Struct controller::cloudnativepg::clusters::ClusterStatusCertificates

pub struct ClusterStatusCertificates {
    pub client_ca_secret: Option<String>,
    pub expirations: Option<BTreeMap<String, String>>,
    pub replication_tls_secret: Option<String>,
    pub server_alt_dns_names: Option<Vec<String>>,
    pub server_ca_secret: Option<String>,
    pub server_tls_secret: Option<String>,
}

The configuration for the CA and related certificates, initialized with defaults.

Fields

client_ca_secret: Option<String>

The secret containing the Client CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate all the client certificates.

Contains:

- ca.crt: CA that should be used to validate the client certificates, used as ssl_ca_file of all the instances.
- ca.key: key used to generate client certificates, if ReplicationTLSSecret is provided, this can be omitted.

expirations: Option<BTreeMap<String, String>>

Expiration dates for all certificates.

replication_tls_secret: Option<String>

The secret of type kubernetes.io/tls containing the client certificate to authenticate as the streaming_replica user. If not defined, ClientCASecret must provide also ca.key, and a new secret will be created using the provided CA.

server_alt_dns_names: Option<Vec<String>>

The list of the server alternative DNS names to be added to the generated server TLS certificates, when required.

server_ca_secret: Option<String>

The secret containing the Server CA certificate. If not defined, a new secret will be created with a self-signed CA and will be used to generate the TLS certificate ServerTLSSecret.

Contains:

- ca.crt: CA that should be used to validate the server certificate, used as sslrootcert in client connection strings.
- ca.key: key used to generate Server SSL certs, if ServerTLSSecret is provided, this can be omitted.

server_tls_secret: Option<String>

The secret of type kubernetes.io/tls containing the server TLS certificate and key that will be set as ssl_cert_file and ssl_key_file so that clients can connect to postgres securely. If not defined, ServerCASecret must provide also ca.key and a new secret will be created using the provided CA.

Trait Implementations

impl Clone for ClusterStatusCertificates

fn clone(&self) -> ClusterStatusCertificates

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClusterStatusCertificates

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClusterStatusCertificates

fn default() -> ClusterStatusCertificates

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ClusterStatusCertificates

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for ClusterStatusCertificates

fn schema_name() -> String

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(gen: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn is_referenceable() -> bool

Whether JSON Schemas generated for this type should be re-used where possible using the $ref keyword.

impl Serialize for ClusterStatusCertificates

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.