infra

Module: sidecar::infra

Contents

Structs

• CaConfig - Certificate authority directory settings.
• CredentialConfig - Credential injection entry for a single external target.
• PolicyConfig - Policy source settings.

Enums

• CredentialMode - Credential injection mode selector.
• CredentialTransform - Optional transformation applied to resolved credential material before
• SidecarMode - Enforcement mode for the sidecar.

---

firma_config_schema::sidecar::infra::CaConfig

Struct

Certificate authority directory settings.

Fields:

• dir: std::path::PathBuf - Directory containing CA key material.

Trait Implementations:

• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> CaConfig
• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>

firma_config_schema::sidecar::infra::CredentialConfig

Struct

Credential injection entry for a single external target.

The header field is a plain string here; firma-sidecar parses it into an http::HeaderName during validation.

Fields:

• mode: CredentialMode - Injection mode. Default: basic.
• target_host: String - Host that this credential applies to.
• header: String - HTTP header name to inject (e.g. Authorization).
• prefix: Option<String> - Optional prefix prepended to the resolved value (e.g. "Bearer ").
• transform: Option<CredentialTransform> - Optional transform applied to the resolved secret before injection.
• value_from_env: Option<String> - Environment variable whose value is injected (basic mode).
• secret_path: Option<std::path::PathBuf> - Filesystem path to the secret file rendered by Vault Agent (vault mode).

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> CredentialConfig
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::infra::CredentialMode

Enum

Credential injection mode selector.

Variants:

• Basic - Static credential read from an environment variable at startup.
• Vault - Secret file rendered by Vault Agent, read from disk per-call.

Traits: Eq, Copy

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> CredentialMode
• Default
  • fn default() -> CredentialMode
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &CredentialMode) -> bool
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::infra::CredentialTransform

Enum

Optional transformation applied to resolved credential material before injection.

Variants:

• GithubPatBasic - Render a GitHub PAT as the Basic auth value accepted by Git smart HTTP.

Traits: Copy, Eq

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> CredentialTransform
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &CredentialTransform) -> bool
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::infra::PolicyConfig

Struct

Policy source settings.

Fields:

• dir: std::path::PathBuf - Directory containing .cedar policy files.

Trait Implementations:

• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> PolicyConfig
• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result

firma_config_schema::sidecar::infra::SidecarMode

Enum

Enforcement mode for the sidecar.

enforce (default) is normal fail-closed operation; monitor is observe-only. The monitor-mode opt-in gating lives in firma-sidecar.

Variants:

• Enforce - Normal fail-closed enforcement (default).
• Monitor - Observe-only: classify and log every call, but never block.

Traits: Copy, Eq

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> SidecarMode
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Default
  • fn default() -> SidecarMode
• PartialEq
  • fn eq(self: &Self, other: &SidecarMode) -> bool
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>