rbac-proxy::on-config-change
Internal: hot-reload rbac-proxy from the authoritative configuration — rebinds the public listener on a host/port change (last-good on failure), else swaps the per-connection snapshot.
- idstring
- okbooleanrequired
rbac-proxy
v1.0.16RBAC boundary proxy for the iii worker protocol — auth, gating, namespacing, middleware, and engine:: result filtering on its own port.
Install
bash
iii trigger compose::add worker=rbac-proxyRun in your project with the iii engine running. Exact versions are immutable and digest-pinned.
Functions3
Function
rbac-proxy::on-functions-available
Internal: invalidate the discovery catalog cache when the engine's available function set changes.
- eventstring
- okbooleanrequired
rbac-proxy::status
Check proxy health: bound host/port, the (credential-redacted) upstream engine URL, whether an auth function is configured, and the live downstream connection count.
Empty object
- active_connectionsinteger· uint32requiredmin 0
Live downstream connections.
- engine_urlstringrequired
Upstream engine URL, with any `user:pass@` credentials redacted.
- hoststringrequired
Bound public host.
- portinteger· uint16requiredmin 0
Bound public RBAC port.
- rbac_enabledbooleanrequired
Whether an `auth_function_id` is configured.
- versionstringrequired
Worker version (matches `Cargo.toml`).
Triggers0
No triggers registered