Struct BootstrapOutcome 

pub struct BootstrapOutcome {
    pub rules_pack: RulesPack,
    pub bound_credentials_ref: Option<SecretRef>,
    pub bound_expiry: Option<DateTime<Utc>>,
    pub bound_secret_material: Option<Zeroizing<String>>,
}

Successful bootstrap output.

The handler returns this; the runner persists the rules pack, writes any bound secret material to the secret backend, and stamps the env’s Credentials doc. The handler does NOT touch the env store directly.

Fields

rules_pack: RulesPack

Rules-pack content the customer’s admin can review and apply. Empty for deployers that need no offline IaC step (e.g. local-process — though those should use BootstrapError::NotApplicable rather than reach here).

bound_credentials_ref: Option<SecretRef>

When Some, the runner sets env.credentials_ref to this value — the env is now credentialed and downstream validates will run the deployer’s real probes against it. When None, the bootstrap emitted only an IaC rules pack; the env stays uncredentialed until op credentials rotate <env> --provided-credentials-ref <uri> binds the real value the customer’s admin produces by applying the rules pack offline.

AWS C3 stub returns None (admin runs Terraform); the K8s --bind path returns Some once it has minted a ServiceAccount token directly. Local-process never reaches here (returns BootstrapError::NotApplicable).

bound_expiry: Option<DateTime<Utc>>

When the handler minted a credential with a bounded lifetime (e.g. a K8s TokenRequest token), the absolute expiry the cluster granted. The runner stamps it into Credentials::expiry so the re-bind deadline is visible; None for non-expiring or render-only bootstraps.

bound_secret_material: Option<Zeroizing<String>>

Secret material the handler minted that the runner must persist to the env’s secret backend (the location resolve_credentials_token reads it back from) BEFORE recording credentials_ref.

#[serde(skip)] — material is never serialized into the persisted Credentials doc or any audit record; it lives only for the in-process handler→runner handoff and is zeroized on drop. None for render-only bootstraps (the admin supplies the material out-of-band and binds it via op credentials rotate).

Trait Implementations

impl Clone for BootstrapOutcome

fn clone(&self) -> BootstrapOutcome

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BootstrapOutcome

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for BootstrapOutcome

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for BootstrapOutcome

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.