Struct SecretsConfig 

pub struct SecretsConfig {
    pub secrets: Vec<SecretEntry>,
    pub violation_action: SecretViolationAction,
    /* private fields */
}

Placeholder-based secret substitution for a sandbox’s TLS-intercepted egress.

The sandbox only ever sees each secret’s placeholder; the local network engine substitutes the real value into outbound requests bound for an allowed host (and blocks/forwards per SecretViolationAction otherwise). Carried in NetworkSpec::secrets.

When constructing directly, use ..Default::default() for unspecified fields. The global passthrough_hosts field preserves historical defaults; its addition requires updating older exhaustive struct literals and patterns.

Fields

secrets: Vec<SecretEntry>

List of secrets to inject.

violation_action: SecretViolationAction

Default action when a placeholder leaks to a disallowed host.

Implementations

impl SecretsConfig

pub fn has_tls_identity_secrets(&self) -> bool

Whether any configured secret requires verified TLS identity.

pub fn contains_env_var(&self, env_var: &str) -> bool

Whether a secret is configured for the given environment variable.

pub fn validate(&self) -> Result<(), SecretConfigError>

Validate all configured secret entries.

Trait Implementations

impl Clone for SecretsConfig

fn clone(&self) -> SecretsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SecretsConfig

fn default() -> SecretsConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretsConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecretsConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<CloudSecretsConfig> for SecretsConfig

fn from(config: CloudSecretsConfig) -> SecretsConfig

Converts to this type from the input type.

impl Serialize for SecretsConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.