Struct FileSecretKeyring 

pub struct FileSecretKeyring { /* private fields */ }

Owner-only, process-safe secret keyring for one deployment directory.

Implementations

impl FileSecretKeyring

pub fn open(root: impl Into<PathBuf>) -> SecretAccessResult<Self>

Opens or creates a V1 keyring rooted at root.

pub fn install_initial( &self, material: &SecuritySecretMaterial, ) -> SecretAccessResult<()>

Installs the first active key without replacing an existing keyring.

pub fn rotate( &self, next: &SecuritySecretMaterial, now_ms: u64, ) -> SecretAccessResult<Option<String>>

Atomically selects next before deprecating the previous active key.

pub fn revoke(&self, key_id: &str) -> SecretAccessResult<()>

Revokes a key and removes the active pointer when it selected that key.

pub fn resolve_active( &self, now_ms: u64, ) -> SecretAccessResult<SecuritySecretMaterial>

Resolves the active key for issuing new credentials.

pub fn resolve_for_validation( &self, key_id: &str, now_ms: u64, ) -> SecretAccessResult<SecuritySecretMaterial>

Resolves an active or deprecated key for validating existing credentials.

pub fn recover(&self, now_ms: u64) -> SecretAccessResult<String>

Repairs an absent active pointer when exactly one usable active key exists.

Trait Implementations

impl Clone for FileSecretKeyring

fn clone(&self) -> FileSecretKeyring

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FileSecretKeyring

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for FileSecretKeyring

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SecretResolver for FileSecretKeyring

fn resolve(&self, reference: &SecuritySecretRef) -> SecurityResult<SecretBytes>

Resolves one secret or returns a controlled availability error.