Struct ServiceAccountConfig 

pub struct ServiceAccountConfig {
    pub secret_env: String,
    pub roles: Vec<String>,
    pub scopes: Vec<String>,
    pub tenant: Option<String>,
    pub static_enriched: HashMap<String, Value>,
}

A machine service account (security.service_accounts.<name>).

The bearer secret is never inlined — secret_env names the environment variable that holds it.

Fields

secret_env: String

Name of the environment variable holding the plaintext bearer secret.

roles: Vec<String>

The run_as ceiling — roles granted. Empty ⇒ no role authority.

scopes: Vec<String>

The run_as ceiling — scopes granted. Empty ⇒ no scope authority.

tenant: Option<String>

Optional tenant pin. Omitted ⇒ global / NULL tenant.

static_enriched: HashMap<String, Value>

Optional server-injected fraiseql.enriched.* fields, the only sanctioned deviation from uniform enrichment (ADR-0016 decision 6 / ADR-0018 decision 5) — for a daemon with no natural actor row. Server-injected, never token-asserted.

Trait Implementations

impl Clone for ServiceAccountConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceAccountConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceAccountConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ServiceAccountConfig

impl PartialEq for ServiceAccountConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ServiceAccountConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ServiceAccountConfig