Struct TenantRegistry 

pub struct TenantRegistry { /* private fields */ }

The resolved multi-tenant routing table. Immutable for the process lifetime (a config change is a redeploy).

Implementations

impl TenantRegistry

pub fn new(tenants: Vec<ResolvedTenant>) -> TenantRegistry

pub fn len(&self) -> usize

pub fn is_empty(&self) -> bool

pub fn tenants(&self) -> &[ResolvedTenant]

Every registered tenant, routable or not — for startup logging and operator introspection.

pub fn validate(&self) -> Result<(), Error>

Reject a registry that cannot route unambiguously. Separate from Self::new so tests and introspection can build any registry they like; the binary calls this before serving.

Two tenants sharing a resolved bearer is the dangerous case: Self::tenant_for returns the first match, so one tenant silently absorbs every poke meant for the other — and absorbing a poke means rendering its workload and publishing to its bucket. That is cross-tenant publication caused by config alone, with a 202 on the wire and nothing in the logs to distinguish it from success. Duplicate ids are rejected in the same pass because load_tenants pins id to filename stem, so a duplicate can only come from a hand-built registry — but an id is what every log line and error message identifies a tenant by.

Errors name the ids, never the bearer.

pub fn tenant_for(&self, mirror_key: Option<&str>) -> Option<&ResolvedTenant>

Select the tenant a poke’s bearer authorizes. An empty/absent bearer never matches; a tenant with no resolved bearer is never returned.

Trait Implementations

impl Clone for TenantRegistry

fn clone(&self) -> TenantRegistry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantRegistry

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TenantRegistry

fn default() -> TenantRegistry

Returns the “default value” for a type.