1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
{
"lexicon": 1,
"id": "com.publicdomainrelay.temp.cluster.createCluster",
"defs": {
"main": {
"type": "procedure",
"description": "Create the named cluster and leave it RUNNING, in one call. This is the same create-on-read path getKubeconfig walks - the account workspace, its home, the Cluster record and the mounted child - followed by the same desired-state flip controlPlaneUp performs, so a door that wants a cluster it can immediately reach does not have to read a kubeconfig it will throw away and then wake the control plane in a second round trip. Idempotent in both halves: a second call finds the tree it made and patches a desired state that is already true. Requires a service-auth JWT from the CALLER's own PDS; the account is the VERIFIED token's iss and never read from this input. The response is the phase as of this call, so a caller that sees Initializing knows the tree exists and the control plane is still coming up, and can poll controlPlaneUp - which is where the 429 and its Retry-After live, because that is the verb a client-go driven caller retries on.",
"input": {
"encoding": "application/json",
"schema": {
"type": "object",
"required": ["name"],
"properties": {
"name": {
"type": "string",
"description": "The cluster label, unique within the calling account. RFC-1123 label, <=63 characters."
}
}
}
},
"output": {
"encoding": "application/json",
"schema": {
"type": "object",
"required": ["phase"],
"properties": {
"phase": {
"type": "string",
"knownValues": ["Unavailable", "Initializing", "Ready", "Draining"],
"description": "The cluster's phase as of this call, after the desired state was set to running. Initializing means the control plane is still coming up; the cluster exists either way."
}
}
}
},
"errors": [
{ "name": "InvalidRequest", "description": "Name absent, or not a legal RFC-1123 label within 63 characters." },
{ "name": "Unauthorized", "description": "Missing or invalid service-auth token. Also returned when the token's aud is not this service or its lxm is not this method." },
{ "name": "IdentityRevoked", "description": "The caller's identity carries a deny record for this account. The deny is written before any deletion, so it refuses while the revocation is still propagating - and it refuses BEFORE anything is created, which is what keeps create-on-read from re-arming a revoked account." },
{ "name": "ClusterNotFound", "description": "The tree was created and the Cluster was not readable immediately after. Deliberately indistinguishable from a name that belongs to another account." },
{ "name": "ClusterDraining", "description": "The cluster is being torn down and its desired state is frozen. Not retryable: a Draining cluster cannot be un-drained, by design - a cancellable teardown gate is a gate an operator clears to make the symptom go away." },
{ "name": "ClusterInitializing", "description": "The cluster is still coming up. RETRYABLE: carries Retry-After, and client-go retries on it without further instruction." }
]
}
}
}
