alien_core/deployment/
domain.rs

1//! Domain, certificate, and DNS metadata for auto-managed public resources.
2
3use serde::{Deserialize, Serialize};
4use std::collections::HashMap;
5
6/// Certificate status in the certificate lifecycle
7#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
8#[cfg_attr(feature = "openapi", derive(utoipa::ToSchema))]
9#[serde(rename_all = "kebab-case")]
10pub enum CertificateStatus {
11    Pending,
12    Issued,
13    Renewing,
14    RenewalFailed,
15    Failed,
16    Deleting,
17}
18
19/// DNS record status in the DNS lifecycle
20#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
21#[cfg_attr(feature = "openapi", derive(utoipa::ToSchema))]
22#[serde(rename_all = "lowercase")]
23pub enum DnsRecordStatus {
24    Pending,
25    Active,
26    Updating,
27    Deleting,
28    Failed,
29}
30
31/// Certificate and DNS metadata for a public resource.
32///
33/// Includes decrypted certificate data for issued certificates.
34/// Private keys are deployment-scoped secrets (like environment variables).
35#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
36#[cfg_attr(feature = "openapi", derive(utoipa::ToSchema))]
37#[serde(rename_all = "camelCase")]
38pub struct ResourceDomainInfo {
39    /// Fully qualified domain name.
40    pub fqdn: String,
41    /// Certificate ID (for tracking/logging).
42    pub certificate_id: String,
43    /// Current certificate status
44    pub certificate_status: CertificateStatus,
45    /// Current DNS record status
46    pub dns_status: DnsRecordStatus,
47    /// Last DNS error message. Present when DNS previously failed, even if status
48    /// was reset to pending for retry. Used to surface actionable error context
49    /// in WaitingForDns failure messages.
50    #[serde(skip_serializing_if = "Option::is_none")]
51    pub dns_error: Option<String>,
52    /// Full PEM certificate chain (only present if status is "issued").
53    #[serde(skip_serializing_if = "Option::is_none")]
54    pub certificate_chain: Option<String>,
55    /// Decrypted private key (only present if status is "issued").
56    #[serde(skip_serializing_if = "Option::is_none")]
57    pub private_key: Option<String>,
58    /// ISO 8601 timestamp when certificate was issued (for renewal detection).
59    #[serde(skip_serializing_if = "Option::is_none")]
60    pub issued_at: Option<String>,
61}
62
63/// Domain metadata for auto-managed public resources (no private keys).
64#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
65#[cfg_attr(feature = "openapi", derive(utoipa::ToSchema))]
66#[serde(rename_all = "camelCase")]
67pub struct DomainMetadata {
68    /// Base domain for auto-generated domains (e.g., "vpc.direct").
69    pub base_domain: String,
70    /// Deployment public subdomain (e.g., "k8f2j3").
71    pub public_subdomain: String,
72    /// Hosted zone ID for DNS records.
73    pub hosted_zone_id: String,
74    /// Metadata per resource ID.
75    pub resources: HashMap<String, ResourceDomainInfo>,
76}
alien_core/deployment/domain.rs

alien_core/deployment/
domain.rs
