Struct UserManagedKeysConfig

#[non_exhaustive]
pub struct UserManagedKeysConfig {
    pub cluster_ca: String,
    pub etcd_api_ca: String,
    pub etcd_peer_ca: String,
    pub service_account_signing_keys: Vec<String>,
    pub service_account_verification_keys: Vec<String>,
    pub aggregation_ca: String,
    pub control_plane_disk_encryption_key: String,
    pub gkeops_etcd_backup_encryption_key: String,
}

UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

cluster_ca: String

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

etcd_api_ca: String

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

etcd_peer_ca: String

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

service_account_signing_keys: Vec<String>

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

service_account_verification_keys: Vec<String>

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

aggregation_ca: String

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

control_plane_disk_encryption_key: String

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

gkeops_etcd_backup_encryption_key: String

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

Implementations

impl UserManagedKeysConfig

pub fn set_cluster_ca<T: Into<String>>(self, v: T) -> Self

Sets the value of cluster_ca.

pub fn set_etcd_api_ca<T: Into<String>>(self, v: T) -> Self

Sets the value of etcd_api_ca.

pub fn set_etcd_peer_ca<T: Into<String>>(self, v: T) -> Self

Sets the value of etcd_peer_ca.

pub fn set_aggregation_ca<T: Into<String>>(self, v: T) -> Self

Sets the value of aggregation_ca.

pub fn set_control_plane_disk_encryption_key<T: Into<String>>( self, v: T, ) -> Self

Sets the value of control_plane_disk_encryption_key.

pub fn set_gkeops_etcd_backup_encryption_key<T: Into<String>>( self, v: T, ) -> Self

Sets the value of gkeops_etcd_backup_encryption_key.

pub fn set_service_account_signing_keys<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<String>,

Sets the value of service_account_signing_keys.

pub fn set_service_account_verification_keys<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<String>,

Sets the value of service_account_verification_keys.

Trait Implementations

impl Clone for UserManagedKeysConfig

fn clone(&self) -> UserManagedKeysConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserManagedKeysConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for UserManagedKeysConfig

fn default() -> UserManagedKeysConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for UserManagedKeysConfig

where UserManagedKeysConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Message for UserManagedKeysConfig

fn typename() -> &'static str

The typename of this message.

impl PartialEq for UserManagedKeysConfig

fn eq(&self, other: &UserManagedKeysConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for UserManagedKeysConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for UserManagedKeysConfig