Struct ReplicatedSecret 

pub struct ReplicatedSecret {
    pub storage_key: String,
    pub ciphertext: Vec<u8>,
    pub dek_generation: u64,
    pub metadata: SecretMetadata,
    pub node_affinity: Option<NodeAffinity>,
}

A secret replicated through Raft. Every node has the same encrypted blob; only nodes whose secrets_pubkey is in the current WrappedDek for this generation can decrypt.

Fields

storage_key: String

"{scope}:{name}" — same key shape used by PersistentSecretsStore.

ciphertext: Vec<u8>

XChaCha20-Poly1305 ciphertext of the plaintext value, encrypted under the cluster DEK at dek_generation. Nonce is prepended.

dek_generation: u64

Which DEK generation produced ciphertext. After a rotation, the state machine batches re-encrypts of every row whose dek_generation is older than current.

metadata: SecretMetadata

Standard secret metadata (name, version, timestamps).

node_affinity: Option<NodeAffinity>

Optional per-secret affinity. None = any node may host (the default). When set, only matching nodes are entitled to a wrap of this row’s DEK material; the API gate also filters reads accordingly.

Trait Implementations

impl Clone for ReplicatedSecret

fn clone(&self) -> ReplicatedSecret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ComposeSchema for ReplicatedSecret

fn compose(generics: Vec<RefOr<Schema>>) -> RefOr<Schema>

impl Debug for ReplicatedSecret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ReplicatedSecret

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ReplicatedSecret

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl ToSchema for ReplicatedSecret

fn name() -> Cow<'static, str>

Return name of the schema.

fn schemas(schemas: &mut Vec<(String, RefOr<Schema>)>)

Implement reference utoipa::openapi::schema::Schemas for this type.