Struct RotatingKeyProvider 

pub struct RotatingKeyProvider { /* private fields */ }

A rotation-aware key provider: one active (write) key plus an ordered list of additional keys accepted for reads only.

During a rotation an operator constructs this with the new key as active and the previous key(s) in also_accept; new puts sign under active, while get / list continue to see blobs written under the retired keys until they are migrated or GC’d. The active key is automatically included in KeyProvider::read_keys (first), so the caller passes only the extra accepted keys.

Implementations

impl RotatingKeyProvider

pub fn new( active: [u8; 32], also_accept: impl IntoIterator<Item = [u8; 32]>, ) -> Self

Build a provider whose write/active key is active and which also accepts every key in also_accept for reads. Duplicates of the active key in also_accept are harmless (the store dedups by fingerprint when listing).

Trait Implementations

impl KeyProvider for RotatingKeyProvider

fn active_key(&self) -> [u8; 32]

The key new puts sign with. MUST be one of Self::read_keys.

fn read_keys(&self) -> Vec<[u8; 32]>

Every key a read (get / list) may try, conventionally newest first so the common “just-written under the active key” case hits on the first probe. The active key MUST be present.