authority

Module: sidecar::authority

Contents

Structs

• AuthorityConfig - Tuning for background Authority stream clients.
• SidecarCredentials - Sidecar pre-shared-key credentials presented to Authority RPCs.

---

firma_config_schema::sidecar::authority::AuthorityConfig

Struct

Tuning for background Authority stream clients.

Fields:

• agent_id: Option<String> - Authority-registered TypeID for the agent represented by this Sidecar.
• url: Option<String> - Authority gRPC URL (e.g. https://127.0.0.1:9443). When set, the
• connect_addr: Option<std::net::SocketAddr> - Optional physical TCP destination for the Authority connection.
• connect_timeout: crate::utils::NonZeroDuration - Connection timeout.
• reconnect_min_backoff: crate::utils::NonZeroDuration - Minimum reconnect backoff.
• reconnect_max_backoff: crate::utils::NonZeroDuration - Maximum reconnect backoff.
• revocation_readiness_grace: std::time::Duration - Grace period before the revocation stream is considered ready.
• revocation_fail_closed_on_disconnect: bool - Flip revocation readiness back to false on disconnect.
• public_key_path: Option<std::path::PathBuf> - Path to the Authority’s PASETO v4 Ed25519 public key.
• ca_cert_path: Option<std::path::PathBuf> - Path to the PEM-encoded CA certificate used to verify the Authority’s
• allow_insecure_remote_authority: bool - Allow an insecure plain http:// authority URL to a non-loopback host.
• tls_client_cert_path: Option<std::path::PathBuf> - Path to the PEM-encoded mTLS client certificate presented to the
• tls_client_key_path: Option<std::path::PathBuf> - Path to the PEM-encoded mTLS client private key. Must be set together
• credentials: Option<SidecarCredentials> - Credentials presented on each outbound Authority RPC.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> AuthorityConfig
• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::authority::SidecarCredentials

Struct

Sidecar pre-shared-key credentials presented to Authority RPCs.

Fields:

• workspace_id: String - Workspace the Sidecar belongs to.
• sidecar_id: String - Authority-assigned Sidecar identity.
• pre_shared_key_env: Option<String> - Environment variable containing the pre-shared key.
• pre_shared_key_path: Option<std::path::PathBuf> - File containing the pre-shared key.

Traits: Eq

Trait Implementations:

• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> SidecarCredentials
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &SidecarCredentials) -> bool