Struct IssuerVault

pub struct IssuerVault {
    pub auth: IssuerVaultAuth,
    pub ca_bundle: Option<String>,
    pub ca_bundle_secret_ref: Option<IssuerVaultCaBundleSecretRef>,
    pub client_cert_secret_ref: Option<IssuerVaultClientCertSecretRef>,
    pub client_key_secret_ref: Option<IssuerVaultClientKeySecretRef>,
    pub namespace: Option<String>,
    pub path: String,
    pub server: String,
}

Vault configures this issuer to sign certificates using a HashiCorp Vault PKI backend.

Fields

auth: IssuerVaultAuth

Auth configures how cert-manager authenticates with the Vault server.

ca_bundle: Option<String>

Base64-encoded bundle of PEM CAs which will be used to validate the certificate chain presented by Vault. Only used if using HTTPS to connect to Vault and ignored for HTTP connections. Mutually exclusive with CABundleSecretRef. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection.

ca_bundle_secret_ref: Option<IssuerVaultCaBundleSecretRef>

Reference to a Secret containing a bundle of PEM-encoded CAs to use when verifying the certificate chain presented by Vault when using HTTPS. Mutually exclusive with CABundle. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection. If no key for the Secret is specified, cert-manager will default to ‘ca.crt’.

client_cert_secret_ref: Option<IssuerVaultClientCertSecretRef>

Reference to a Secret containing a PEM-encoded Client Certificate to use when the Vault server requires mTLS.

client_key_secret_ref: Option<IssuerVaultClientKeySecretRef>

Reference to a Secret containing a PEM-encoded Client Private Key to use when the Vault server requires mTLS.

namespace: Option<String>

Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: “ns1” More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces

path: String

Path is the mount path of the Vault PKI backend’s sign endpoint, e.g: “my_pki_mount/sign/my-role-name”.

server: String

Server is the connection address for the Vault server, e.g: “https://vault.example.com:8200”.

Trait Implementations

impl Clone for IssuerVault

fn clone(&self) -> IssuerVault

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IssuerVault

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IssuerVault

fn default() -> IssuerVault

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IssuerVault

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IssuerVault

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.