Bulk-create CertOps renewal jobs

POST 
/api/v1/workspaces/:id/certops/jobs/bulk-renew

Queues a renew job for up to 100 managed certificates in one request. Each certificate goes through the same manual job-creation path as POST /jobs (manager role, workspace kill switch, approval gate, payload validation), and jobs are always recorded with source "api". The response is a partial-failure envelope: per-certificate successes and failures are reported item by item and never abort the batch, so the request returns 200 even when some or all items fail. Only whole-request shape problems (malformed body, more than 100 ids, non-UUID or duplicate ids) fail with 400. Private key or secret material in the request body is rejected.

Request

Responses

200

Partial-failure envelope with per-certificate outcomes

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

409

Workspace CertOps is paused; no items are attempted

422

The request contained private-key or forbidden secret material

500

Internal server error

503

Workspace pause state could not be read; new CertOps work is denied fail-closed