/* Copyright The Kubernetes Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ // Code generated by applyconfiguration-gen. DO NOT EDIT. package v1 // VolumeProjectionApplyConfiguration represents a declarative configuration of the VolumeProjection type for use // with apply. // // Projection that may be projected along with other supported volume types. // Exactly one of these fields must be set. type VolumeProjectionApplyConfiguration struct { // secret information about the secret data to project Secret *SecretProjectionApplyConfiguration `json:"secret,omitempty"` // downwardAPI information about the downwardAPI data to project DownwardAPI *DownwardAPIProjectionApplyConfiguration `json:"downwardAPI,omitempty"` // configMap information about the configMap data to project ConfigMap *ConfigMapProjectionApplyConfiguration `json:"configMap,omitempty"` // serviceAccountToken is information about the serviceAccountToken data to project ServiceAccountToken *ServiceAccountTokenProjectionApplyConfiguration `json:"serviceAccountToken,omitempty"` // ClusterTrustBundle allows a pod to access the `.spec.trustBundle` field // of ClusterTrustBundle objects in an auto-updating file. // // Alpha, gated by the ClusterTrustBundleProjection feature gate. // // ClusterTrustBundle objects can either be selected by name, or by the // combination of signer name and a label selector. // // Kubelet performs aggressive normalization of the PEM contents written // into the pod filesystem. Esoteric PEM features such as inter-block // comments and block headers are stripped. Certificates are deduplicated. // The ordering of certificates within the file is arbitrary, and Kubelet // may change the order over time. ClusterTrustBundle *ClusterTrustBundleProjectionApplyConfiguration `json:"clusterTrustBundle,omitempty"` // Projects an auto-rotating credential bundle (private key and certificate // chain) that the pod can use either as a TLS client or server. // // Kubelet generates a private key and uses it to send a // PodCertificateRequest to the named signer. Once the signer approves the // request and issues a certificate chain, Kubelet writes the key and // certificate chain to the pod filesystem. The pod does not start until // certificates have been issued for each podCertificate projected volume // source in its spec. // // Kubelet will begin trying to rotate the certificate at the time indicated // by the signer using the PodCertificateRequest.Status.BeginRefreshAt // timestamp. // // Kubelet can write a single file, indicated by the credentialBundlePath // field, or separate files, indicated by the keyPath and // certificateChainPath fields. // // The credential bundle is a single file in PEM format. The first PEM // entry is the private key (in PKCS#8 format), and the remaining PEM // entries are the certificate chain issued by the signer (typically, // signers will return their certificate chain in leaf-to-root order). // // Prefer using the credential bundle format, since your application code // can read it atomically. If you use keyPath and certificateChainPath, // your application must make two separate file reads. If these coincide // with a certificate rotation, it is possible that the private key and leaf // certificate you read may not correspond to each other. Your application // will need to check for this condition, and re-read until they are // consistent. // // The named signer controls chooses the format of the certificate it // issues; consult the signer implementation's documentation to learn how to // use the certificates it issues. PodCertificate *PodCertificateProjectionApplyConfiguration `json:"podCertificate,omitempty"` } // VolumeProjectionApplyConfiguration constructs a declarative configuration of the VolumeProjection type for use with // apply. func VolumeProjection() *VolumeProjectionApplyConfiguration { return &VolumeProjectionApplyConfiguration{} } // WithSecret sets the Secret field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the Secret field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithSecret(value *SecretProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.Secret = value return b } // WithDownwardAPI sets the DownwardAPI field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the DownwardAPI field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithDownwardAPI(value *DownwardAPIProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.DownwardAPI = value return b } // WithConfigMap sets the ConfigMap field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the ConfigMap field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithConfigMap(value *ConfigMapProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.ConfigMap = value return b } // WithServiceAccountToken sets the ServiceAccountToken field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the ServiceAccountToken field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithServiceAccountToken(value *ServiceAccountTokenProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.ServiceAccountToken = value return b } // WithClusterTrustBundle sets the ClusterTrustBundle field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the ClusterTrustBundle field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithClusterTrustBundle(value *ClusterTrustBundleProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.ClusterTrustBundle = value return b } // WithPodCertificate sets the PodCertificate field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the PodCertificate field is set to the value of the last call. func (b *VolumeProjectionApplyConfiguration) WithPodCertificate(value *PodCertificateProjectionApplyConfiguration) *VolumeProjectionApplyConfiguration { b.PodCertificate = value return b }