Struct ConnectSpec 

pub struct ConnectSpec {
    pub address: String,
    pub ssh: String,
    pub identity_file: String,
    pub yubaba_port: Option<u16>,
    pub yubaba: Option<String>,
}

Declared reach for a BYO static node (no provider API). Lives under [connect] in the machine TOML.

Reach only — how the camp gets to the box. Permission is a separate axis that belongs to cheers’ scopes (W295 §“Deliberately deferred”); the two collapse in practice today (mesh membership grants everything) and the data model must not fuse them, so do not add an authorization field here.

address, ssh and identity_file stay whole, literal, operator-authored strings even though their values often look derived. They are not: us-west-001 dials SSH over its public IP while us-west-002 was deliberately repointed at its tailnet IP (R608-F10) precisely because the LAN address is unreachable off-LAN. Decomposing them into user + host and recomposing would silently undo per-machine decisions like that one. yubaba is the field that was derived — mesh IP plus a fixed port, rewritten by mesh-join — so that is where R707-T1 cut.

Fields

address: String

Reachable IPv4/host for the box, e.g. "45.32.194.254". Declared: which of a machine’s several addresses the camp should use is an operator choice (public IP vs. LAN IP vs. tailnet IP).

ssh: String

SSH target the camp dials for bootstrap + (pre-mesh) tunneled deploys, e.g. "root@45.32.194.254" or "struc@100.64.0.4". Declared, whole — see the type doc. Pair with identity_file for a copy-pasteable ssh -i <identity_file> <ssh>.

identity_file: String

Private key path the camp uses to authenticate ssh, e.g. "~/.ssh/yah". Every node in the fleet uses the same operator key today, but this is declared per-machine rather than assumed globally for the same reason ssh is whole rather than decomposed: a future node with a different key should not have to fight a hardcoded default. ~ is not shell-expanded by this crate — callers that shell out to ssh/scp pass it through -i, which expands it itself.

yubaba_port: Option<u16>

Port yubaba listens on. Declared reach; defaults to 7443 when omitted, which is every machine in the fleet today. Composed with the observed MachineRegistration::mesh_ipv4 by MachineConfig::yubaba_url.

yubaba: Option<String>

Explicit yubaba base URL, overriding the composed form.

Two live uses, both genuine declarations: a pre-mesh node saying "http://127.0.0.1:7443" — “I have no mesh address; reach me through the SSH tunnel to ssh” — and any node whose yubaba is not at mesh_ipv4:port. A URL here whose host is a mesh IP is the pre-R707-T1 shape; MachineConfig::normalize lifts it into [registration].mesh_ipv4 and clears this field so the two cannot drift apart.

Implementations

impl ConnectSpec

pub fn yubaba_port(&self) -> u16

Declared yubaba port, defaulting to DEFAULT_YUBABA_PORT.

Trait Implementations

impl Clone for ConnectSpec

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConnectSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ConnectSpec

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ConnectSpec

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.