Struct CredentialsRotatePayload 

pub struct CredentialsRotatePayload {
    pub environment_id: String,
    pub admin_profile: String,
    pub admin_material_path: Option<PathBuf>,
    pub admin_material_inline: Option<String>,
    pub if_needed: bool,
}

Fields

environment_id: String

admin_profile: String

Local profile / kubeconfig context for the one-time admin connection that re-mints the bound credential. Rotation always re-mints AS THE ADMIN (the bound identity itself cannot create its own tokens by design). Never written to the env’s storage.

admin_material_path: Option<PathBuf>

Path to a file holding the admin credential material (loaded into a ZeroizedAdmin and zeroized before this call returns). Mutually exclusive with admin_material_inline.

admin_material_inline: Option<String>

Inline admin credential material — never persisted. Mutually exclusive with admin_material_path.

if_needed: bool

When true, rotate ONLY if the current bound token is at/past 80% of its lifetime (kubelet’s projected-token refresh point). A no-op otherwise — the idempotent form a scheduler calls on a cadence shorter than the token lifetime. When false (default), rotate unconditionally.

Trait Implementations

impl Clone for CredentialsRotatePayload

fn clone(&self) -> CredentialsRotatePayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialsRotatePayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CredentialsRotatePayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CredentialsRotatePayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.