Struct ConfigSecretReport 

pub struct ConfigSecretReport {
    pub schema: &'static str,
    pub limit: usize,
    pub config_keys: usize,
    pub secret_named: usize,
    pub redacted: usize,
    pub declared: usize,
    pub unredacted: usize,
    pub redacted_not_secret_named: usize,
    pub files: usize,
    pub items: Vec<ConfigSecretItem>,
}

An inventory of secret-named config keys and their redaction state.

See config_secrets for what this is and — more importantly — what it is not.

Fields

schema: &'static str

Stable schema tag (SCHEMA).

limit: usize

The requested cap on items; 0 means unlimited.

config_keys: usize

Every config_key node in the graph, secret-named or not — the population the inventory was drawn from.

secret_named: usize

Config keys whose name matched the secret-name heuristic. items is the first limit of these, so secret_named > items.len() means truncation.

redacted: usize

Of secret_named: how many carry the redaction placeholder.

declared: usize

Of secret_named: how many carry no value at all (struct-derived).

unredacted: usize

Of secret_named: how many carry a value that is not the placeholder.

Expected to be zero. A non-zero count is a finding about this store — see RedactionState::Present for the one path that reaches it.

redacted_not_secret_named: usize

Config keys that are redacted but whose name is not secret-looking: a Kubernetes Secret’s data, redacted because of where it lives rather than what it is called.

Reported so the redaction counts reconcile against the graph: without it a reader comparing redacted to the number of <redacted> values in the store would find an unexplained surplus.

files: usize

Distinct files carrying at least one secret-named key.

items: Vec<ConfigSecretItem>

The secret-named keys, ordered by (path, name, key).

Trait Implementations

impl Clone for ConfigSecretReport

fn clone(&self) -> ConfigSecretReport

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConfigSecretReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ConfigSecretReport

fn eq(&self, other: &ConfigSecretReport) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ConfigSecretReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ConfigSecretReport