Struct SecretClassBackendKerberosKeytabAdminActiveDirectory 

pub struct SecretClassBackendKerberosKeytabAdminActiveDirectory {
    pub experimental_generate_sam_account_name: Option<SecretClassBackendKerberosKeytabAdminActiveDirectoryExperimentalGenerateSamAccountName>,
    pub ldap_server: String,
    pub ldap_tls_ca_secret: SecretClassBackendKerberosKeytabAdminActiveDirectoryLdapTlsCaSecret,
    pub password_cache_secret: SecretClassBackendKerberosKeytabAdminActiveDirectoryPasswordCacheSecret,
    pub schema_distinguished_name: String,
    pub user_distinguished_name: String,
}

Credentials should be provisioned in a Microsoft Active Directory domain.

Fields

experimental_generate_sam_account_name: Option<SecretClassBackendKerberosKeytabAdminActiveDirectoryExperimentalGenerateSamAccountName>

Allows samAccountName generation for new accounts to be customized. Note that setting this field (even if empty) makes the Secret Operator take over the generation duty from the domain controller.

ldap_server: String

An AD LDAP server, such as the AD Domain Controller. This must match the server’s FQDN, or GSSAPI authentication will fail.

ldap_tls_ca_secret: SecretClassBackendKerberosKeytabAdminActiveDirectoryLdapTlsCaSecret

Reference (name and namespace) to a Kubernetes Secret object containing the TLS CA (in ca.crt) that the LDAP server’s certificate should be authenticated against.

password_cache_secret: SecretClassBackendKerberosKeytabAdminActiveDirectoryPasswordCacheSecret

Reference (name and namespace) to a Kubernetes Secret object where workload passwords will be stored. This must not be accessible to end users.

schema_distinguished_name: String

The root Distinguished Name (DN) for AD-managed schemas, typically CN=Schema,CN=Configuration,{domain_dn}.

user_distinguished_name: String

The root Distinguished Name (DN) where service accounts should be provisioned, typically CN=Users,{domain_dn}.

Trait Implementations

impl Clone for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn clone(&self) -> SecretClassBackendKerberosKeytabAdminActiveDirectory

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn default() -> SecretClassBackendKerberosKeytabAdminActiveDirectory

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn eq( &self, other: &SecretClassBackendKerberosKeytabAdminActiveDirectory, ) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecretClassBackendKerberosKeytabAdminActiveDirectory

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretClassBackendKerberosKeytabAdminActiveDirectory