pub struct GatewayTlsBackendClientCertificateRef {
pub group: Option<String>,
pub kind: Option<String>,
pub name: String,
pub namespace: Option<String>,
}Expand description
ClientCertificateRef references an object that contains a client certificate and its associated private key. It can reference standard Kubernetes resources, i.e., Secret, or implementation-specific custom resources.
A ClientCertificateRef is considered invalid if:
-
It refers to a resource that cannot be resolved (e.g., the referenced resource does not exist) or is misconfigured (e.g., a Secret does not contain the keys named
tls.crtandtls.key). In this case, theResolvedRefscondition on the Gateway MUST be set to False with the ReasonInvalidClientCertificateRefand the Message of the Condition MUST indicate why the reference is invalid. -
It refers to a resource in another namespace UNLESS there is a ReferenceGrant in the target namespace that allows the certificate to be attached. If a ReferenceGrant does not allow this reference, the
ResolvedRefscondition on the Gateway MUST be set to False with the ReasonRefNotPermitted.
Implementations MAY choose to perform further validation of the certificate content (e.g., checking expiry or enforcing specific formats). In such cases, an implementation-specific Reason and Message MUST be set.
Support: Core - Reference to a Kubernetes TLS Secret (with the type kubernetes.io/tls).
Support: Implementation-specific - Other resource kinds or Secrets with a
different type (e.g., Opaque).
Fields§
§group: Option<String>Group is the group of the referent. For example, “gateway.networking.k8s.io”. When unspecified or empty string, core API group is inferred.
kind: Option<String>Kind is kind of the referent. For example “Secret”.
name: StringName is the name of the referent.
namespace: Option<String>Namespace is the namespace of the referenced object. When unspecified, the local namespace is inferred.
Note that when a namespace different than the local namespace is specified, a ReferenceGrant object is required in the referent namespace to allow that namespace’s owner to accept the reference. See the ReferenceGrant documentation for details.
Support: Core
Trait Implementations§
Source§impl Clone for GatewayTlsBackendClientCertificateRef
impl Clone for GatewayTlsBackendClientCertificateRef
Source§fn clone(&self) -> GatewayTlsBackendClientCertificateRef
fn clone(&self) -> GatewayTlsBackendClientCertificateRef
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Default for GatewayTlsBackendClientCertificateRef
impl Default for GatewayTlsBackendClientCertificateRef
Source§fn default() -> GatewayTlsBackendClientCertificateRef
fn default() -> GatewayTlsBackendClientCertificateRef
Source§impl<'de> Deserialize<'de> for GatewayTlsBackendClientCertificateRef
impl<'de> Deserialize<'de> for GatewayTlsBackendClientCertificateRef
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl JsonSchema for GatewayTlsBackendClientCertificateRef
impl JsonSchema for GatewayTlsBackendClientCertificateRef
Source§fn schema_id() -> Cow<'static, str>
fn schema_id() -> Cow<'static, str>
Source§fn json_schema(generator: &mut SchemaGenerator) -> Schema
fn json_schema(generator: &mut SchemaGenerator) -> Schema
Source§fn inline_schema() -> bool
fn inline_schema() -> bool
$ref keyword. Read moreSource§impl PartialEq for GatewayTlsBackendClientCertificateRef
impl PartialEq for GatewayTlsBackendClientCertificateRef
Source§fn eq(&self, other: &GatewayTlsBackendClientCertificateRef) -> bool
fn eq(&self, other: &GatewayTlsBackendClientCertificateRef) -> bool
self and other values to be equal, and is used by ==.impl StructuralPartialEq for GatewayTlsBackendClientCertificateRef
Auto Trait Implementations§
impl Freeze for GatewayTlsBackendClientCertificateRef
impl RefUnwindSafe for GatewayTlsBackendClientCertificateRef
impl Send for GatewayTlsBackendClientCertificateRef
impl Sync for GatewayTlsBackendClientCertificateRef
impl Unpin for GatewayTlsBackendClientCertificateRef
impl UnsafeUnpin for GatewayTlsBackendClientCertificateRef
impl UnwindSafe for GatewayTlsBackendClientCertificateRef
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more