Struct SecretRef 

pub struct SecretRef {
    pub name: String,
    pub description: Option<String>,
    pub backend: BackendKind,
    pub generation: Option<SecretGenPolicy>,
    pub rotation: RotationPolicy,
    pub labels: Vec<String>,
}

Fields

name: String

Logical identifier — used by humans + inventories. Slug-shape ([a-z0-9-]+). Validators reject anything else.

description: Option<String>

Optional human-readable description. Renders into the inventory

• plan, never into the secret value itself.

backend: BackendKind

Where the materialized secret lives.

generation: Option<SecretGenPolicy>

How the secret is born. None ⇒ cofre never generates this secret (operator owns its lifecycle); cofre may still verify existence via cofre verify.

rotation: RotationPolicy

When the secret should be rotated.

labels: Vec<String>

Free-form labels — used for filtering + grouping in cofre plan.

Implementations

impl SecretRef

pub fn materialization_targets(&self) -> Vec<String>

Returns the list of concrete backend paths this ref materializes. For a singleton policy: [self.backend.stable_id()]. For keypair policies: two suffixed paths.

impl SecretRef

pub fn password( name: impl Into<String>, backend: BackendKind, length: u8, ) -> Self

A vanilla random alphanumeric password, no length cap, manual rotation.

pub fn capped_password( name: impl Into<String>, backend: BackendKind, length: u8, max_length: u8, ) -> Self

A capped password — for protocols with hard length limits (e.g. macOS legacy VNC at 16 chars).

pub fn with_rotation(self, r: RotationPolicy) -> Self

Builder helper.

pub fn with_description(self, d: impl Into<String>) -> Self

Builder helper.

pub fn with_labels(self, labels: Vec<String>) -> Self

Builder helper.

Trait Implementations

impl Clone for SecretRef

fn clone(&self) -> SecretRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecretRef

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SecretRef

impl PartialEq for SecretRef

fn eq(&self, other: &SecretRef) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SecretRef

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretRef