Struct VaultConfig 

pub struct VaultConfig {
    pub vault_addr: String,
    pub token: String,
    pub mount_path: String,
    pub namespace: Option<String>,
    pub verify_tls: bool,
    pub timeout: u64,
}

Configuration for Vault KMS provider.

Security Considerations

Token Handling:

• The Vault token is stored in memory for the provider’s lifetime
• For production deployments, consider:
  1. Using short-lived tokens with automatic renewal
  2. Vault Agent with auto-auth for token management
  3. AppRole authentication with response wrapping
  4. Kubernetes auth method in K8s environments

Fields

vault_addr: String

Vault server address (e.g., https://vault.example.com)

token: String

Vault authentication token

mount_path: String

Transit mount path (default: “transit”)

namespace: Option<String>

Optional Vault namespace

verify_tls: bool

Verify TLS certificates (default: true)

timeout: u64

Request timeout in seconds (default: 30)

Implementations

impl VaultConfig

pub fn new(vault_addr: String, token: String) -> Self

Create a new Vault configuration.

pub fn with_mount_path(self, mount_path: String) -> Self

Set the transit mount path.

pub fn with_namespace(self, namespace: String) -> Self

Set the Vault namespace.

pub fn with_verify_tls(self, verify_tls: bool) -> Self

Set TLS verification.

pub fn with_timeout(self, timeout: u64) -> Self

Set request timeout in seconds.

Trait Implementations

impl Clone for VaultConfig

fn clone(&self) -> VaultConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VaultConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.