Enum AzureCredentials 

pub enum AzureCredentials {
    ServicePrincipal {
        client_id: String,
        client_secret: String,
    },
    AccessToken {
        token: String,
    },
    ScopedAccessTokens {
        tokens: HashMap<String, String>,
    },
    VmManagedIdentity {
        client_id: String,
        identity_endpoint: Option<String>,
    },
    WorkloadIdentity {
        client_id: String,
        tenant_id: String,
        federated_token_file: String,
        authority_host: String,
    },
    ManagedIdentity {
        client_id: String,
        identity_endpoint: String,
        identity_header: String,
    },
}

Represents Azure authentication credentials

Variants

ServicePrincipal

Service principal with client secret

Fields

client_id: String

The client ID (application ID)

client_secret: String

The client secret

AccessToken

Direct access token

Fields

token: String

The bearer token to use for authentication

ScopedAccessTokens

Short-lived bearer tokens keyed by their exact Azure OAuth scope.

This is the only Azure credential form returned by the credential mint endpoint. It contains no refreshable source credential and must not be used for a scope that is absent from the map.

Fields

tokens: HashMap<String, String>

Exact scope-to-token map. Minted configs include only the Azure management, storage, Key Vault, and Service Bus scopes used by Alien bindings.

VmManagedIdentity

Azure VM IMDS managed identity.

Fields

client_id: String

The client ID of the user-assigned managed identity

identity_endpoint: Option<String>

Optional IMDS endpoint override

WorkloadIdentity

Azure AD Workload Identity (federated identity)

Fields

client_id: String

The client ID of the managed identity or application

tenant_id: String

The tenant ID for authentication

federated_token_file: String

Path to the federated token file

authority_host: String

The authority host URL

ManagedIdentity

Azure Managed Identity (Container Apps / App Service) Uses IDENTITY_ENDPOINT + IDENTITY_HEADER injected by the platform

Fields

client_id: String

The client ID of the user-assigned managed identity

identity_endpoint: String

The identity endpoint URL (from IDENTITY_ENDPOINT env var)

identity_header: String

The identity header secret (from IDENTITY_HEADER env var)

Trait Implementations

impl Clone for AzureCredentials

fn clone(&self) -> AzureCredentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AzureCredentials

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AzureCredentials

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AzureCredentials

impl PartialEq for AzureCredentials

fn eq(&self, other: &AzureCredentials) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AzureCredentials

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AzureCredentials