Merge pull request 'State each provision's identity bound (hq issue 263, ADR 0225)' (#83) from fix/263-identity-bounds-per-provision into main

modules/cloudflare-dns/module.json

@@ -5,7 +5,11 @@
   "provides": [
     {
       "name": "public-dns",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 63,
+        "in": "a DNS label"
+      }
     }
   ],
   "serves": {

modules/dnsmasq/module.json

@@ -4,7 +4,8 @@
   "provides": [
     {
       "name": "wildcard-resolution",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": false
     }
   ],
   "requires": [

modules/gitea/module.json

@@ -182,7 +182,11 @@
   "provides": [
     {
       "name": "npm-package-registry",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 40,
+        "in": "a Gitea user name"
+      }
     },
     {
       "name": "git",

modules/influxdb/module.json

@@ -4,7 +4,10 @@
   "provides": [
     {
       "name": "influxdb-api",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "in": "an InfluxDB v1 authorization"
+      }
     }
   ],
   "capabilities": [

modules/keycloak/module.json

@@ -4,7 +4,11 @@
   "provides": [
     {
       "name": "oidc-client",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 255,
+        "in": "a Keycloak client id"
+      }
     }
   ],
   "requires": [

modules/mailu/module.json

@@ -537,7 +537,11 @@
   "provides": [
     {
       "name": "smtp",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 64,
+        "in": "a mailbox's local part"
+      }
     }
   ],
   "serves": {

modules/mesh-vault/module.json

@@ -4,7 +4,10 @@
   "provides": [
     {
       "name": "secret",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "in": "a vault entry"
+      }
     }
   ],
   "capabilities": [

modules/minio/module.json

@@ -4,7 +4,11 @@
   "provides": [
     {
       "name": "s3-bucket",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 20,
+        "in": "an S3 access key"
+      }
     }
   ],
   "requires": [

modules/mongodb/module.json

@@ -4,7 +4,11 @@
   "provides": [
     {
       "name": "mongodb-database",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 63,
+        "in": "a MongoDB database name"
+      }
     }
   ],
   "capabilities": [

modules/mosquitto/module.json

@@ -5,7 +5,10 @@
   "provides": [
     {
       "name": "mqtt-topic",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "in": "a Mosquitto client and topic prefix"
+      }
     }
   ],
   "capabilities": [

modules/mssql/module.json

@@ -4,7 +4,11 @@
   "provides": [
     {
       "name": "mssql-database",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 128,
+        "in": "a SQL Server login and database name"
+      }
     }
   ],
   "capabilities": [

modules/postgres/module.json

@@ -4,7 +4,11 @@
   "provides": [
     {
       "name": "postgres-database",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "max": 63,
+        "in": "a PostgreSQL role and database name"
+      }
     }
   ],
   "claims": [

modules/redis/module.json

@@ -4,7 +4,10 @@
   "provides": [
     {
       "name": "redis-cache",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": {
+        "in": "a Redis ACL user and key prefix"
+      }
     }
   ],
   "requires": [

modules/route-adapter/module.json

@@ -8,7 +8,8 @@
   "provides": [
     {
       "name": "route",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": false
     }
   ],
   "serves": {

modules/route-proxy/module.json

@@ -8,7 +8,8 @@
   "provides": [
     {
       "name": "route",
-      "scope": "mesh"
+      "scope": "mesh",
+      "identity": false
     }
   ],
   "serves": {