Enum SecretDelivery 

pub enum SecretDelivery {
    VaultPointer,
    NativeProjection,
}

The mechanism by which Secret-typed env vars are delivered to a workload.

Variants

VaultPointer

Inject the ALIEN_SECRETS vault-load pointer (the secret keys plus a values hash). At startup the workload loads the actual values from the “secrets” vault through the Worker runtime wrapper. Worker-only: runtime-less workloads have nothing that could consume the pointer.

NativeProjection

The hosting layer delivers each applicable secret natively before the process starts — Kubernetes valueFrom.secretKeyRef, the local supervisor’s resolved plain env, or the cloud container host’s native secret projection — so no vault-load pointer is ever injected.

Implementations

impl SecretDelivery

pub fn resolve(platform: Platform, kind: ComputeKind) -> Self

Resolves how a compute kind’s secrets are delivered.

• Kubernetes and Machines hosting layers project Worker secrets before process start. Other Worker hosts use the runtime vault pointer.
• Containers and Daemons are runtime-less on every platform: nothing in the workload can load a vault pointer, so the hosting layer projects secrets natively before process start (Kubernetes secretKeyRef, local supervisor plain env, or native cloud container secret injection) and the pointer must never be minted for them.

The match is exhaustive over both enums so a new platform or compute kind forces an explicit delivery choice here.

pub fn is_native_projection(self) -> bool

Whether the platform projects this kind’s secrets natively (no pointer).

Trait Implementations

impl Clone for SecretDelivery

fn clone(&self) -> SecretDelivery

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SecretDelivery

impl Debug for SecretDelivery

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SecretDelivery

impl PartialEq for SecretDelivery

fn eq(&self, other: &SecretDelivery) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SecretDelivery