Huawei Query

GeminiDB instance connection address

The DynamoDB-compatible API endpoint of the GeminiDB for NoSQL instance, e.g. https://192.168.0.10: 8635. Find it on the instance's "Connection Management" page in the Huawei Cloud console. Unlike other Huawei Cloud services, this address is per-instance and cannot be derived from region.

region is used only for SigV4 request signing and does not affect routing — GeminiDB routes solely by this endpoint property; leave region at its default unless signing requires a specific value.

Expression attribute values

Map of : placeholder values referenced by keyConditionExpression and, if set, filterExpression. Numeric values are stored as DynamoDB string (S) attributes, not numbers (N) — quote or compare them as strings.

Key condition expression

Expression on the table's partition key (and sort key, if defined), e.g. id = : id.

Table name

Target GeminiDB (DynamoDB-compatible) table for the operation.

Access Key (AK) used to authenticate with Huawei Cloud

Huawei Cloud access key used together with secretAccessKey to sign API requests. Required for AK/SK-based authentication; not required when providing a pre-obtained securityToken. Sensitive — always provide via {{ secret('NAME') }}.

Huawei Cloud Account Domain ID

Identifies the Huawei Cloud account (domain). Required when authenticating against global services such as IAM, or when requesting a domain-scoped IAM token.

Fetch strategy

STORE (default) writes matching rows to internal storage; FETCH loads all rows into memory; FETCH_ONE returns only the first row; NONE runs the query without fetching results.

Filter expression

Additional server-side filter evaluated after the key condition; its placeholders must also be present in expressionAttributeValues.

Maximum number of items to evaluate

Caps the number of items read in the single response page (1-1000). Defaults to 100. Does not paginate across LastEvaluatedKey — see the task description.

Reference (ref) of the pluginDefaults to apply to this task.

Huawei Cloud Project ID

Identifies the region-scoped project against which most regional services authenticate. Mutually exclusive with domainId for global services such as IAM.

Huawei Cloud region

Region identifier such as eu-west-101, ap-southeast-1, or cn-north-4.

Secret Key (SK) used to authenticate with Huawei Cloud

Huawei Cloud secret key paired with accessKeyId. Required for AK/SK-based authentication. Sensitive — always provide via {{ secret('NAME') }}.

Pre-obtained Huawei Cloud IAM token used as bearer credential for downstream API calls

When set, downstream Huawei tasks send this value in the X-Auth-Token header instead of signing requests with AK/SK. Sensitive.

Inline IAM credential exchange

When set, the connection layer calls the Huawei IAM STS API once per task execution and uses the returned temporary AK/SK + security token instead of the static accessKeyId and secretAccessKey properties.

Configure once via pluginDefaults to apply transparently to every task in a namespace without per-task credential wiring:

pluginDefaults: 
  - type: io.kestra.plugin.huawei.obs
    values: 
      region: eu-west-101
      temporaryCredentials: 
        authMethod: PASSWORD
        username: my-iam-user
        password: "{{ secret('HUAWEI_IAM_PASSWORD') }}"
        domainName: my-account-domain
        durationSeconds: 3600

**Long-running tasks: ** the exchange runs once at execution start. For RealtimeTrigger or long-running Consume tasks that outlive durationSeconds, credentials will expire mid-run. Use long-lived AK/SK properties or refresh externally in that case.