Skip to main content

exec_credentials

Typed specification

Generated by the pinned ess generate --kind docs from adapters/kubernetes/spec/ess. Structural validation establishes consistency; behaviour, storage and cross-record predicates remain implementation obligations.

Kubernetes-owned exec credential plugin binding, its kubeconfig selection, the credential lifetime it observes and the refusals of one plugin run.

connectors_kubernetes.exec_credentials is one of connectors_kubernetes's bounded contexts. Back to the index.

Types​

ExecCredentialApiVersion​

connectors_kubernetes.exec_credentials.ExecCredentialApiVersion is one of client_authentication_v1 and client_authentication_v1beta1.

ExecCredentialLifetime​

connectors_kubernetes.exec_credentials.ExecCredentialLifetime is a record of one field:

  • expires_at_ms — Optional<Integer>, which may be absent

ExecPluginAdmission​

connectors_kubernetes.exec_credentials.ExecPluginAdmission is one of off and pinned.

ExecPluginBinding​

connectors_kubernetes.exec_credentials.ExecPluginBinding is a record of six fields:

  • path — String
  • sha256 — String
  • user — String
  • env — List<connectors_kubernetes.exec_credentials.ExecPluginEnvName>
  • home — Optional<String>, which may be absent
  • timeout_ms — Integer

Every value satisfies (path.count >= 2 and path.count <= 4096), (sha256.count >= 64 and sha256.count <= 64), (user.count >= 1 and user.count <= 256), env.count <= 32, (not (defined(home)) or (home.count >= 2 and home.count <= 4096)) and (timeout_ms >= 1 and timeout_ms <= 60000).

ExecPluginEnvName​

connectors_kubernetes.exec_credentials.ExecPluginEnvName wraps String and is not interchangeable with one: the whole value of naming it separately is the crossings the model then refuses. Its characters are drawn from ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_. Every value satisfies (value.count >= 1 and value.count <= 128), not ((value starts_with "0" or value starts_with "1" or value starts_with "2" or value starts_with "3" or value starts_with "4" or value starts_with "5" or value starts_with "6" or value starts_with "7" or value starts_with "8" or value starts_with "9" or value == HOME or value == KUBERNETES_EXEC_INFO)) and not ((value starts_with "LD_" or value starts_with "PYTHON" or value starts_with "PERL" or value starts_with "RUBY" or value starts_with "NODE_" or value starts_with "DOTNET_" or value starts_with "COREHOST_" or value starts_with "LUA_INIT_" or value == JAVA_TOOL_OPTIONS or value == _JAVA_OPTIONS or value == JDK_JAVA_OPTIONS or value == CLASSPATH or value == LUA_INIT or value == TCLLIBPATH or value == BASH_ENV or value == ENV or value == SHELLOPTS or value == BASHOPTS or value == PS4 or value == IFS or value == CDPATH or value == GLOBIGNORE or value == PROMPT_COMMAND or value == ZDOTDIR or value == FPATH or value == OPENSSL_CONF or value == OPENSSL_MODULES or value == OPENSSL_ENGINES or value == GIO_MODULE_DIR or value == GTK_MODULES or value == GCONV_PATH or value == GETCONF_DIR or value == GLIBC_TUNABLES or value == HOSTALIASES or value == LOCALDOMAIN or value == LOCPATH or value == MALLOC_TRACE or value == NIS_PATH or value == NLSPATH or value == RESOLV_HOST_CONF or value == RES_OPTIONS)).

ExecPluginRefusal​

connectors_kubernetes.exec_credentials.ExecPluginRefusal is one of digest_mismatch, plugin_unavailable, kubeconfig_mismatch, timeout, output_too_large, malformed_credential and plugin_failed.

ExecPluginSelection​

connectors_kubernetes.exec_credentials.ExecPluginSelection is a record of four fields:

  • api_version — connectors_kubernetes.exec_credentials.ExecCredentialApiVersion
  • command — String
  • args — List<String>
  • env_names — List<String>

Every value satisfies (command.count >= 1 and command.count <= 4096), args.count <= 64 and env_names.count <= 32.

Five of the types above are reached by nothing else in this system: connectors_kubernetes.exec_credentials.ExecCredentialLifetime, connectors_kubernetes.exec_credentials.ExecPluginAdmission, connectors_kubernetes.exec_credentials.ExecPluginBinding, connectors_kubernetes.exec_credentials.ExecPluginRefusal and connectors_kubernetes.exec_credentials.ExecPluginSelection. No entity, view, command, event, error or crossing names them, so it is either vocabulary something outside this specification uses or a leftover — and only a person can tell which.

Generated from connectors_kubernetes v1 · model digest 860ee995d42502fcf5cf8042d04e0af8a02e201a325b1ea6d3c5c1b2d4cd0b9d · contract digest slice-sha256/2:ffa7791aa3c71f7dfbe5891a00a357b1800a5391502c25fb862db7fb6567fbe5. Do not edit this file; change the specification and regenerate it with ess generate.