spad.ltip.alibaba.attach_cdn_certificate

Attach managed SSL certificate to Alibaba CDN domain

Attach a managed DV SSL certificate to an Alibaba CDN domain via SetDomainServerCertificate (CertType=cas). Skips gracefully when no CDN domain is present in state (CDN not yet provisioned or not configured).

Overview

Property	Value
Workflow type	Linear
Library	App-spad
Version	1.0

Input Schema

Field	Type	Required	Default	Description
cloud_connection_uuid	string	Yes	—	Alibaba CloudConnection.id (required when alibaba_cdn_domain is set)
alibaba_cdn_domain	string	No	—	CDN domain to attach the cert to; step skips gracefully when omitted
oss_region	string	No	cn-hangzhou	Region used for the CDN client; defaults to cn-hangzhou
site_uuid	string	No	—	SpadSite.id used to cache the resulting cert ID
organization_uuid	string	No	—	Organization that owns the site
workflow_run_id	string	No	—	Injected by the parent DAG; propagated through state_data
workflow_run_uuid	string	No	—	Parent workflow run ID stamped by the DAG engine (legacy alias)

Output Schema

Field	Type	Required	Default	Description
cert_attached	boolean	No	—	True when managed DV cert was attached (attached path only)
alibaba_cdn_cert_ref	string	No	—	Certificate identifier (RequestId) when attached
cert_skipped	boolean	No	—	True when the step skipped because no CDN domain was present
cert_skip_reason	string	No	—	Human-readable reason for the skip (skip path only)
completed_at	string	No	—	ISO8601 timestamp when the step reached COMPLETED
failed_at	string	No	—	ISO8601 timestamp when the step reached FAILED
failure_reason	string	No	—	Reason recorded on the failure path
workflow_run_id	string	No	—	Injected by the parent DAG; propagated through state_data
cloud_connection_uuid	string	No	—	Alibaba CloudConnection.id (required when alibaba_cdn_domain is set)
alibaba_cdn_domain	string	No	—	CDN domain to attach the cert to; step skips gracefully when omitted
oss_region	string	No	—	Region used for the CDN client; defaults to cn-hangzhou
site_uuid	string	No	—	SpadSite.id used to cache the resulting cert ID
organization_uuid	string	No	—	Organization that owns the site
workflow_run_uuid	string	No	—	Parent workflow run ID stamped by the DAG engine (legacy alias)
error	string	No	—	Engine-stamped failure metadata
error_type	string	No	—	Engine-stamped failure metadata
failed_at_state	json	No	—	Engine-stamped failure metadata
failed_layer	json	No	—	Engine-stamped failure metadata
failed_step	json	No	—	Engine-stamped failure metadata

States

State	Initial	Terminal	Success	Auto-advance	Description
initiated	Yes	No	—	run	Step accepted
run	No	No	—	complete	Attaching CDN certificate
completed	No	Yes	Yes	—	CDN certificate attached
failed	No	Yes	No	—	CDN certificate attachment failed

State Diagram

Transitions

From	Action	To	Description
initiated	run	run	Start certificate attachment
run	complete	completed	Mark step completed
* (any state)	fail	failed	Mark step failed

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "spad.ltip.alibaba.attach_cdn_certificate",
  "initial_data": {
    "cloud_connection_uuid": "value"
  }
}