Struct KeyEntryCfg 

pub struct KeyEntryCfg {
    pub virtual_key: String,
    pub provider_key: String,
    pub allowed_models: Vec<String>,
    pub label: String,
}

One vault entry ([[llm.keys]]): a client-facing virtual key mapped to a real provider key and an optional model egress allowlist. The provider key is injected into the upstream Authorization and is never sent back to the client; the client only ever holds the virtual key.

Fields

virtual_key: String

The secret the client presents (Authorization: Bearer <virtual_key>). Required.

provider_key: String

The real upstream provider secret injected on the way out. Required. Prefer sourcing this from a pushed control-plane policy / secret store rather than committing it.

allowed_models: Vec<String>

Allowed model names for this key (egress allowlist). Empty = unrestricted; non-empty = only these models may be requested (others get 403).

label: String

Optional label for logs/metrics/audit (never the secret). Defaults to a positional id.

Trait Implementations

impl Clone for KeyEntryCfg

fn clone(&self) -> KeyEntryCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyEntryCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyEntryCfg

fn default() -> KeyEntryCfg

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for KeyEntryCfg

where KeyEntryCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.