Enum SecretError 

pub enum SecretError {
    NotFound {
        path: PathBuf,
    },
    ClusterNotImplemented,
    ClusterNotFound {
        name: String,
    },
    Forbidden {
        name: String,
    },
    ClusterDecrypt {
        name: String,
    },
    Kek {
        reason: String,
    },
    Io {
        path: PathBuf,
        source: Error,
    },
}

Errors returned by SecretResolver::resolve.

Variants

NotFound

The referenced secret file does not exist in the yubaba secret store.

Fields

path: PathBuf

ClusterNotImplemented

SecretRef::Cluster reached a resolver that has no cluster backing — e.g. the per-machine LocalFileResolver, which cannot decrypt cluster secrets. The fleet resolver (yubaba’s ClusterResolver) handles the Cluster arm; this error means the wrong resolver was used.

ClusterNotFound

The referenced cluster secret is not present in the local raft replica (never written, or deleted). Fails closed — nothing is served.

Fields

name: String

Forbidden

The cluster secret exists but its SecretAccess rule does not admit the requesting workload (R706 / W294).

The #[error(...)] text is a deliberate byte-for-byte duplicate of SecretError::ClusterNotFound’s. Yubaba surfaces the Display form of this error in the deploy rejection body, so a distinguishable message would turn any workload spec into an oracle for the cluster’s secret namespace: deploy a throwaway spec naming a guessed secret and read off “forbidden” (it exists) versus “not found” (it doesn’t). The variants stay separate internally — the node logs which one it was, and secrets_forbidden_is_externally_indistinguishable pins the equality so a future edit to either message can’t silently reopen the oracle.

Fields

name: String

ClusterDecrypt

Decryption or authentication of a cluster secret failed — a wrong node-local KEK, a truncated/tampered record, or a malformed nonce. Fails closed; the message carries only the logical name, never key or ciphertext bytes.

Fields

name: String

Kek

The node-local cluster KEK could not be loaded (missing, unreadable, or not exactly 32 bytes). Fails closed; reason is a generic diagnostic and never contains key material.

Fields

reason: String

Io

I/O error reading the secret file.

Fields

path: PathBuf

source: Error

Trait Implementations

impl Debug for SecretError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SecretError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for SecretError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.