Struct DelegationPolicy 

pub struct DelegationPolicy {
    pub rules: Vec<(Name, Name)>,
    pub allow_new_devices: bool,
}

A policy based on explicit delegation rules.

Each rule maps a requester name pattern to a set of allowed sub-prefixes.

Fields

rules: Vec<(Name, Name)>

List of (requester_prefix, allowed_name_prefix) pairs.

allow_new_devices: bool

Whether to allow new devices (no cert) to request under any rule’s allowed prefix.

Implementations

impl DelegationPolicy

pub fn new() -> Self

pub fn allow(self, requester_prefix: Name, allowed_prefix: Name) -> Self

Allow requester under requester_prefix to get certs under allowed_prefix.

Trait Implementations

impl Default for DelegationPolicy

fn default() -> Self

Returns the “default value” for a type.

impl NamespacePolicy for DelegationPolicy

fn evaluate( &self, requested_name: &Name, requester_cert: Option<&Certificate>, _ca_prefix: &Name, ) -> PolicyDecision

Evaluate whether requested_name may be issued to a requester holding requester_cert (may be None for the first enrollment).