Struct AuthorizationPolicy 

pub struct AuthorizationPolicy {
    pub subjects: Vec<String>,
    pub allowed_pools: Vec<String>,
    pub allowed_policy_packs: Vec<String>,
    pub max_cells_per_hour: Option<u32>,
}

T12: authorization policy gate.

subjects is the allowlist of operator identities (currently a tenant id in 1.0). allowed_pools and allowed_policy_packs narrow the surface further — empty means “no restriction on this axis”. max_cells_per_hour is an optional rolling-hour rate cap.

All sets are matched by exact equality; no glob/regex semantics. Identity strings are opaque tokens — oidc:github:org/team, k8s:serviceaccount:ns/name, or tenant:<id> are all valid.

Fields

subjects: Vec<String>

Operator identities authorized by this policy. The supervisor compares spec.correlation.tenantId against this list at admission. An empty list rejects every spec — there is no implicit allow-all.

allowed_pools: Vec<String>

Pool IDs the subject may target via spec.placement.poolId. Empty means no pool restriction (all pools allowed).

allowed_policy_packs: Vec<String>

Policy pack IDs the subject may reference via spec.policy.packId. Empty means no pack restriction (all packs allowed).

max_cells_per_hour: Option<u32>

Optional rolling-hour rate cap. When unset (None) there is no rate limit; when set (Some(n)), at most n admitted cells per hour per subject. The supervisor maintains the per-subject counter in-memory.

Trait Implementations

impl Clone for AuthorizationPolicy

fn clone(&self) -> AuthorizationPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthorizationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthorizationPolicy

fn default() -> AuthorizationPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthorizationPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthorizationPolicy

fn eq(&self, other: &AuthorizationPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthorizationPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuthorizationPolicy

impl StructuralPartialEq for AuthorizationPolicy