Struct SecretRef 

pub struct SecretRef {
    pub from_store: Option<String>,
    pub from_env: Option<String>,
    pub from_file: Option<PathBuf>,
}

A reference to a secret. Exactly one of the three sources must be populated; validation is performed by the host crate’s validate_ref (policy lives where it’s enforced).

Round-trips through serde_json for persistence in the VM record DB and in .smolmachine pack manifests. Refs are not sensitive; the resolved plaintext is produced only at the workload launch site and never touches any of these stores.

Fields

from_store: Option<String>

Look up the secret by name in the host secret store.

from_env: Option<String>

Read the secret from a host environment variable.

from_file: Option<PathBuf>

Read the secret from a host file path (must be absolute).

Implementations

impl SecretRef

pub fn source_kind(&self) -> Option<SecretSourceKind>

Return the source kind for this ref, if exactly one source is set.

Returns None for structurally invalid refs (0 or >1 sources). Callers are expected to have already validated with the host crate’s validate_ref before calling this; this function is primarily for audit logging of a known-good ref.

Trait Implementations

impl Clone for SecretRef

fn clone(&self) -> SecretRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecretRef

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SecretRef

impl PartialEq for SecretRef

fn eq(&self, other: &SecretRef) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecretRef

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretRef