EnrollmentGrantService
This page lists the methods of EnrollmentGrantService in kibotos.operator.v1 with the messages and enums each one uses, generated from operator.proto and its comments. Those that several services use are on kibotos.operator.v1 types.
EnrollmentGrantService lets an authenticated Operator create one-time enrollment grants for other Operators or for exact node IDs, and revoke a principal. The enrollment key is returned exactly once; ctrl keeps only the grant record, the bootstrap certificate serial, and the key fingerprint.
CreateEnrollmentGrant
/kibotos.operator.v1.EnrollmentGrantService/CreateEnrollmentGrantUnaryCreateEnrollmentGrantRequestCreateEnrollmentGrantRequest names the exact principal the grant admits. ttl is bounded by ctrl (one minute to twenty-four hours, default one hour). data_plane_extra_hosts is allowed only on a node grant: extra lowercase DNS names or IP addresses (an IP, a loopback address, or an external DNS name) the node's data-plane certificate must also name, beyond the derived <node_id>.<suffix> node host ctrl always signs. Enroll copies them into the node admission. None of them may be the ctrl host.
CreateEnrollmentGrantResponseCreateEnrollmentGrantResponse carries the opaque enrollment key only on the first response for a command_id. A replay returns the same grant with an empty key and replayed set, because ctrl never stores the key.
RevokeEnrollment
/kibotos.operator.v1.EnrollmentGrantService/RevokeEnrollmentUnaryRevokeEnrollmentRequestRevokeEnrollmentRequest ends a principal: its admission becomes terminal, its pending grants are revoked, and for a node its control session closes.
RevokeEnrollmentResponseMessages and enums
Several methods of EnrollmentGrantService use these messages and enums.
EnrollmentKind
ENROLLMENT_KIND_UNSPECIFIED= 0ENROLLMENT_KIND_OPERATOR= 1ENROLLMENT_KIND_NODE= 2
ArtifactRetentionService
This page lists the methods of ArtifactRetentionService in kibotos.operator.v1 with the messages and enums each one uses, generated from operator.proto and its comments. Those that several services use are on kibotos.operator.v1 types.
kibotos.operator.v1 types
This page lists the messages and enums of kibotos.operator.v1 that no single service owns, generated from operator.proto and its comments. Those that one service uses are on that service's page.