Struct HetznerDriver 

pub struct HetznerDriver { /* private fields */ }

Hetzner Cloud + Object Storage driver for Phase-1 mirror bootstrap.

Cloud operations (server lifecycle) use HETZNER_API_TOKEN. Bucket operations use the Hetzner Object Storage S3-compat API (HETZNER_S3_ACCESS_KEY + HETZNER_S3_SECRET_KEY). Run yah cloud secrets for the canonical contract (vault slots + env).

Implementations

impl HetznerDriver

pub fn new(token: impl Into<String>) -> Self

Build with a Cloud API token only. Bucket operations will fail until S3 credentials are added via [with_storage].

pub fn with_storage( self, access_key: impl Into<String>, secret_key: impl Into<String>, ) -> Self

Attach Hetzner Object Storage S3 credentials.

pub fn with_s3_endpoint(self, endpoint: impl Into<String>) -> Self

Override the S3 base endpoint (e.g. "http://localhost:9000" for MinIO in tests).

pub fn from_env() -> Result<Self>

Build from environment variables.

Required: HETZNER_API_TOKEN. Optional: HETZNER_S3_ACCESS_KEY + HETZNER_S3_SECRET_KEY (needed for create_bucket).

pub fn from_default_sources() -> Result<Self>

Build from the shared keys vault first, then fall back to env vars.

Slot ↔ env mapping:

• hetzner-api-token ↔ HETZNER_API_TOKEN (required)
• hetzner-s3-access-key ↔ HETZNER_S3_ACCESS_KEY (optional pair)
• hetzner-s3-secret-key ↔ HETZNER_S3_SECRET_KEY (optional pair)

The vault path is the production-default for yah callers; env is kept as a fallback so CI / one-shot scripts (and hosts that don’t have a vault yet) keep working. The two are checked per-key, so a vault-stored API token combined with env-supplied S3 creds is fine. Vault open errors (missing machine.key, etc.) are swallowed — they just mean “no vault here, try env.”

Trait Implementations

impl Clone for HetznerDriver

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl MachineProvider for HetznerDriver

fn ensure_project<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<ProjectId>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Return or create a logical project scope.

fn create_server<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, _project: &'life1 ProjectId, spec: &'life2 ServerSpec, user_data: &'life3 str, ) -> Pin<Box<dyn Future<Output = Result<ServerId>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Provision a new server with the given cloud-init user_data string.

fn server_status<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 ServerId, ) -> Pin<Box<dyn Future<Output = Result<ServerStatus>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Fetch the current lifecycle status of a server.

fn find_server_by_name<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<ServerSummary>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Look up a server by its declared name. Ok(None) means the API responded but no server with that name exists; Err(_) means the API call itself failed.

fn bucket_exists<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, location: Location, ) -> Pin<Box<dyn Future<Output = Result<bool>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Probe whether a bucket exists in location. Ok(true) = HEAD 200, Ok(false) = HEAD 404. Auth failures (403) propagate as Err so the caller can distinguish “missing” from “can’t tell”.

fn destroy_server<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 ServerId, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Irreversibly destroy a server. Returns Ok(()) if already deleted.

fn delete_bucket<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, location: Location, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Irreversibly delete an object-storage bucket. Lists and deletes every object first (S3 won’t delete a non-empty bucket), then deletes the bucket itself. Returns Ok(()) if the bucket was already gone (404 on the final DELETE). Auth/transport failures propagate as Err.

fn create_bucket<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, location: Location, ) -> Pin<Box<dyn Future<Output = Result<BucketRef>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Create an object-storage bucket in the given location.

fn set_bucket_acl<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, location: Location, acl: BucketAcl, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Set the canned ACL on an existing bucket via PUT /<bucket>?acl.