Struct NodeSpec 

pub struct NodeSpec {
    pub id: String,
    pub attestor: AttestorMethod,
    pub cred_ttl: String,
    pub renew_before: String,
    pub roles: Vec<String>,
}

One node’s desired membership facts.

Fields

id: String

SPIFFE-style agent id this node signs and presents as. Validated with crate::validate::validate_agent_id_shape.

attestor: AttestorMethod

How the node attests its identity to the issuer.

cred_ttl: String

Credential lifetime, <int><unit> (e.g. 1h, 30m). Parsed with crate::config::parse_duration_string.

renew_before: String

Lead window before expiry within which the node renews, same form as cred_ttl. Must be strictly shorter than cred_ttl.

roles: Vec<String>

Optional free-form roles (e.g. writer, reader). Not interpreted here; carried for the reconciler / future RBAC.

Implementations

impl NodeSpec

pub fn cred_ttl_duration(&self) -> Option<Duration>

The credential lifetime as a chrono::Duration.

pub fn renew_before_duration(&self) -> Option<Duration>

The renewal lead window as a chrono::Duration.

Trait Implementations

impl Clone for NodeSpec

fn clone(&self) -> NodeSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NodeSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for NodeSpec

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for NodeSpec

impl PartialEq for NodeSpec

fn eq(&self, other: &NodeSpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for NodeSpec