Struct VolumeProjection 

pub struct VolumeProjection {
    pub cluster_trust_bundle: Option<ClusterTrustBundleProjection>,
    pub config_map: Option<ConfigMapProjection>,
    pub downward_api: Option<DownwardAPIProjection>,
    pub pod_certificate: Option<PodCertificateProjection>,
    pub secret: Option<SecretProjection>,
    pub service_account_token: Option<ServiceAccountTokenProjection>,
}

Projection that may be projected along with other supported volume types. Exactly one of these fields must be set.

Fields

cluster_trust_bundle: Option<ClusterTrustBundleProjection>

ClusterTrustBundle allows a pod to access the .spec.trustBundle field of ClusterTrustBundle objects in an auto-updating file.

Alpha, gated by the ClusterTrustBundleProjection feature gate.

ClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.

Kubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.

config_map: Option<ConfigMapProjection>

configMap information about the configMap data to project

downward_api: Option<DownwardAPIProjection>

downwardAPI information about the downwardAPI data to project

pod_certificate: Option<PodCertificateProjection>

Projects an auto-rotating credential bundle (private key and certificate chain) that the pod can use either as a TLS client or server.

Kubelet generates a private key and uses it to send a PodCertificateRequest to the named signer. Once the signer approves the request and issues a certificate chain, Kubelet writes the key and certificate chain to the pod filesystem. The pod does not start until certificates have been issued for each podCertificate projected volume source in its spec.

Kubelet will begin trying to rotate the certificate at the time indicated by the signer using the PodCertificateRequest.Status.BeginRefreshAt timestamp.

Kubelet can write a single file, indicated by the credentialBundlePath field, or separate files, indicated by the keyPath and certificateChainPath fields.

The credential bundle is a single file in PEM format. The first PEM entry is the private key (in PKCS#8 format), and the remaining PEM entries are the certificate chain issued by the signer (typically, signers will return their certificate chain in leaf-to-root order).

Prefer using the credential bundle format, since your application code can read it atomically. If you use keyPath and certificateChainPath, your application must make two separate file reads. If these coincide with a certificate rotation, it is possible that the private key and leaf certificate you read may not correspond to each other. Your application will need to check for this condition, and re-read until they are consistent.

The named signer controls chooses the format of the certificate it issues; consult the signer implementation’s documentation to learn how to use the certificates it issues.

secret: Option<SecretProjection>

secret information about the secret data to project

service_account_token: Option<ServiceAccountTokenProjection>

serviceAccountToken is information about the serviceAccountToken data to project

Trait Implementations

impl Clone for VolumeProjection

fn clone(&self) -> VolumeProjection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VolumeProjection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DeepMerge for VolumeProjection

fn merge_from(&mut self, other: Self)

Merge other into self.

impl Default for VolumeProjection

fn default() -> VolumeProjection

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for VolumeProjection

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for VolumeProjection

fn eq(&self, other: &VolumeProjection) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for VolumeProjection

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for VolumeProjection