pub struct CreateCaRequest {
pub passphrase: String,
pub entropy_hex: String,
pub operator: Option<String>,
pub enrollment_open: bool,
pub requires_approval: bool,
pub auto_unlock: bool,
pub totp_secret_hex: Option<String>,
}Expand description
POST /create request - initialize a new CA via the running service.
The security posture is carried as the two real booleans the roster
stores (enrollment_open, requires_approval) plus auto_unlock, the
create-time decision of whether to save the passphrase to the vault so
the daemon boots unlocked. The named presets are resolved to these
booleans by the ceremony/CLI before this request is built.
Fields§
§passphrase: StringPassphrase for encrypting the CA key.
entropy_hex: StringHex-encoded 32-byte entropy seed (collected locally by CLI).
operator: Option<String>Optional operator name (recorded in the audit log).
enrollment_open: boolWhether the mesh starts accepting new members.
requires_approval: boolWhether joins require operator approval at the CA.
auto_unlock: boolWhether to save the passphrase to the vault for automatic unlock on boot.
totp_secret_hex: Option<String>Optional hex-encoded TOTP secret.
When provided by a ceremony-driven client, the server uses this secret instead of generating one. The client has already shown the QR code and verified the user’s authenticator app.
Trait Implementations§
Source§impl ComposeSchema for CreateCaRequest
impl ComposeSchema for CreateCaRequest
Source§impl Debug for CreateCaRequest
impl Debug for CreateCaRequest
Source§impl<'de> Deserialize<'de> for CreateCaRequest
impl<'de> Deserialize<'de> for CreateCaRequest
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl Serialize for CreateCaRequest
impl Serialize for CreateCaRequest
Auto Trait Implementations§
impl Freeze for CreateCaRequest
impl RefUnwindSafe for CreateCaRequest
impl Send for CreateCaRequest
impl Sync for CreateCaRequest
impl Unpin for CreateCaRequest
impl UnsafeUnpin for CreateCaRequest
impl UnwindSafe for CreateCaRequest
Blanket Implementations§
Source§impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere
T: 'a,
impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere
T: 'a,
Source§impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere
T: 'a,
impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere
T: 'a,
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
impl<A, B, T> HttpServerConnExec<A, B> for Twhere
B: Body,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more