Struct ResolvedSecrets 

pub struct ResolvedSecrets {
    pub bindings: Vec<ResolvedBinding>,
}

Resolved secret bindings ready for injection into a microVM. Contains the actual secret values (resolved from env or explicit).

Fields

bindings: Vec<ResolvedBinding>

Implementations

impl ResolvedSecrets

pub fn resolve(bindings: &[SecretBinding]) -> Result<Self>

Resolve all bindings, reading values from environment where needed.

pub fn to_secret_files(&self) -> Vec<(String, String)>

Generate secret files for the secrets drive. Each binding produces a JSON file with the secret metadata + value.

pub fn placeholder_env_vars(&self) -> Vec<(String, String)>

Generate placeholder environment variable entries for the config drive. These let tools pass “is API key set?” checks without exposing real values.

pub fn manifest_json(&self) -> String

Generate a manifest summarizing which secrets are bound to which domains. Written to the config drive for the guest agent to read on boot.

Trait Implementations

impl Clone for ResolvedSecrets

fn clone(&self) -> ResolvedSecrets

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResolvedSecrets

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ResolvedSecrets

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ResolvedSecrets

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.