Crate tencrypt_core

Structs§

AuditRecord
BackoffConfig: Configuration for exponential backoff without jitter.
BackoffState: Tracks how many attempts have been made so far.
CertMetrics: In-process certificate operation counters (single-threaded). Serialize to JSON for periodic log-line metrics export.
CertRecord: A single certificate tracked by the reconciler.
CloudEvent
DomainPolicy: Per-domain backoff policy override. hostname_pattern is an exact hostname match for AAA-1/2; wildcard support is deferred to AAA-3.
IssuanceReport
IssuanceRequest
StateStore: File-backed collection of CertRecords. Single-writer assumption — concurrent cell runs must not share the same file.
StateTransition
TraefikRouterConfig
TraefikStaticConfigInput

CertState
ReconcileDecision: The action the reconciler should take given the current certificate state. reconcile_step is a pure function: same input always produces the same output.
RequestValidationError

acme_cert_present: Returns true if acme.json at path contains a certificate entry whose domain.main or domain.sans matches hostname under the given resolver.
advance_record: Advance a CertRecord by one reconcile step using the given backoff config.
cert_state_from_str: Parse a CertState from its snake_case name string.
cert_state_names
dry_run_issue
events_from_report
generate_router_labels
new_request
next_backoff_delay: Returns the delay before the next attempt, or None if retries are exhausted. Delay doubles each attempt and is capped at config.max_delay_ms.
next_backoff_delay_jittered: Jittered variant of next_backoff_delay.
next_state: The next state in the forward-progress pipeline for Proceed decisions. Returns None for terminal or wait states.
reconcile_step: Pure reconcile function: given current state, return the required action. Makes no I/O, mutates nothing, has no side effects.
render_traefik_static_yaml
resolve_backoff: Resolve the effective backoff config for a hostname.
validate_hostname
validate_request
write_audit_jsonl
write_events_jsonl