DataPlaneSessionService
本页列出 kibotos.ctrl.v1 中 DataPlaneSessionService 的方法及每个方法用到的消息与枚举，由 ctrl.proto 及其注释生成，注释保持英文。多个服务共用的消息与枚举见 kibotos.ctrl.v1 类型。
DataPlaneSessionService issues short-lived credentials for one available workspace. Credentials are returned only by issuance responses and are never accepted in a protobuf request field.
CreateDataPlaneSession
/kibotos.ctrl.v1.DataPlaneSessionService/CreateDataPlaneSession一元调用CreateDataPlaneSessionRequestrequested_ttl may only tighten the server maximum. Zero selects the server default. Not accepted with lifetime EXECUTION.
Required exactly when SERVICE_CONNECT is requested. A bounded set of exact targets; included in idempotency, persistence, and signed claims.
When present, only issue for this Workspace generation. Checked in the issuance transaction; a mismatch returns FAILED_PRECONDITION, as any Workspace that cannot be issued for does, with the Workspace in observed_workspace. Included in idempotency: replay returns the original session, never a newer execution.
Lifetime policy. Included in idempotency.
CreateDataPlaneSessionResponsecredential is an opaque bearer value. Callers must not inspect, log, or place it in URLs. Retries with the same command return the same value.
DataPlaneSession
session_id is non-secret and may be used for correlation. It is not an authorization credential and does not identify an internal runtime resource.
generation is the Workspace generation the session was issued for: the same value means the same execution, whatever else about the session changed. Zero on a session issued before this field existed.
DataPlaneScope
DATA_PLANE_SCOPE_UNSPECIFIED= 0DATA_PLANE_SCOPE_FILE_READ= 1DATA_PLANE_SCOPE_FILE_WRITE= 2DATA_PLANE_SCOPE_PROCESS= 5DATA_PLANE_SCOPE_SERVICE_CONNECT= 6DATA_PLANE_SCOPE_DESKTOP= 7
DataPlaneSessionLifetime
DataPlaneSessionLifetime selects how long an issued session stays valid.
DATA_PLANE_SESSION_LIFETIME_UNSPECIFIED= 0Bounded by requested_ttl and the server maximum (default 5 minutes, at most 15 minutes).
DATA_PLANE_SESSION_LIFETIME_EXECUTION= 1Bound to the current execution and valid for at most one hour, cut short by the Workspace's deadline when that comes first. The data plane rejects the credential as soon as the execution ends, but the hour still bounds a leaked credential, a revoked caller, and a signing key rotation, so a caller that caches it renews it before it expires. Requires expected_generation; requested_ttl must be zero. Announced by the workspace.session.execution capability.