Struct WorkloadId 

pub struct WorkloadId(/* private fields */);

SPIFFE-ID-shaped workload identifier.

Wire format: spiffe://<trust-domain>/<path> where the trust domain is the URI authority and the path is a slash-separated sequence of non-empty segments. Validation follows the SPIFFE-ID spec:

• scheme must be exactly spiffe
• no userinfo, no port, no query, no fragment
• trust domain matches [a-z0-9][a-z0-9.-]*, lowercase, max 255 chars
• each path segment is non-empty and matches [A-Za-z0-9._~-]+
• full URI length ≤ 2048 characters

Constructors:

• WorkloadId::build builds from the three platform components used by CliResolver (trust domain, service name, tenant slug).
• WorkloadId::parse validates an arbitrary string. Used when loading from external sources (JWT-SVID sub claim, mTLS SAN, etc.).

Implementations

impl WorkloadId

pub const MAX_LEN: usize = 2048

Maximum URI length per the SPIFFE-ID spec.

pub fn build( trust_domain: &TrustDomain, service: &str, tenant_slug: &str, ) -> Result<WorkloadId, IdentityError>

Build a SPIFFE-ID URI from the platform identity components.

Format: spiffe://<trust_domain>/<service>/<tenant_slug>. Validates service and tenant_slug as SPIFFE path segments; the trust domain is already validated by TrustDomain::new.

pub fn parse(raw: &str) -> Result<WorkloadId, IdentityError>

Validate and adopt an arbitrary SPIFFE-ID string. Rejects any URI that does not conform to the SPIFFE-ID spec.

pub fn as_str(&self) -> &str

Borrow the underlying URI as a string slice.

Trait Implementations

impl Clone for WorkloadId

fn clone(&self) -> WorkloadId

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WorkloadId

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WorkloadId

fn deserialize<__D>( __deserializer: __D, ) -> Result<WorkloadId, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for WorkloadId

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hash for WorkloadId

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for WorkloadId

fn eq(&self, other: &WorkloadId) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for WorkloadId

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for WorkloadId

impl StructuralPartialEq for WorkloadId