Struct SecretsConfig 

pub struct SecretsConfig {
    pub secrets: Vec<SecretEntry>,
    pub violation_action: SecretViolationAction,
    /* private fields */
}

Placeholder-based secret substitution for a sandbox’s TLS-intercepted egress.

The sandbox only ever sees each secret’s placeholder; the local network engine substitutes the real value into outbound requests bound for an allowed host (and blocks/forwards per SecretViolationAction otherwise). Carried in NetworkSpec::secrets.

When constructing directly, use ..Default::default() for unspecified fields. The global passthrough_hosts field preserves historical defaults; its addition requires updating older exhaustive struct literals and patterns.

Fields

secrets: Vec<SecretEntry>

List of secrets to inject.

violation_action: SecretViolationAction

Default action when a placeholder leaks to a disallowed host.

Implementations

impl SecretsConfig

pub fn has_tls_identity_secrets(&self) -> bool

Whether any configured secret requires verified TLS identity.

pub fn contains_env_var(&self, env_var: &str) -> bool

Whether a secret is configured for the given environment variable.

pub fn validate(&self) -> Result<(), SecretConfigError>

Validate all configured secret entries.

Trait Implementations

impl Clone for SecretsConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<CloudSecretsConfig> for SecretsConfig

fn from(config: CloudSecretsConfig) -> Self

Converts to this type from the input type.

impl From<SecretsConfig> for CloudSecretsConfig

fn from(config: SecretsConfig) -> Self

Converts to this type from the input type.

impl From<SecretsConfig> for SecretsConfigPatch

fn from(value: SecretsConfig) -> Self

Converts to this type from the input type.

impl Serialize for SecretsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.