Skip to main content
Platform-provided resource. Datum operates this resource; you typically reference or read it rather than create it. See Platform resources.
API resource reference for ServiceEntitlement, part of the platform service catalog. See Platform resources for the full catalog. To create or change one, see Changing resources; to inspect, see Reading resources.
This resource is part of the v1alpha1 API and is subject to change. Fields and behavior may change in future releases.

Identity

Groupservices.miloapis.com
Versionv1alpha1
KindServiceEntitlement
ScopePlatform

Overview

A ServiceEntitlement records a consumer project’s intent to use a specific Datum Cloud service. A project admin creates one ServiceEntitlement per service they want to enable. The object is written into the consumer project’s control plane, and the services operator reconciles it into the provider project so the requested service becomes available. Some services require provider approval before they become active; for those, you can include a human-readable message with your request. Entitlements can also be created automatically when one service depends on another.

Spec fields

FieldTypeRequiredDescription
spec.serviceRefObjectYesIdentifies the Service the consumer project wants to enable.
spec.serviceRef.namestringYesThe name of the referenced Service.
spec.requestMessagestringNoOptional human-readable message sent to the provider when the service requires approval.

Status fields (read-only)

FieldTypeDescription
status.phasestringController-observed lifecycle state: PendingApproval, Active, or Rejected.
status.originstringWhether this entitlement was created directly by a consumer admin (Direct) or automatically as a dependency of another entitlement (Dependency).
status.serviceNamestringCanonical service identifier resolved from spec.serviceRef (e.g., compute.datumapis.com), set by the controller on first successful reconcile.
status.entitledAtstringThe time at which this entitlement became Active.
status.dependencyOfstringThe metadata.name of the ServiceEntitlement that caused this entitlement to be created when origin is Dependency.
status.observedGenerationintegerThe most recent generation observed by the controller.
status.conditions[]ObjectLatest available observations of the entitlement’s state.

Usage

apiVersion: services.miloapis.com/v1alpha1
kind: ServiceEntitlement
metadata:
  name: compute-datumapis-com
spec:
  serviceRef:
    name: compute.datumapis.com
  requestMessage: "Enabling compute for the production workloads project."
datumctl apply -f serviceentitlement.yaml --project my-project
datumctl get serviceentitlements --project my-project
datumctl describe serviceentitlement compute-datumapis-com --project my-project
Run datumctl explain serviceentitlements --recursive to see the full, live field tree for this resource.
Last modified on July 2, 2026