
  request: |-
    {
      "method": "DELETE",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 11
- operation_id: UpdateAccesspoint
  request_type: http
  request: |-
    {
      "method": "PATCH",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "display_name": "Accesspoint",
        "public_endpoint": {
          "ip_allowlist": [
            {
              "cidr": "0.0.0.0/0"
            }
          ]
        }
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 12
- operation_id: ListPrivateLinkEndpoints
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123/privateLinkEndpoints",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 13
- operation_id: CreatePrivateLinkEndpoint
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123/privateLinkEndpoints",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "endpoint_name": "vpce-01234567890123456"
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 14
- operation_id: GetPrivateLinkEndpoint
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123/privateLinkEndpoints/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 15
- operation_id: DeletePrivateLinkEndpoint
  request_type: http
  request: |-
    {
      "method": "DELETE",
      "path": "/api/v1beta/projects/3199728/clusters/123/accesspoints/123/privateLinkEndpoints/123",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 16
- operation_id: GetPrivateEndpointService
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/private_endpoint_service",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 17
- operation_id: CreatePrivateEndpointService
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/clusters/123/private_endpoint_service",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 18
- operation_id: ListPrivateEndpoints
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/clusters/123/private_endpoints",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 19
- operation_id: CreatePrivateEndpoint
  request_type: http
  request: |-
    {
      "method": "POST",
      "path": "/api/v1beta/projects/3199728/clusters/123/private_endpoints",
      "headers": {
        "content-type": "application/json"
      },
      "query_params": {},
      "body": {
        "endpoint_name": "vpce-01234567890123456"
      },
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 20
- operation_id: DeletePrivateEndpoint
  request_type: http
  request: |-
    {
      "method": "DELETE",
      "path": "/api/v1beta/projects/3199728/clusters/123/private_endpoints/vpce-01234567890123456",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 0
  delay_after: 0
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 21
- operation_id: ListPrivateEndpointsOfProject
  request_type: http
  request: |-
    {
      "method": "GET",
      "path": "/api/v1beta/projects/3199728/private_endpoints",
      "headers": {},
      "query_params": {},
      "body": {},
      "auth": {
        "auth_type": "digest",
        "content": {
          "private_key": "placeholder",
          "public_key": "placeholder"
        }
      }
    }
  expect: |-
    {
      "status_code": 403,
      "cel": "body.message.startsWith('The v1beta API is restricted to the role of')"
    }
  save: null
  description: ''
  max_retries: 120
  delay_after: 30
  name: ''
  continue_on_unexpected: false
  stage: ''
  meta: '{}'
  generation_id: ''
  order: 22
