Struct ClusterJoinClaims 

pub struct ClusterJoinClaims {
    pub api_endpoint: String,
    pub raft_endpoint: String,
    pub leader_wg_pubkey: String,
    pub overlay_cidr: String,
    pub exp: String,
    pub iat: String,
    pub iss: String,
}

Claims carried inside a signed cluster join token.

Field declaration order is the canonical signing order. Do NOT reorder these fields without bumping the envelope’s v and writing a migration — Wave 3.2’s mint_signed_cluster_join_token signs serde_json::to_vec(&claims) directly, which depends on the declaration order being stable.

Timestamps are RFC3339 strings (not Unix epoch) so a token printed to a wiki or chat log is human-readable. chrono::DateTime<Utc> would also work; we chose String to keep the wire format trivially inspectable with base64 -d | jq ..

Fields

api_endpoint: String

Public API endpoint of the issuing leader (e.g. https://leader.prod:3669).

raft_endpoint: String

Raft endpoint of the issuing leader (e.g. 10.0.0.1:3670).

leader_wg_pubkey: String

WireGuard public key of the issuing leader (base64 standard, no-pad).

overlay_cidr: String

Overlay CIDR the cluster owns (e.g. 10.42.0.0/16).

exp: String

Expiration as RFC3339, e.g. 2026-05-15T17:55:00Z.

iat: String

Issued-at as RFC3339.

iss: String

Issuing leader node identity. In Wave 3 this is the raw node UUID; Wave 9 will switch this to a spiffe://<cluster_domain>/<node_id> URI (token format version bump). Verifiers in Wave 3 treat iss as opaque metadata — no parsing required.

Trait Implementations

impl Clone for ClusterJoinClaims

fn clone(&self) -> ClusterJoinClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ComposeSchema for ClusterJoinClaims

fn compose(generics: Vec<RefOr<Schema>>) -> RefOr<Schema>

impl Debug for ClusterJoinClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ClusterJoinClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ClusterJoinClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl ToSchema for ClusterJoinClaims

fn name() -> Cow<'static, str>

Return name of the schema.

fn schemas(schemas: &mut Vec<(String, RefOr<Schema>)>)

Implement reference utoipa::openapi::schema::Schemas for this type.