Struct WorkloadMatch 

pub struct WorkloadMatch {
    pub workload: String,
    pub tenant: TenantId,
    pub namespace: NamespaceId,
}

One entry in a SecretAccess::Workloads allow-list.

A match requires all three fields to be equal. tenant and namespace default to their singletons rather than to a wildcard: on today’s single-tenant fleet that makes them free to omit, and it means a rule written today cannot silently widen to admit a same-named workload in a tenant that gets created tomorrow. Cross-tenant sharing is spelled as two entries.

Fields

workload: String

The admitted WorkloadSpec::name.

tenant: TenantId

Tenant the workload must be in. Defaults to TenantId::singleton.

namespace: NamespaceId

Namespace the workload must be in. Defaults to NamespaceId::singleton.

Implementations

impl WorkloadMatch

pub fn workload(name: impl Into<String>) -> Self

A match on name in the singleton tenant/namespace.

pub fn admits(&self, consumer: &SecretConsumer) -> bool

Whether consumer satisfies this entry.

Trait Implementations

impl Clone for WorkloadMatch

fn clone(&self) -> WorkloadMatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WorkloadMatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WorkloadMatch

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for WorkloadMatch

impl PartialEq for WorkloadMatch

fn eq(&self, other: &WorkloadMatch) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for WorkloadMatch

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for WorkloadMatch