kubernetes.connection.identity

Read effective Kubernetes user identity.

Read the effective Kubernetes user through SelfSubjectReview.

Overview

Property	Value
Workflow type	Atomic
Library	App-kubernetes
Version	1.0

Input Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	Yes	—	Kubernetes CloudConnection UUID.
organization_uuid	uuid	No	—	Owning organization UUID (engine-injected).
workflow_run_id	string	No	—	Engine DAG run ID stamped onto child steps.

Output Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	No	—	Kubernetes CloudConnection UUID.
organization_uuid	uuid	No	—	Owning organization UUID (engine-injected).
cluster_name	string	No	—	Best-effort cluster display name.
server	string	No	—	Kubernetes API server URL.
user	string	No	—	Effective Kubernetes username.
uid	string	No	—	Effective Kubernetes user UID.
groups	json	No	—	Effective Kubernetes groups.
extra	json	No	—	Additional Kubernetes user info.
checked_at	string	No	—	ISO timestamp when the identity was read.
failure_reason	string	No	—	Human-readable failure reason.
failed_step	json	No	—	Failed logical step.
failed_layer	json	No	—	Failed logical layer.
failure_type	string	No	—	Failure category.
failed_action	string	No	—	Action that failed.
failed_at_state	string	No	—	State where failure occurred.
error	string	No	—	Error message.
error_type	string	No	—	Error class.
failed_at	string	No	—	ISO failure timestamp.

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "kubernetes.connection.identity",
  "initial_data": {
    "connection_uuid": "value"
  }
}