Struct SecretSpec 

pub struct SecretSpec {
    pub metadata: SecretMetadata,
    pub type_: String,
    pub string_data: Option<BTreeMap<String, String>>,
    pub data: Option<BTreeMap<String, String>>,
}

Kubernetes Secret specification for inline Secret creation.

Used when the operator should create and manage the Secret (with optional rotation). This is a subset of the Kubernetes Secret API focusing on fields relevant for RNDC key management.

Example

secret:
  metadata:
    name: my-rndc-key
    labels:
      app: bindy
      tier: infrastructure
  stringData:
    rndc.key: |
      key "bindy-operator" {
          algorithm hmac-sha256;
          secret "dGVzdHNlY3JldA==";
      };

Fields

metadata: SecretMetadata

Secret metadata (name, labels, annotations).

Required: You must specify metadata.name for the Secret name.

type_: String

Secret type (default: “Opaque”).

For RNDC keys, use the default “Opaque” type.

string_data: Option<BTreeMap<String, String>>

String data (keys and values as strings).

For RNDC keys, you should provide:

• rndc.key: Full BIND9 key file content (required by BIND9)

Optional metadata (auto-populated by operator if omitted):

• key-name: Name of the TSIG key
• algorithm: HMAC algorithm
• secret: Base64-encoded key material

Kubernetes automatically base64-encodes string data when creating the Secret.

data: Option<BTreeMap<String, String>>

Binary data (keys and values as base64 strings).

Alternative to string_data if you want to provide already-base64-encoded values. Most users should use string_data instead for readability.

Trait Implementations

impl Clone for SecretSpec

fn clone(&self) -> SecretSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecretSpec

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for SecretSpec

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for SecretSpec

fn eq(&self, other: &SecretSpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecretSpec

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretSpec