Struct TrustBundle 

pub struct TrustBundle {
    pub v: u32,
    pub cluster_domain: String,
    pub ca_public_key_b64: String,
    pub ca_kid: String,
    pub generated_at: String,
}

Public trust bundle for a cluster, distributable out-of-band so other clusters can import it and accept this cluster’s tokens.

Contains the long-lived cluster CA pubkey (not the per-rotation signing key). Federation works by:

1. Cluster A exports its bundle (GET /api/v1/cluster/trust-bundle).
2. Operator transports the bundle to cluster B (out-of-band).
3. Cluster B imports it via the admin endpoint, replicated through Raft so every node converges.
4. Tokens minted by A’s per-rotation key, carrying A’s ca_chain, now validate against A’s CA pubkey in B’s trusted-bundles map.

Fields

v: u32

Format version. 1 today.

cluster_domain: String

Cluster identity this bundle represents (defaults to cluster UUID; may be a DNS-style domain like prod.zlayer.example).

ca_public_key_b64: String

URL-safe no-pad base64 of the cluster CA’s Ed25519 verifying key.

ca_kid: String

Short kid of the CA verifying key (8 hex chars).

generated_at: String

RFC3339 timestamp of when this bundle snapshot was generated. Imports may compare timestamps to spot stale bundles.

Trait Implementations

impl Clone for TrustBundle

fn clone(&self) -> TrustBundle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ComposeSchema for TrustBundle

fn compose(generics: Vec<RefOr<Schema>>) -> RefOr<Schema>

impl Debug for TrustBundle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustBundle

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustBundle

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl ToSchema for TrustBundle

fn name() -> Cow<'static, str>

Return name of the schema.

fn schemas(schemas: &mut Vec<(String, RefOr<Schema>)>)

Implement reference utoipa::openapi::schema::Schemas for this type.