Struct IssuerVaultAuthKubernetesServiceAccountRef

pub struct IssuerVaultAuthKubernetesServiceAccountRef {
    pub audiences: Option<Vec<String>>,
    pub name: String,
}

A reference to a service account that will be used to request a bound token (also known as “projected token”). Compared to using “secretRef”, using this field means that you don’t rely on statically bound tokens. To use this field, you must configure an RBAC rule to let cert-manager request a token.

Fields

audiences: Option<Vec<String>>

TokenAudiences is an optional list of extra audiences to include in the token passed to Vault. The default token consisting of the issuer’s namespace and name is always included.

name: String

Name of the ServiceAccount used to request a token.

Trait Implementations

impl Clone for IssuerVaultAuthKubernetesServiceAccountRef

fn clone(&self) -> IssuerVaultAuthKubernetesServiceAccountRef

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IssuerVaultAuthKubernetesServiceAccountRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IssuerVaultAuthKubernetesServiceAccountRef

fn default() -> IssuerVaultAuthKubernetesServiceAccountRef

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IssuerVaultAuthKubernetesServiceAccountRef

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IssuerVaultAuthKubernetesServiceAccountRef

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.