v1alpha1

Documentation

Overview

+groupName=config.kubevault.com

Index

• Constants
• Variables
• func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition
• func Kind(kind string) schema.GroupKind
• func Resource(resource string) schema.GroupResource
• type AWSAuthConfig
  • func (in *AWSAuthConfig) DeepCopy() *AWSAuthConfig
  • func (in *AWSAuthConfig) DeepCopyInto(out *AWSAuthConfig)
• type AzureAuthConfig
  • func (in *AzureAuthConfig) DeepCopy() *AzureAuthConfig
  • func (in *AzureAuthConfig) DeepCopyInto(out *AzureAuthConfig)
• type KubernetesAuthConfig
  • func (in *KubernetesAuthConfig) DeepCopy() *KubernetesAuthConfig
  • func (in *KubernetesAuthConfig) DeepCopyInto(out *KubernetesAuthConfig)
• type VaultServerConfiguration
  • func (in *VaultServerConfiguration) DeepCopy() *VaultServerConfiguration
  • func (in *VaultServerConfiguration) DeepCopyInto(out *VaultServerConfiguration)
  • func (in *VaultServerConfiguration) DeepCopyObject() runtime.Object

Constants

const (
	ResourceKindVaultServerConfiguration = "VaultServerConfiguration"
)

Variables

var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder runtime.SchemeBuilder

	AddToScheme = localSchemeBuilder.AddToScheme
)

var SchemeGroupVersion = schema.GroupVersion{Group: config.GroupName, Version: "v1alpha1"}

Functions

func GetOpenAPIDefinitions

func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition

func Kind

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func Resource

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type AWSAuthConfig

type AWSAuthConfig struct {
	// Specifies the header value that required
	// if X-Vault-AWS-IAM-Server-ID Header is set in Vault.
	// +optional
	HeaderValue string `json:"headerValue,omitempty"`
}

AWSAuthConfig contains necessary information for performing AWS authentication to the Vault server.

func (*AWSAuthConfig) DeepCopy

func (in *AWSAuthConfig) DeepCopy() *AWSAuthConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSAuthConfig.

func (*AWSAuthConfig) DeepCopyInto

func (in *AWSAuthConfig) DeepCopyInto(out *AWSAuthConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AzureAuthConfig

type AzureAuthConfig struct {
	// Specifies the subscription ID for the machine
	// that generated the MSI token.
	// +optional
	SubscriptionID string `json:"subscriptionID,omitempty"`

	// Specifies the resource group for the machine
	// that generated the MSI token.
	// +optional
	ResourceGroupName string `json:"resourceGroupName,omitempty"`

	// Specifies the virtual machine name for the machine
	// that generated the MSI token. If VmssName is provided,
	// this value is ignored.
	// +optional
	VmName string `json:"vmName,omitempty"`

	// Specifies the virtual machine scale set name
	// for the machine that generated the MSI token.
	// +optional
	VmssName string `json:"vmssName,omitempty"`
}

AzureAuthConfig contains necessary information for performing Azure authentication to the Vault server.

func (*AzureAuthConfig) DeepCopy

func (in *AzureAuthConfig) DeepCopy() *AzureAuthConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AzureAuthConfig.

func (*AzureAuthConfig) DeepCopyInto

func (in *AzureAuthConfig) DeepCopyInto(out *AzureAuthConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KubernetesAuthConfig

type KubernetesAuthConfig struct {
	// Specifies the service account name
	ServiceAccountName string `json:"serviceAccountName"`

	// Specifies the service account name for token reviewer
	// It has system:auth-delegator permission
	// It's jwt token is used on vault kubernetes auth config
	// +optional
	TokenReviewerServiceAccountName string `json:"tokenReviewerServiceAccountName,omitempty"`

	// Specifies to use pod service account for vault csi driver
	// +optional
	UsePodServiceAccountForCSIDriver bool `json:"usePodServiceAccountForCSIDriver,omitempty"`
}

KubernetesAuthConfiguration contains necessary information for performing Kubernetes authentication to the Vault server.

func (*KubernetesAuthConfig) DeepCopy

func (in *KubernetesAuthConfig) DeepCopy() *KubernetesAuthConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubernetesAuthConfig.

func (*KubernetesAuthConfig) DeepCopyInto

func (in *KubernetesAuthConfig) DeepCopyInto(out *KubernetesAuthConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type VaultServerConfiguration

type VaultServerConfiguration struct {
	// +optional
	metav1.TypeMeta `json:",inline,omitempty"`

	// Specifies the path which is used for authentication by this AppBinding.
	// If vault server is provisioned by KubeVault, this is usually `kubernetes`.
	// +optional
	Path string `json:"path,omitempty"`

	// Specifies the vault role name for policy controller
	// It has permission to create policy in vault
	// +optional
	VaultRole string `json:"vaultRole,omitempty"`

	// Specifies the Kubernetes authentication information
	// +optional
	Kubernetes *KubernetesAuthConfig `json:"kubernetes,omitempty"`

	// Specifies the Azure authentication information
	// +optional
	Azure *AzureAuthConfig `json:"azure,omitempty"`

	// Specifies the AWS authentication information
	// +optional
	AWS *AWSAuthConfig `json:"aws,omitempty"`

	// Specifies the Secret name that contains the token with permission for backup/restore
	// +optional
	BackupTokenSecretRef *core.LocalObjectReference `json:"backupTokenSecretRef,omitempty"`

	// Stash defines backup and restore task definitions.
	// +optional
	Stash appcat.StashAddonSpec `json:"stash,omitempty"`

	// backend storage information for vault
	// +optional
	Backend kubevaultv1alpha2.VaultServerBackend `json:"backend,omitempty"`

	// Unsealer configuration for vault
	// +optional
	Unsealer *kubevaultv1alpha2.UnsealerSpec `json:"unsealer,omitempty"`
}

VaultServerConfiguration defines a Vault Server configuration.

func (*VaultServerConfiguration) DeepCopy

func (in *VaultServerConfiguration) DeepCopy() *VaultServerConfiguration

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultServerConfiguration.

func (*VaultServerConfiguration) DeepCopyInto

func (in *VaultServerConfiguration) DeepCopyInto(out *VaultServerConfiguration)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*VaultServerConfiguration) DeepCopyObject

func (in *VaultServerConfiguration) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.