greentic-secrets-runner 0.5.0

Host bridge for environment-backed secrets with tenant policy enforcement.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

/// Context describing the tenant that issued a secrets request.
#[derive(Clone, Debug, PartialEq, Eq)]
pub struct TenantCtx {
    env: String,
    tenant: String,
    team: Option<String>,
    user: Option<String>,
}

impl TenantCtx {
    pub fn new<E, T>(env: E, tenant: T) -> Self
    where
        E: Into<String>,
        T: Into<String>,
    {
        Self {
            env: env.into(),
            tenant: tenant.into(),
            team: None,
            user: None,
        }
    }

    pub fn with_team<S: Into<String>>(mut self, team: Option<S>) -> Self {
        self.team = team.map(Into::into);
        self
    }

    pub fn with_user<S: Into<String>>(mut self, user: Option<S>) -> Self {
        self.user = user.map(Into::into);
        self
    }

    pub fn environment(&self) -> &str {
        &self.env
    }

    pub fn tenant(&self) -> &str {
        &self.tenant
    }

    pub fn team(&self) -> Option<&str> {
        self.team.as_deref()
    }

    pub fn user(&self) -> Option<&str> {
        self.user.as_deref()
    }

    pub fn kind(&self) -> ScopeKind<'_> {
        match (self.team.as_deref(), self.user.as_deref()) {
            (Some(team), Some(user)) => ScopeKind::User {
                env: &self.env,
                tenant: &self.tenant,
                team,
                user,
            },
            (Some(team), None) => ScopeKind::Team {
                env: &self.env,
                tenant: &self.tenant,
                team,
            },
            (None, _) => ScopeKind::Tenant {
                env: &self.env,
                tenant: &self.tenant,
            },
        }
    }
}

#[derive(Clone, Copy, Debug)]
pub enum ScopeKind<'a> {
    Global {
        env: &'a str,
    },
    Tenant {
        env: &'a str,
        tenant: &'a str,
    },
    Team {
        env: &'a str,
        tenant: &'a str,
        team: &'a str,
    },
    User {
        env: &'a str,
        tenant: &'a str,
        team: &'a str,
        user: &'a str,
    },
}