rbac-proxy::on-config-change
Internal: hot-reload rbac-proxy from the authoritative configuration — rebinds the public listener on a host/port change (last-good on failure), else swaps the per-connection snapshot.
- idstring
- okbooleanrequired
$worker
rbac-proxy
v1.0.3RBAC boundary proxy for the iii worker protocol — auth, gating, namespacing, middleware, and engine:: result filtering on its own port.
iiiverifiedinstall
$iii worker add rbac-proxy
- macOS: arm64 · x64
- Linux: arm64 · armv7 · x64
- Windows: arm64 · x64 · x86
repoiii-hq/workers
exact versions are immutable; binary and bundle artifacts are digest-pinned.
functions
3function
rbac-proxy::on-functions-available
Internal: invalidate the discovery catalog cache when the engine's available function set changes.
- eventstring
- worker_idstring
- okbooleanrequired
rbac-proxy::status
Health/identity probe: bound host/port, the (credential-redacted) upstream engine URL, whether an auth function is configured, and the live downstream connection count.
empty object
- active_connectionsinteger· uint32requiredmin 0
Live downstream connections.
- engine_urlstringrequired
Upstream engine URL, with any `user:pass@` credentials redacted.
- hoststringrequired
Bound public host.
- portinteger· uint16requiredmin 0
Bound public RBAC port.
- rbac_enabledbooleanrequired
Whether an `auth_function_id` is configured.
- versionstringrequired
Worker version (matches `Cargo.toml`).
triggers
0no triggers registered