Struct Secret 

pub struct Secret {
    pub data: Option<BTreeMap<String, ByteString>>,
    pub immutable: Option<bool>,
    pub metadata: ObjectMeta,
    pub string_data: Option<BTreeMap<String, String>>,
    pub type_: Option<String>,
}

Secret holds secret data of a certain type. The total bytes of the values in the Data field must be less than MaxSecretSize bytes.

Fields

data: Option<BTreeMap<String, ByteString>>

Data contains the secret data. Each key must consist of alphanumeric characters, ‘-’, ‘_’ or ‘.’. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4

immutable: Option<bool>

Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.

metadata: ObjectMeta

Standard object’s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

string_data: Option<BTreeMap<String, String>>

stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.

type_: Option<String>

Used to facilitate programmatic handling of secret data. More info: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types

Trait Implementations

impl Clone for Secret

fn clone(&self) -> Secret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Secret

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl DeepMerge for Secret

fn merge_from(&mut self, other: Secret)

Merge other into self.

impl Default for Secret

fn default() -> Secret

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Secret

fn deserialize<D>( deserializer: D, ) -> Result<Secret, <D as Deserializer<'de>>::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl ListableResource for Secret

const LIST_KIND: &'static str = "SecretList"

The kind of the list type of the resource.

impl Metadata for Secret

type Ty = ObjectMeta

The type of the metadata object.

fn metadata(&self) -> &<Secret as Metadata>::Ty

Gets a reference to the metadata of this resource value.

fn metadata_mut(&mut self) -> &mut <Secret as Metadata>::Ty

Gets a mutable reference to the metadata of this resource value.

impl PartialEq for Secret

fn eq(&self, other: &Secret) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Resource for Secret

const API_VERSION: &'static str = "v1"

The API version of the resource. This is a composite of Resource::GROUP and Resource::VERSION (eg "apiextensions.k8s.io/v1beta1") or just the version for resources without a group (eg "v1").

const GROUP: &'static str = ""

The group of the resource, or the empty string if the resource doesn’t have a group.

const KIND: &'static str = "Secret"

The kind of the resource.

const VERSION: &'static str = "v1"

The version of the resource.

const URL_PATH_SEGMENT: &'static str = "secrets"

The URL path segment used to construct URLs related to this resource.

type Scope = NamespaceResourceScope

Indicates whether the resource is namespace-scoped or cluster-scoped or a subresource.

impl SecretExt for Secret

fn new(name: impl ToString) -> Self

Creates new empty corev1::Secret object

fn immutable(self, yes: bool) -> Self

Set immutability field

fn type(self, type: impl ToString) -> Self

fn data( self, data: impl IntoIterator<Item = (impl ToString, ByteString)>, ) -> Self

fn string_data( self, data: impl IntoIterator<Item = (impl ToString, impl ToString)>, ) -> Self

const SECRET_TYPE_OPAQUE: &str = "Opaque"

SecretTypeOpaque is the default; arbitrary user-defined data

const SECRET_TYPE_SERVICE_ACCOUNT_TOKEN: &str = "kubernetes.io/service-account-token"

SecretTypeServiceAccountToken contains a token that identifies a service account to the API

const SERVICE_ACCOUNT_NAME_KEY: &str = "kubernetes.io/service-account.name"

ServiceAccountNameKey is the key of the required annotation for SecretTypeServiceAccountToken secrets

const SERVICE_ACCOUNT_UID_KEY: &str = "kubernetes.io/service-account.uid"

ServiceAccountUIDKey is the key of the required annotation for SecretTypeServiceAccountToken secrets

const SERVICE_ACCOUNT_TOKEN_KEY: &str = "token"

ServiceAccountTokenKey is the key of the required data for SecretTypeServiceAccountToken secrets

const SERVICE_ACCOUNT_KUBECONFIG_KEY: &str = "kubernetes.kubeconfig"

ServiceAccountKubeconfigKey is the key of the optional kubeconfig data for SecretTypeServiceAccountToken secrets

const SERVICE_ACCOUNT_ROOTCA_KEY: &str = "ca.crt"

