Struct DNSSECKeySource 

pub struct DNSSECKeySource {
    pub secret_ref: Option<SecretReference>,
    pub persistent_volume: Option<PersistentVolumeClaimSpec>,
}

DNSSEC key source configuration

Defines where DNSSEC keys are loaded from. Supports multiple patterns:

1. User-Supplied Secret (Production):

   • Keys managed externally (Vault, ExternalSecrets, sealed-secrets)
   • User controls rotation timing
   • GitOps friendly

2. Persistent Storage (Legacy):

   • Keys stored in PersistentVolume
   • Traditional BIND9 pattern

Example: User-Supplied Keys

keysFrom:
  secretRef:
    name: "dnssec-keys-example-com"

Example: Persistent Storage

keysFrom:
  persistentVolume:
    accessModes:
      - ReadWriteOnce
    resources:
      requests:
        storage: 100Mi

Fields

secret_ref: Option<SecretReference>

Secret containing DNSSEC keys

Reference to a Kubernetes Secret with DNSSEC key files.

Secret data format:

• K<zone>.+<alg>+<tag>.key - Public key file
• K<zone>.+<alg>+<tag>.private - Private key file

Example: Kexample.com.+013+12345.key

persistent_volume: Option<PersistentVolumeClaimSpec>

Persistent volume for DNSSEC keys (legacy/compatibility)

Note: Not cloud-native. Use secret_ref for production.

Trait Implementations

impl Clone for DNSSECKeySource

fn clone(&self) -> DNSSECKeySource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DNSSECKeySource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DNSSECKeySource

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for DNSSECKeySource

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for DNSSECKeySource

fn eq(&self, other: &DNSSECKeySource) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DNSSECKeySource

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DNSSECKeySource