Enum CredentialGraphError 

pub enum CredentialGraphError {
    BadCredentialPath {
        source_name: String,
        path: String,
    },
    UnroutableCredential {
        source_name: String,
        path: String,
        source_error: ResolveError,
    },
    Cycle {
        chain: Vec<String>,
    },
    Deep {
        chain: Vec<String>,
    },
}

Failure modes for validate_source_credentials.

Variants

BadCredentialPath

A source declared a credential at path, but path is not under the reserved SOURCE_CREDENTIALS_PREFIX. Per ADR-021 §5: source credentials must live under __sources/.

Fields

source_name: String

The source whose requires_credential() returned this path.

path: String

The offending path.

UnroutableCredential

The credential path failed to resolve through the router. Usually means the user did not configure routing for __sources/<source>/... and there is no [default].

Fields

source_name: String

The source whose credential is unroutable.

path: String

The credential path.

source_error: ResolveError

Underlying resolver error.

Cycle

E_SOURCE_CREDENTIAL_CYCLE — the credential graph contains a cycle. Reading any secret would loop forever.

Fields

chain: Vec<String>

Source names visited, in order, ending with the source that closed the cycle.

Deep

E_SOURCE_CREDENTIAL_DEEP — the credential chain is longer than one hop. Per ADR-021 §4, only one level of indirection is allowed (Vault tokens live in keychain, not in another Vault).

Fields

chain: Vec<String>

Source names visited, in order. The first is the source whose credential is mis-routed; the rest are downstream dependencies.

Trait Implementations

impl Clone for CredentialGraphError

fn clone(&self) -> CredentialGraphError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialGraphError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CredentialGraphError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CredentialGraphError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for CredentialGraphError

fn eq(&self, other: &CredentialGraphError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CredentialGraphError

impl StructuralPartialEq for CredentialGraphError