ServiceAccountRootCAKey is the key of the optional root certificate authority for SecretTypeServiceAccountToken secrets

const SERVICE_ACCOUNT_NAMESPACE_KEY: &str = "namespace"

ServiceAccountNamespaceKey is the key of the optional namespace to use as the default for namespaced API calls

const SECRET_TYPE_DOCKERCFG: &str = "kubernetes.io/dockercfg"

SecretTypeDockercfg contains a dockercfg file that follows the same format rules as ~/.dockercfg

const DOCKER_CONFIG_KEY: &str = ".dockercfg"

DockerConfigKey is the key of the required data for SecretTypeDockercfg secrets

const SECRET_TYPE_DOCKER_CONFIG_JSON: &str = "kubernetes.io/dockerconfigjson"

SecretTypeDockerConfigJSON contains a dockercfg file that follows the same format rules as ~/.docker/config.json

const DOCKER_CONFIG_JSON_KEY: &str = ".dockerconfigjson"

DockerConfigJSONKey is the key of the required data for SecretTypeDockerConfigJson secrets

const SECRET_TYPE_BASIC_AUTH: &str = "kubernetes.io/basic-auth"

SecretTypeBasicAuth contains data needed for basic authentication.

const BASIC_AUTH_USERNAME_KEY: &str = "username"

BasicAuthUsernameKey is the key of the username for SecretTypeBasicAuth secrets

const BASIC_AUTH_PASSWORD_KEY: &str = "password"

BasicAuthPasswordKey is the key of the password or token for SecretTypeBasicAuth secrets

const SECRET_TYPE_SSH_AUTH: &str = "kubernetes.io/ssh-auth"

SecretTypeSSHAuth contains data needed for SSH authentication.

const SSH_AUTH_PRIVATE_KEY: &str = "ssh-privatekey"

SSHAuthPrivateKey is the key of the required SSH private key for SecretTypeSSHAuth secrets

const SECRET_TYPE_TLS: &str = "kubernetes.io/tls"

SecretTypeTLS contains information about a TLS client or server secret. It is primarily used with TLS termination of the Ingress resource, but may be used in other types.

const TLS_CERT_KEY: &str = "tls.crt"

TLSCertKey is the key for tls certificates in a TLS secret.

const TLS_PRIVATE_KEY_KEY: &str = "tls.key"

TLSPrivateKeyKey is the key for the private key field in a TLS secret.

const SECRET_TYPE_BOOTSTRAP_TOKEN: &str = "bootstrap.kubernetes.io/token"

SecretTypeBootstrapToken is used during the automated bootstrap process (first implemented by kubeadm). It stores tokens that are used to sign well known ConfigMaps. They are used for authn.

fn opaque(name: impl ToString) -> Self

Create new “Opaque” secret object with no data

fn docker_config_json(name: impl ToString, config: impl ToString) -> Self

Create “kubernetes.io/dockerconfigjson” secret with config as plain text (i.e. string_data field)

fn docker_config_json_base64_encoded( name: impl ToString, config: ByteString, ) -> Self

Create “kubernetes.io/dockerconfigjson” secret with config as base64 encoded text (i.e. data field)

fn basic_auth( name: impl ToString, username: impl ToString, password: impl ToString, ) -> Self

Creates new basic authentication secret object

fn ssh_auth(name: impl ToString, private_key: impl ToString) -> Self

Creates new ssh auth secret object

fn image_pull_secret( name: impl ToString, registry: impl ToString, username: impl ToString, password: impl ToString, ) -> Self

Creates new image pull secret object

impl SecretExt2 for Secret

fn image_pull_secret(name: impl ToString, config: impl ToString) -> Self

👎Deprecated since 0.0.54: use SecretExt::docker_config_json instead

Creates new image pull secret object when you already have the .docker/config.json content extracted from some other source (i.e. secret)

impl Serialize for Secret

fn serialize<S>( &self, serializer: S, ) -> Result<<S as Serializer>::Ok, <S as Serializer>::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Secret