Struct MeshExpose 

pub struct MeshExpose {
    pub identity: MeshIdent,
    pub ports: Vec<MeshPort>,
    pub allow_from: Vec<MeshPeer>,
}

Mesh-internal port exposure and peer access control.

Fields

identity: MeshIdent

DNS-segment mesh identity for this workload. Must be unique in the cluster. Regex: ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$, length ≤ 63.

ports: Vec<MeshPort>

Ports this workload listens on, each optionally named (R844-F17). Other workloads reach it at <identity>:<port> on the mesh.

See MeshPort for the three accepted spellings. Read the numbers with MeshExpose::numbers and the names with MeshExpose::named_numbers — there is deliberately no way to read this as a plain Vec<u16>, because a name-only entry has no number yet and a conversion that dropped it would be exactly the silent loss named ports exist to prevent.

allow_from: Vec<MeshPeer>

Peers permitted to initiate connections to this workload on the mesh (W206 / R558-F3). Same-tenant tier rules and explicit cross-tenant grants share this one list. With no MeshPeer::Tier entries every same-tenant peer is admitted (the historical “empty = allow all” default); cross-tenant peers are always denied unless named by a MeshPeer::CrossTenant entry. See MeshExpose::admits_peer.

Implementations

impl MeshExpose

pub fn numbers(&self) -> Vec<u16>

Every port number this workload declares, in declaration order.

Name-only entries (ports = ["http"]) carry no number and are simply absent here — they do not have one until a supervisor allocates it. That is why this is a method rather than the field: a caller reading numbers has to be able to see that the list it got is shorter than the list the author wrote, and a Vec<u16> field could not say so.

pub fn declares_number(&self, port: u16) -> bool

Whether port appears as a declared number.

pub fn named_numbers(&self) -> BTreeMap<String, u16>

The name -> number map for every port the manifest declares both for. Name-only ports are absent (no number yet) and unnamed ports are absent (no name); kamaji::name_anonymous_ports is what fills the second gap once numbers are known.

pub fn names(&self) -> Vec<&str>

Every port name the manifest states, in declaration order.

pub fn anonymous_ports(numbers: impl IntoIterator<Item = u16>) -> Vec<MeshPort>

The pre-R844-F17 spelling as a value: a list of unnamed numbers. Kept because most call sites — and every test fixture — genuinely mean “these numbers, names irrelevant”.

pub fn admits_peer( &self, own_tenant: &TenantId, peer_tenant: &TenantId, peer_namespace: &NamespaceId, peer_name: &MeshIdent, peer_tier: &TierTag, ) -> bool

Whether a peer may initiate a mesh connection to a workload whose mesh exposure is self. own_tenant is the tenant of the workload being protected; the remaining arguments identify the connecting peer.

Deny-by-default across tenants (W206 / R558-F3):

• Same tenant (own_tenant == peer_tenant): admitted when the peer’s tier matches a MeshPeer::Tier rule, or when there are no Tier rules at all (historical “empty allow_from = allow all same-tenant”).
• Cross tenant: admitted only when an explicit MeshPeer::CrossTenant entry matches the peer’s (tenant, namespace, name).

Trait Implementations

impl Clone for MeshExpose

fn clone(&self) -> MeshExpose

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MeshExpose

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MeshExpose

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for MeshExpose

impl PartialEq for MeshExpose

fn eq(&self, other: &MeshExpose) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for MeshExpose

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for MeshExpose

impl TS for MeshExpose

type WithoutGenerics = MeshExpose

If this type does not have generic parameters, then WithoutGenerics should just be Self. If the type does have generic parameters, then all generic parameters must be replaced with a dummy type, e.g ts_rs::Dummy or ().
The only requirement for these dummy types is that EXPORT_TO must be None.

type OptionInnerType = MeshExpose

If the implementing type is std::option::Option<T>, then this associated type is set to T. All other implementations of TS should set this type to Self instead.

fn ident(cfg: &Config) -> String

Identifier of this type, excluding generic parameters.

fn docs() -> Option<String>

JSDoc comment to describe this type in TypeScript - when TS is derived, docs are automatically read from your doc comments or #[doc = ".."] attributes

fn name(cfg: &Config) -> String

Name of this type in TypeScript, including generic parameters

fn decl_concrete(cfg: &Config) -> String

Declaration of this type using the supplied generic arguments. The resulting TypeScript definition will not be generic. For that, see TS::decl(). If this type is not generic, then this function is equivalent to TS::decl().

fn decl(cfg: &Config) -> String

Declaration of this type, e.g. type User = { user_id: number, ... }. This function will panic if the type has no declaration.

fn inline(cfg: &Config) -> String

Formats this types definition in TypeScript, e.g { user_id: number }. This function will panic if the type cannot be inlined.

fn inline_flattened(cfg: &Config) -> String

Flatten a type declaration. This function will panic if the type cannot be flattened.

fn visit_generics(v: &mut impl TypeVisitor)

where Self: 'static,

Iterates over all type parameters of this type.

fn output_path() -> Option<PathBuf>

Returns the output path to where T should be exported, relative to the output directory. The returned path does not include any base directory.

fn visit_dependencies(v: &mut impl TypeVisitor)

where Self: 'static,

Iterates over all dependency of this type.

fn dependencies(cfg: &Config) -> Vec<Dependency>

where Self: 'static,

Resolves all dependencies of this type recursively.

fn export(cfg: &Config) -> Result<(), ExportError>

where Self: 'static,

Manually export this type to the filesystem. To export this type together with all of its dependencies, use TS::export_all.

fn export_all(cfg: &Config) -> Result<(), ExportError>

where Self: 'static,

Manually export this type to the filesystem, together with all of its dependencies. To export only this type, without its dependencies, use TS::export.

fn export_to_string(cfg: &Config) -> Result<String, ExportError>

where Self: 'static,

Manually generate bindings for this type, returning a String. This function does not format the output, even if the format feature is enabled.