Struct Vault 

pub struct Vault { /* private fields */ }

The secret store, as an application enables it.

Config key	Meaning
vault.resolve	Configuration roots to search for references, as an array.

Implementations

impl Vault

pub fn fake() -> FakeVault

A store that answers from an empty script — every read fails loudly.

pub fn fake_with(fake: Fake) -> FakeVault

A store that answers from a script written out in advance.

impl Vault

pub fn new(client: VaultClient) -> Vault

pub fn from_env() -> Result<Vault>

Take the address, token and namespace from the environment, the way every other Vault and OpenBao tool does.

pub fn resolving(self, root: impl Into<String>) -> Vault

Also search this configuration subtree for vault: references.

Named rather than discovered because Config cannot be enumerated, and because a resolver that walked everything would read secrets for keys nobody asked it to touch.

pub fn even_over_http(self) -> Vault

Do not warn about a plain-HTTP address.

Spelled out in full because of what it means: the token goes over the wire in clear text, and a token is the whole store. Loopback addresses never warn in the first place, so this is only for a network you have decided to trust.

pub fn client(&self) -> &VaultClient

pub fn renewer(&self) -> &Arc<Renewer>

The renewer this plugin registers.

Whatever issues a lease — a login, a dynamic database credential — hands it here, and it is kept alive until the application stops.

pub async fn resolve(&self, config: &Config) -> Result<usize>

Swap every vault: reference in configuration for the secret it names, and say how many were replaced.

The roots come from Vault::resolving, or from vault.resolve in configuration when the builder named none — a value written in main.rs is a decision and a value in a config file is a default.

pub async fn resolve_env(&self) -> Result<usize>

Swap every vault: reference in the process environment.

For an application whose secrets arrive as DATABASE_URL=vault:…. Call it before the application boots, so .env and the configuration defaults see values rather than references.

Trait Implementations

impl Debug for Vault

Deliberately hand-written: the client’s own Debug redacts the token, and deriving here would be one refactor away from printing it.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Plugin for Vault

fn name(&self) -> &'static str

Shown by rustlavel route:list and in boot logs.

fn register(self: Box<Self>, setup: &mut Setup<'_>)

Add routes, middleware, and state.