Struct IssuerVaultAuthKubernetes

pub struct IssuerVaultAuthKubernetes {
    pub mount_path: Option<String>,
    pub role: String,
    pub secret_ref: Option<IssuerVaultAuthKubernetesSecretRef>,
    pub service_account_ref: Option<IssuerVaultAuthKubernetesServiceAccountRef>,
}

Kubernetes authenticates with Vault by passing the ServiceAccount token stored in the named Secret resource to the Vault server.

Fields

mount_path: Option<String>

The Vault mountPath here is the mount path to use when authenticating with Vault. For example, setting a value to /v1/auth/foo, will use the path /v1/auth/foo/login to authenticate with Vault. If unspecified, the default value “/v1/auth/kubernetes” will be used.

role: String

A required field containing the Vault Role to assume. A Role binds a Kubernetes ServiceAccount with a set of Vault policies.

secret_ref: Option<IssuerVaultAuthKubernetesSecretRef>

The required Secret field containing a Kubernetes ServiceAccount JWT used for authenticating with Vault. Use of ‘ambient credentials’ is not supported.

service_account_ref: Option<IssuerVaultAuthKubernetesServiceAccountRef>

A reference to a service account that will be used to request a bound token (also known as “projected token”). Compared to using “secretRef”, using this field means that you don’t rely on statically bound tokens. To use this field, you must configure an RBAC rule to let cert-manager request a token.

Trait Implementations

impl Clone for IssuerVaultAuthKubernetes

fn clone(&self) -> IssuerVaultAuthKubernetes

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IssuerVaultAuthKubernetes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IssuerVaultAuthKubernetes

fn default() -> IssuerVaultAuthKubernetes

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IssuerVaultAuthKubernetes

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IssuerVaultAuthKubernetes

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.