pub struct SecretCommand {
pub run: Vec<String>,
pub lifetime: String,
pub refresh_before: Option<String>,
pub home: CommandHome,
}Expand description
source: { command: { run: [...], lifetime: 15m, refresh_before: 2m } }.
Debug names the program only: arguments can name accounts and projects.
Fields§
§run: Vec<String>The program, absolute or under ~/, then its arguments. Run without a
shell: no word is expanded.
lifetime: StringThe longest a value is used, 90s, 15m or 1h, from 1 minute to 12
hours. A shorter expiry the program prints wins.
refresh_before: Option<String>How long before the value expires the proxy asks for a new one; a fifth
of lifetime when unset.
home: CommandHomeThe HOME the program gets: an empty folder of its own unless set to
user.
Implementations§
Source§impl CommandSource
impl CommandSource
Sourcepub fn lifetime_secs(&self) -> u64
pub fn lifetime_secs(&self) -> u64
lifetime in seconds. Validated when the policy loaded.
The folder every user can write that path (slash-separated) lies in,
if any: no program there is the person’s alone.
Sourcepub fn refresh_before_secs(&self) -> u64
pub fn refresh_before_secs(&self) -> u64
refresh_before in seconds, or a fifth of the lifetime, never less
than 10 seconds.