Skip to main content

GrantSource

The thing a grant is sharing — exactly one of an OCI repo or a resource. The caller authoring the grant must have repo:update (for repo grants) or resource:update (for resource grants) on this source.

union GrantSource = OciRepo | Resource

Possible types​

GrantSource.OciRepo object​

An OCI repository in your organization's bundle catalog.

An OCI repository is the container for all published versions of a single infrastructure-as-code package. It is analogous to a Docker image repository but for Massdriver bundles.

Each repository has a unique name (e.g., aws-aurora-postgres) and contains:

  • Tags -- the individual published versions (1.0.0, 1.1.0, 1.2.3, etc.)
  • Release channels -- auto-resolving version constraints (latest, ~1, ~1.2) that always point to the newest matching tag

To fetch a specific bundle version from a repository, use the bundle query with a BundleId like aws-aurora-postgres@1.2.3 or aws-aurora-postgres@~1.

GrantSource.Resource object​

A cloud credential, database connection string, network configuration, or other infrastructure output produced by (or imported into) Massdriver.

Resources are the connective tissue between instances. When an instance is deployed, it produces resources as outputs. Other instances can consume those resources as inputs, creating a dependency graph of your infrastructure.

Resources have two origins:

  • Imported — created directly through the API (e.g., uploading existing AWS credentials). You have full CRUD control over these resources.
  • Provisioned — created automatically when an instance is deployed. These are read-only and managed entirely by the owning instance's lifecycle.

Member Of​

Grant object