Struct SecondaryConfig 

pub struct SecondaryConfig {
    pub replicas: Option<i32>,
    pub labels: Option<BTreeMap<String, String>>,
    pub service: Option<ServiceConfig>,
    pub allow_transfer: Option<Vec<String>>,
    pub rndc_secret_ref: Option<RndcSecretRef>,
    pub rndc_key: Option<RndcKeyConfig>,
}

Secondary instance configuration

Groups all configuration specific to secondary (replica) DNS instances.

Fields

replicas: Option<i32>

Number of secondary instance replicas (default: 1)

This controls how many replicas each secondary instance in this cluster should have. Can be overridden at the instance level.

labels: Option<BTreeMap<String, String>>

Additional labels to apply to secondary Bind9Instance resources

These labels are propagated from the cluster/provider to all secondary instances. They are merged with standard labels (app.kubernetes.io/*) and can be used for:

• Instance selection via DNSZone.spec.bind9InstancesFrom label selectors
• Pod selectors in network policies
• Monitoring and alerting label filters
• Custom organizational taxonomy

Example:

secondary:
  labels:
    environment: production
    tier: backend
    region: us-west-2

These labels will appear on the Bind9Instance metadata and can be referenced by DNSZone resources using bind9InstancesFrom.selector.matchLabels.

service: Option<ServiceConfig>

Custom Kubernetes Service configuration for secondary instances

Allows full customization of the Kubernetes Service created for secondary DNS servers, including both Service spec fields and metadata annotations.

Annotations are commonly used for:

• MetalLB address pool selection
• Cloud provider load balancer configuration
• External DNS integration
• Linkerd service mesh annotations

Allows different service configurations for primary vs secondary instances. Example: Primaries use LoadBalancer with specific annotations, secondaries use ClusterIP

See PrimaryConfig.service for detailed field documentation.

allow_transfer: Option<Vec<String>>

Allow-transfer ACL for secondary instances

Overrides the default auto-detected Pod CIDR allow-transfer configuration for all secondary instances in this cluster. Use this to restrict or expand which IP addresses can perform zone transfers from secondary servers.

If not specified, defaults to cluster Pod CIDRs (auto-detected from Kubernetes Nodes).

Examples:

• ["10.0.0.0/8"] - Allow transfers from entire 10.x network
• ["any"] - Allow transfers from any IP (public internet)
• [] - Deny all zone transfers (empty list means “none”)

Can be overridden at the instance level via spec.config.allowTransfer.

rndc_secret_ref: Option<RndcSecretRef>

👎Deprecated since 0.6.0: Use rndc_key instead. This field will be removed in v1.0.0

Reference to an existing Kubernetes Secret containing RNDC key for all secondary instances.

If specified, all secondary instances in this cluster will use this existing Secret instead of auto-generating individual secrets. This allows sharing the same RNDC key across all secondary instances.

Can be overridden at the instance level via spec.rndcSecretRef.

rndc_key: Option<RndcKeyConfig>

RNDC key configuration for all secondary instances with lifecycle management.

Supports automatic key rotation, Secret references, and inline Secret specifications. Overrides global RNDC configuration for secondary instances.

Precedence order:

1. Instance level (spec.rndcKey)
2. Role level (spec.primary.rndcKey or spec.secondary.rndcKey)
3. Global level (cluster-wide RNDC configuration)
4. Auto-generated (default)

Can be overridden at the instance level via spec.rndcKey.

Backward compatibility: If both rndc_key and rndc_secret_ref are specified, rndc_key takes precedence. For smooth migration, rndc_secret_ref will continue to work but is deprecated.

Example

secondary:
  replicas: 2
  rndcKey:
    autoRotate: true
    rotateAfter: 720h  # 30 days
    algorithm: hmac-sha256

Trait Implementations

impl Clone for SecondaryConfig

fn clone(&self) -> SecondaryConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecondaryConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecondaryConfig

fn default() -> SecondaryConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecondaryConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for SecondaryConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for SecondaryConfig

fn eq(&self, other: &SecondaryConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecondaryConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecondaryConfig