Struct PrimaryConfig 

pub struct PrimaryConfig {
    pub replicas: Option<i32>,
    pub labels: Option<BTreeMap<String, String>>,
    pub service: Option<ServiceConfig>,
    pub allow_transfer: Option<Vec<String>>,
    pub rndc_secret_ref: Option<RndcSecretRef>,
    pub rndc_key: Option<RndcKeyConfig>,
}

Primary instance configuration

Groups all configuration specific to primary (authoritative) DNS instances.

Fields

replicas: Option<i32>

Number of primary instance replicas (default: 1)

This controls how many replicas each primary instance in this cluster should have. Can be overridden at the instance level.

labels: Option<BTreeMap<String, String>>

Additional labels to apply to primary Bind9Instance resources

These labels are propagated from the cluster/provider to all primary instances. They are merged with standard labels (app.kubernetes.io/*) and can be used for:

• Instance selection via DNSZone.spec.bind9InstancesFrom label selectors
• Pod selectors in network policies
• Monitoring and alerting label filters
• Custom organizational taxonomy

Example:

primary:
  labels:
    environment: production
    tier: frontend
    region: us-east-1

These labels will appear on the Bind9Instance metadata and can be referenced by DNSZone resources using bind9InstancesFrom.selector.matchLabels.

service: Option<ServiceConfig>

Custom Kubernetes Service configuration for primary instances

Allows full customization of the Kubernetes Service created for primary DNS servers, including both Service spec fields and metadata annotations.

Annotations are commonly used for:

• MetalLB address pool selection
• Cloud provider load balancer configuration
• External DNS integration
• Linkerd service mesh annotations

Fields specified here are merged with defaults. Unspecified fields use safe defaults:

• type: ClusterIP (if not specified)
• Ports 53/TCP and 53/UDP (always set)
• Selector matching the instance labels (always set)

allow_transfer: Option<Vec<String>>

Allow-transfer ACL for primary instances

Overrides the default auto-detected Pod CIDR allow-transfer configuration for all primary instances in this cluster. Use this to restrict or expand which IP addresses can perform zone transfers from primary servers.

If not specified, defaults to cluster Pod CIDRs (auto-detected from Kubernetes Nodes).

Examples:

• ["10.0.0.0/8"] - Allow transfers from entire 10.x network
• ["any"] - Allow transfers from any IP (public internet)
• [] - Deny all zone transfers (empty list means “none”)

Can be overridden at the instance level via spec.config.allowTransfer.

rndc_secret_ref: Option<RndcSecretRef>

👎Deprecated since 0.6.0: Use rndc_key instead. This field will be removed in v1.0.0

Reference to an existing Kubernetes Secret containing RNDC key for all primary instances.

If specified, all primary instances in this cluster will use this existing Secret instead of auto-generating individual secrets. This allows sharing the same RNDC key across all primary instances.

Can be overridden at the instance level via spec.rndcSecretRef.

rndc_key: Option<RndcKeyConfig>

RNDC key configuration for all primary instances with lifecycle management.

Supports automatic key rotation, Secret references, and inline Secret specifications. Overrides global RNDC configuration for primary instances.

Precedence order:

1. Instance level (spec.rndcKey)
2. Role level (spec.primary.rndcKey or spec.secondary.rndcKey)
3. Global level (cluster-wide RNDC configuration)
4. Auto-generated (default)

Can be overridden at the instance level via spec.rndcKey.

Backward compatibility: If both rndc_key and rndc_secret_ref are specified, rndc_key takes precedence. For smooth migration, rndc_secret_ref will continue to work but is deprecated.

Example

primary:
  replicas: 1
  rndcKey:
    autoRotate: true
    rotateAfter: 720h  # 30 days
    algorithm: hmac-sha256

Trait Implementations

impl Clone for PrimaryConfig

fn clone(&self) -> PrimaryConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrimaryConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PrimaryConfig

fn default() -> PrimaryConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PrimaryConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for PrimaryConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for PrimaryConfig

fn eq(&self, other: &PrimaryConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PrimaryConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrimaryConfig