Struct MemoryDecryptBrokerConfig 

pub struct MemoryDecryptBrokerConfig {
    pub provider: String,
    pub runtime_principal_id: String,
    pub secret_family: MemorySecretFamily,
    pub hosted_required: bool,
}

Fields

provider: String

runtime_principal_id: String

secret_family: MemorySecretFamily

hosted_required: bool

Implementations

impl MemoryDecryptBrokerConfig

pub fn local_disabled() -> Self

pub fn hosted( provider: impl Into<String>, runtime_principal_id: impl Into<String>, ) -> MemoryResult<Self>

pub fn from_env() -> MemoryResult<Self>

pub fn validate(&self) -> MemoryResult<()>

pub fn crypto_mode(&self) -> MemoryCryptoMode

Classify the effective memory crypto mode for operator diagnostics and guard checks. Hosted mode is selected whenever hosted encryption is required or a non-local KMS provider is configured; otherwise the runtime is local (plaintext, or a local file/passphrase-backed provider).

pub fn describe(&self) -> String

Human-readable startup diagnostic so operators know whether memory is local plaintext, local encrypted, or hosted-KMS encrypted.

pub fn describe_validated(&self) -> String

Like describe, but surfaces a fail-closed misconfiguration instead of claiming a protected mode when the config is invalid (e.g. hosted encryption is required but no valid KMS provider / principal is configured). Boot diagnostics should use this so operators see the hosted misconfiguration rather than a false “hosted KMS” claim.

impl MemoryDecryptBrokerConfig

pub fn build_dek_unwrap_provider( &self, ) -> MemoryResult<Option<MemoryDekUnwrapProviderBox>>

Trait Implementations

impl Clone for MemoryDecryptBrokerConfig

fn clone(&self) -> MemoryDecryptBrokerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MemoryDecryptBrokerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MemoryDecryptBrokerConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for MemoryDecryptBrokerConfig

impl PartialEq for MemoryDecryptBrokerConfig

fn eq(&self, other: &MemoryDecryptBrokerConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for MemoryDecryptBrokerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for MemoryDecryptBrokerConfig