Struct Owns 

#[non_exhaustive]
pub struct Owns {
    pub service: Vec<String>,
    pub arch_doc: Vec<String>,
    pub node: Vec<String>,
    pub extra: BTreeMap<String, Vec<String>>,
}

The owns claim — embedded ownership cheers bakes into the token at mint time. Per W159 §Layer 2, this is what lets kamaji check resource membership locally with no per-call cheers round-trip.

Open-ended: explicit fields for the resource kinds cheers currently writes (service, arch_doc, node) plus a flattened catch-all for future kinds so adding one doesn’t break the wire contract.

node (W268 §The binding: enrollment is an ownership row) is the machine-identity resource kind: a row principal owns node:<NodeId> records that a fleet machine (or paired end-user device) is enrolled to principal. resource_id is the mshr NodeId in the same hex encoding yubaba’s /identity route serves.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

service: Vec<String>

arch_doc: Vec<String>

node: Vec<String>

NodeIds (hex-encoded mshr identity) enrolled to this principal.

extra: BTreeMap<String, Vec<String>>

Forward-compatibility spill for resource kinds added after this lands.

Implementations

impl Owns

pub fn is_empty(&self) -> bool

Trait Implementations

impl Clone for Owns

fn clone(&self) -> Owns

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Owns

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Owns

fn default() -> Owns

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Owns

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Owns

impl PartialEq for Owns

fn eq(&self, other: &Owns) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Owns

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Owns