Enum VaultBootstrapPlan 

pub enum VaultBootstrapPlan {
    OpenClusterGlobalStore {
        consume_secret_inputs: bool,
    },
    SkipNoVault,
}

Where cluster vault first boot must create or open its vault, and whether the owner path may consume env/_FILE secret inputs.

Issue #1231 wires vault first boot through the bootstrap authority so the vault, key material, and emitted certificate belong to the real cluster-global auth store the authority model selected — never a scratch or per-member-only database, which PRD #1227 explicitly forbids (“do not mint a certificate from an emptyDir/scratch database and apply it to a different real store”).

Variants

OpenClusterGlobalStore

Create or open the vault against the cluster-global auth store. The boot is the proven authority owner (or the only local authority), so the vault pages, key material, and certificate live in the real store and the certificate unseals that same store on restart.

consume_secret_inputs is true only on the first write (BootstrapDisposition::ProceedLocal): the owner path reads the env/_FILE secret inputs, mints the certificate, and seals the real store. A restart that observes the durable completion marker (BootstrapDisposition::AlreadyComplete) sets it to false: the existing vault is opened and unsealed, but no secret input is consumed, so first boot is never re-run and the vault is never rotated. Because a non-owner cluster boot fails closed in authorize before any plan is produced, secret inputs are never consumed by a non-owner.

Fields

consume_secret_inputs: bool

SkipNoVault

Skip every vault/auth path — the explicit --no-auth / --dev development carveout. No vault is created or opened and no certificate is minted.

Trait Implementations

impl Clone for VaultBootstrapPlan

fn clone(&self) -> VaultBootstrapPlan

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for VaultBootstrapPlan

impl Debug for VaultBootstrapPlan

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for VaultBootstrapPlan

impl PartialEq for VaultBootstrapPlan

fn eq(&self, other: &VaultBootstrapPlan) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for VaultBootstrapPlan