Struct CredentialBrokerConfig 

pub struct CredentialBrokerConfig {
    pub broker_ip: Ipv4Addr,
    pub broker_port: u16,
    pub inject_proxy_env: bool,
}

Host-side credential broker endpoint for broker-only egress.

The broker process runs outside the sandbox and holds the real credential. Nucleus only allows the sandbox to reach this endpoint; the broker is responsible for injecting credentials, constraining upstream destinations, rate limiting, and auditing authenticated requests.

Fields

broker_ip: Ipv4Addr

Host-side bridge IP reachable from the container namespace.

broker_port: u16

TCP port where the host-side broker listens.

inject_proxy_env: bool

Whether Nucleus should inject standard proxy environment variables pointing at the broker. Disable this when using a provider-specific base URL environment variable instead.

Implementations

impl CredentialBrokerConfig

pub fn new(broker_ip: Ipv4Addr, broker_port: u16) -> Self

Create a credential broker config from a host-side bridge IP and port.

pub fn parse_endpoint(endpoint: &str) -> Result<Self, String>

Parse an endpoint in IPv4:PORT form.

pub fn with_proxy_env(self, inject_proxy_env: bool) -> Self

pub fn validate(&self) -> Result<(), String>

pub fn validate_for_bridge(&self, bridge: &BridgeConfig) -> Result<(), String>

pub fn broker_cidr(&self) -> String

pub fn proxy_url(&self) -> String

pub fn proxy_environment(&self) -> Vec<(String, String)>

Standard proxy variables for HTTP API CLIs that honor proxy settings.

These values are not secrets; they only point at the broker endpoint.

pub fn egress_policy(&self) -> EgressPolicy

Trait Implementations

impl Clone for CredentialBrokerConfig

fn clone(&self) -> CredentialBrokerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialBrokerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CredentialBrokerConfig

impl PartialEq for CredentialBrokerConfig

fn eq(&self, other: &CredentialBrokerConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CredentialBrokerConfig