Struct LazyEnvBindingsProvider 

pub struct LazyEnvBindingsProvider { /* private fields */ }

Environment-backed provider that defers cloud client configuration until the first binding is actually used.

Runtime-less Containers and Daemons resolve bindings in the application process. They should still start when no startup secret needs loading, even if cloud metadata is temporarily unavailable.

On first binding use it resolves credentials in a fixed order (see LazyEnvBindingsProvider::select): native/projected ClientConfig::from_env first, then minting-backed resolution if an external/bootstrap caller explicitly supplied the mint environment contract, otherwise the original from_env error is surfaced unchanged.

Implementations

impl LazyEnvBindingsProvider

pub async fn provider(&self) -> Result<Arc<BindingsProvider>>

Resolve (once) which credential strategy to use, then return a provider backed by fresh-enough credentials.

The strategy selection happens exactly once (via OnceCell); on the minting path each call additionally checks credential freshness and re-mints on access if stale.

Trait Implementations

impl BindingsProviderApi for LazyEnvBindingsProvider

fn load_storage<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Storage>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Storage implementation.

fn load_build<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Build>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Build implementation.

fn load_artifact_registry<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn ArtifactRegistry>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds an ArtifactRegistry implementation.

fn load_vault<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Vault>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Vault implementation.

fn load_kv<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Kv>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a KV implementation.

fn load_postgres<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Postgres>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Postgres implementation.

fn load_queue<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Queue>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Queue implementation.

fn load_worker<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Worker>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Worker implementation.

fn load_container<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Container>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a Container implementation.

fn load_service_account<'life0, 'life1, 'async_trait>( &'life0 self, binding_name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn ServiceAccount>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Given a binding identifier, builds a ServiceAccount implementation.

fn resolve_runtime_only_binding_env<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _binding_name: &'life1 str, _resource_type: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<Option<HashMap<String, String>>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Runtime-only binding env vars (a local Postgres connection with its password, a local BYO-key AI binding) for the given resource — re-resolved on every (re)start so the secret reaches the worker process but is never written to persisted worker metadata. The resource type routes resolution to the right local source. Default None: cloud providers carry a secret locator (not a raw secret) and use the normal persisted path.

impl Debug for LazyEnvBindingsProvider

Manual Debug: env may hold live credential material (cloud secret keys, the deployment token). Print only the env var names, never their values.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.