rpc

const (
	RestoreModule        = "restore"
	MethodRestoreStatus  = "status"
	MethodRestorePreview = "preview"
)

The restore function's module and methods. It is the same zip as the backup module's, deployed a second time (docs/decisions/0072), and answers two reads: how the restore stands, and what restoring a backup would do. Nothing here starts or resumes a restore: that is an invocation of the function itself, which only an administrator or the break-glass role may make (internal/lambdaapp), with their own credentials and never through the issuer, so that it works when the issuer is broken.

const (
	Module       = "backup"
	MethodStatus = "status"
	MethodList   = "list"
	MethodRun    = "run"
)

Module is the name of the module and the methods it answers.

const (
	CallerConsole    = "console"
	CallerAdmin      = "admin"
	CallerBreakglass = "breakglass"
)

Caller classes (the alias a call arrives through, `live-<class>`): the console shows the status and the list, and starts a backup for a person its policy lets (`backup.runGroups`), naming that person in RunRequest.By; an administrator or the break-glass role start one with their own credentials. No caller class starts or resumes a restore through a module call.

const DefaultTokenFile = "/var/run/secrets/sluis/backup/token"

DefaultTokenFile is where the pod's projected token for the backup module is mounted when the document does not say.

const PreviewOutcome = "preview"

PreviewOutcome is the outcome of a preview that produced a report.