Huawei DeleteList

OBS bucket name

Name of the OBS bucket to operate on. The bucket must already exist.

Access Key (AK) used to authenticate with Huawei Cloud

Huawei Cloud access key used together with secretAccessKey to sign API requests. Required for AK/SK-based authentication; not required when providing a pre-obtained securityToken. Sensitive — always provide via {{ secret('NAME') }}.

Request signing algorithm

Controls how OBS client signs each request:

• OBS — native Huawei OBS signing (default; use for real OBS endpoints).
• V2 — S3 v2 HMAC signing; required for MinIO and other S3-compatible endpoints.
• V4 — S3 v4 signing; not compatible with MinIO via the OBS SDK due to a date-format mismatch. Do not use V4 with S3-compatible endpoints.

A delimiter that groups keys

Keys containing the delimiter after the prefix are grouped under a common prefix in the response. Useful for emulating a folder hierarchy (e.g. delimiter: /).

Huawei Cloud Account Domain ID

Identifies the Huawei Cloud account (domain). Required when authenticating against global services such as IAM, or when requesting a domain-scoped IAM token.

Override for the OBS endpoint URL

Full URL of the OBS endpoint to connect to instead of the region-derived default (https://obs.<region>.myhuaweicloud.com). Required when using S3-compatible endpoints such as MinIO (e.g. http://localhost: 9000). Trailing slashes are stripped automatically.

Domain suffix for the region-derived OBS endpoint

Suffix appended to build https://obs.<region>.<endpointSuffix> when no endpointOverride is set. Defaults to myhuaweicloud.com. Set to myhuaweicloud.eu for the European sovereign region (e.g. eu-west-101). Ignored when endpointOverride is set.

Fail the task when no objects match the filter

When true, the task throws an exception if the listing returns zero matching objects. Useful to catch misconfigured filters in production workflows.

Fail the task when OBS reports any per-object delete error

When true (the default), the task throws after attempting every batch if OBS returned one or more error results, so a partial failure cannot be silently swallowed. Set to false for best-effort deletion: failures are logged as warnings and counted in the errors output instead of failing the task.

Marker to start listing from (exclusive)

Returned objects will appear after this key in lexicographic order. Use the nextMarker from a previous response to paginate.

Maximum number of keys to return per page (default 1000)

The SDK may return fewer keys than requested if the page boundary falls mid-prefix. ObsService.list iterates all pages automatically so the total result set is not bounded by this value — it only affects the page size sent to OBS.

Use path-style access for object keys

When true, the bucket name is placed in the URL path (http://host/bucket/key) instead of the virtual-hosted style (http://bucket.host/key). Required for MinIO and most S3-compatible endpoints. Default is false (virtual-hosted style, as used by real OBS).

Reference (ref) of the pluginDefaults to apply to this task.

Limits the response to keys that begin with the specified prefix

Huawei Cloud Project ID

Identifies the region-scoped project against which most regional services authenticate. Mutually exclusive with domainId for global services such as IAM.

Client-side regular expression applied to the full object key after server-side listing

Only objects whose key matches this pattern (evaluated with String.matches) are included in the output. Applied after prefix/delimiter filtering done by OBS, so the regexp sees the complete key including any prefix.

Huawei Cloud region

Region identifier such as eu-west-101, ap-southeast-1, or cn-north-4.

Secret Key (SK) used to authenticate with Huawei Cloud

Huawei Cloud secret key paired with accessKeyId. Required for AK/SK-based authentication. Sensitive — always provide via {{ secret('NAME') }}.

Pre-obtained Huawei Cloud IAM token used as bearer credential for downstream API calls

When set, downstream Huawei tasks send this value in the X-Auth-Token header instead of signing requests with AK/SK. Sensitive.

Inline IAM credential exchange

When set, the connection layer calls the Huawei IAM STS API once per task execution and uses the returned temporary AK/SK + security token instead of the static accessKeyId and secretAccessKey properties.

Configure once via pluginDefaults to apply transparently to every task in a namespace without per-task credential wiring:

pluginDefaults: 
  - type: io.kestra.plugin.huawei.obs
    values: 
      region: eu-west-101
      temporaryCredentials: 
        authMethod: PASSWORD
        username: my-iam-user
        password: "{{ secret('HUAWEI_IAM_PASSWORD') }}"
        domainName: my-account-domain
        durationSeconds: 3600

**Long-running tasks: ** the exchange runs once at execution start. For RealtimeTrigger or long-running Consume tasks that outlive durationSeconds, credentials will expire mid-run. Use long-lived AK/SK properties or refresh externally in that case.