firma_config_schema (root module)
Module: firma_config_schema
Section titled “Module: firma_config_schema”Contents
Section titled “Contents”Modules
authority- Schema for the[authority]section offirma.toml.broker- Schema for firma-run[sidecar.secret_gateway]client tuning.gateway- Schema for the sidecar’s[sidecar.secret_gateway]client tuning.run- Schema for the[run]section offirma.toml.secret_matcher- Schema for secret-extraction matchers.secret_providersidecar- Schema for the[sidecar]section offirma.toml.utils- Reusable value types and Serde helpers for configuration fields.
Module: authority
Section titled “Module: authority”Schema for the [authority] section of firma.toml.
Representation only. firma-authority converts this flat TOML shape into
its validated runtime configuration, including the grouped TLS settings.
Module: broker
Section titled “Module: broker”Schema for firma-run [sidecar.secret_gateway] client tuning.
firma-secret-provider’s GatewayClient consumes these values directly.
Schema value types enforce their intrinsic invariants before the client sees
them.
Module: gateway
Section titled “Module: gateway”Schema for the sidecar’s [sidecar.secret_gateway] client tuning.
firma-secret-provider’s GatewayClient consumes these values directly.
Schema value types enforce their intrinsic invariants before the client sees
them.
Module: run
Section titled “Module: run”Schema for the [run] section of firma.toml.
firma-run layers built-in profile defaults, file config, and CLI overrides
onto these patch types, merges them, then builds its validated
ResolvedProfile from the result. Schema value types own intrinsic
invariants; merge and cross-field validation lives in firma-run.
Module: secret_matcher
Section titled “Module: secret_matcher”Schema for secret-extraction matchers.
Representation only: how to extract (name, value) pairs from a vault
CLI’s stdout or an HTTP vault’s response body. The execution (JSONPath /
Regex compilation and rewrite) lives in firma-secret-provider; these
types are the concrete configuration a user writes.
Module: secret_provider
Section titled “Module: secret_provider”Module: sidecar
Section titled “Module: sidecar”Schema for the [sidecar] section of firma.toml.
Behavior-free representation of the sidecar’s configuration. The
firma-sidecar crate builds its validated configuration types from these
structs. [SidecarConfig] is the top-level aggregate; each field maps to a
section module below.
Module: utils
Section titled “Module: utils”Reusable value types and Serde helpers for configuration fields.