Struct VaultSettings 

pub struct VaultSettings {
    pub address: String,
    pub mount_path: String,
    pub kv_secret_path_prefix: Option<String>,
    pub jwt_role: Option<String>,
    pub jwt_mount_path: Option<String>,
    pub namespace: Option<String>,
    pub token: Option<String>,
    pub skip_ssl_verify: Option<bool>,
}

Fields

address: String

HashiCorp Vault server address (e.g., https://vault.company.com:8200)

mount_path: String

KV v2 secrets engine mount path (e.g., windmill)

kv_secret_path_prefix: Option<String>

Optional path prefix inserted between the KV data/metadata segment and the workspace id (e.g., "apps/windmill"). When set, secrets are stored at <mount>/data/<prefix>/<workspace>/<secret>, allowing a Vault policy scoped to exactly <mount>/data/<prefix>/_*.

jwt_role: Option<String>

Vault JWT auth role name for Windmill (optional, if not provided token auth is used)

jwt_mount_path: Option<String>

Mount path for the JWT auth method in Vault (optional, defaults to "jwt"). Set this when the JWT auth method is mounted at a non-default path, e.g. via vault auth enable -path=<mount> jwt.

namespace: Option<String>

Vault Enterprise namespace (optional)

token: Option<String>

Static Vault token for testing/development (optional, if provided this is used instead of JWT authentication)

skip_ssl_verify: Option<bool>

Skip TLS certificate verification when connecting to Vault. Only use for self-signed certificates in development environments.

Implementations

impl VaultSettings

pub fn new(address: String, mount_path: String) -> VaultSettings

Trait Implementations

impl Clone for VaultSettings

fn clone(&self) -> VaultSettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VaultSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VaultSettings

fn default() -> VaultSettings

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for VaultSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for VaultSettings

fn eq(&self, other: &VaultSettings) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for VaultSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for VaultSettings