Enum Role 

pub enum Role {
    Instance,
    Operator,
    Provisioner,
}

Roles are disjoint. An operator credential cannot fund an instance, and a provisioner reaches only the self-service subset of the admin API (#39).

Variants

Instance

A service instance: lease lifecycle, snapshot and principal reads, the active-credential projection (GET /v1/keys) and usage ingestion.

Operator

An operator: every route under /v1/admin, including account funding, status, budgets, credentials and snapshot publication.

Provisioner

A self-service account service (#39): creates unfunded, suspended, best-effort accounts, activates them, sets budgets within its ceiling, and manages their credentials, on accounts a provisioner created only. It can never fund, suspend, close, grant Assured, or publish principal snapshots.

Implementations

impl Role

pub fn as_str(self) -> &'static str

The configuration spelling, which is also the audit spelling.

Trait Implementations

impl Clone for Role

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Role

impl Debug for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Role

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Role

impl PartialEq for Role

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Role

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Role