Struct BlobBackendConfig 

pub struct BlobBackendConfig {
    pub blobs: Option<BlobBackend>,
    pub s3_bucket: Option<String>,
    pub s3_endpoint: Option<String>,
    pub s3_region: Option<String>,
    pub s3_path_style: bool,
    pub s3_credential: Option<S3CredentialConfig>,
}

[serve.blob_backends.<project>] — a per-project blob object-store backend (PLAN-per-project-blob-backend). Same backend-descriptor shape as the [serve] primary’s S3 fields plus its OWN sealed base S3 credential (#505 path), so project ACME can point its wasi:blobstore at its own bucket/endpoint/account. Key-prefix confinement (container_access) still runs on top — a separate bucket adds PHYSICAL isolation, it does not replace the confinement (invariant 2).

Operator-configured; the backend is bound to the serve’s host-resolved project at serve wiring, never to guest input (invariant 1). The sealed credential is resolved under THIS project’s sealed [secrets] store at wiring; a declared backend whose credential/bucket cannot be built REFUSES the serve (fail-closed — never a silent fallback to the global or another project’s backend, invariant 4). First cut is S3 (and fs, which is degenerate — it shares the node blob dir, so only a cloud bucket gives physical isolation); a per-project gcs/azure needs its own descriptor fields and is a follow-up (declaring one fails closed at build — the required bucket/account is absent).

Fields

blobs: Option<BlobBackend>

The backend kind (fs/s3/gcs/azure). Required (mirrors the SQL binding’s required kind): a per-project backend with no explicit kind is a startup error, so a forgotten blobs = "s3" can’t silently build an fs backend at the shared node dir that would NOT isolate the project’s blobs. Resolved at serve wiring (fail-closed when absent).

s3_bucket: Option<String>

S3 bucket (blobs = s3) — the project’s OWN bucket.

s3_endpoint: Option<String>

S3 endpoint URL (a MinIO/R2/Tigris endpoint) for this project’s backend.

s3_region: Option<String>

S3 region for this project’s backend.

s3_path_style: bool

Use S3 path-style addressing (MinIO) for this project’s backend.

s3_credential: Option<S3CredentialConfig>

This project’s OWN sealed base S3 credential (#505) — resolved through the SAME resolve_s3_credential path as the node primary, but keyed under THIS project’s sealed store (boatramp:<name> resolves against project’s secrets, not the node default). The access_key_id is a public identifier; secret_access_key is a boatramp:/env: reference (never the raw secret in config, invariant 3). Absent ⇒ the ambient AWS env chain.

Trait Implementations

impl Clone for BlobBackendConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BlobBackendConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BlobBackendConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for BlobBackendConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for BlobBackendConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.