## PodCertificateRequestStatus

# Struct PodCertificateRequestStatus

Source

    pub struct PodCertificateRequestStatus {
        pub begin_refresh_at: Option<Time>,
        pub certificate_chain: Option<String>,
        pub conditions: Option<Vec<Condition>>,
        pub not_after: Option<Time>,
        pub not_before: Option<Time>,
    }

Expand description

PodCertificateRequestStatus describes the status of the request, and holds the certificate data if the request is issued.

## Fields§

§`begin_refresh_at: Option<Time>`

beginRefreshAt is the time at which the kubelet should begin trying to refresh the certificate. This field is set via the /status subresource, and must be set at the same time as certificateChain. Once populated, this field is immutable.

This field is only a hint. Kubelet may start refreshing before or after this time if necessary.

§`certificate_chain: Option<String>`

certificateChain is populated with an issued certificate by the signer. This field is set via the /status subresource. Once populated, this field is immutable.

If the certificate signing request is denied, a condition of type “Denied” is added and this field remains empty. If the signer cannot issue the certificate, a condition of type “Failed” is added and this field remains empty.

Validation requirements:

1. certificateChain must consist of one or more PEM-formatted certificates.
2. Each entry must be a valid PEM-wrapped, DER-encoded ASN.1 Certificate as described in section 4 of RFC5280.

If more than one block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes. When projecting the chain into a pod volume, kubelet will drop any data in-between the PEM blocks, as well as any PEM block headers.

§`conditions: Option<Vec<Condition>>`

conditions applied to the request.

The types “Issued”, “Denied”, and “Failed” have special handling. At most one of these conditions may be present, and they must have status “True”.

If the request is denied with `Reason=UnsupportedKeyType`, the signer may suggest a key type that will work in the message field.

§`not_after: Option<Time>`

notAfter is the time at which the certificate expires. The value must be the same as the notAfter value in the leaf certificate in certificateChain. This field is set via the /status subresource. Once populated, it is immutable. The signer must set this field at the same time it sets certificateChain.

§`not_before: Option<Time>`

notBefore is the time at which the certificate becomes valid. The value must be the same as the notBefore value in the leaf certificate in certificateChain. This field is set via the /status subresource. Once populated, it is immutable. The signer must set this field at the same time it sets certificateChain.

## Trait Implementations§

Source§

### impl Clone for PodCertificateRequestStatus

Source§

#### fn clone(&self) -> PodCertificateRequestStatus

Returns a duplicate of the value. Read more
1.0.0 · Source§

#### fn clone_from(&mut self, source: &Self)

Performs copy-assignment from `source`. Read more
Source§

### impl Debug for PodCertificateRequestStatus

Source§

#### fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

### impl DeepMerge for PodCertificateRequestStatus

Source§

#### fn merge_from(&mut self, other: Self)

Merge `other` into `self`.
Source§

### impl Default for PodCertificateRequestStatus

Source§

#### fn default() -> PodCertificateRequestStatus

Returns the “default value” for a type. Read more
Source§

### impl<'de> Deserialize<'de> for PodCertificateRequestStatus

Source§

#### fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

### impl PartialEq for PodCertificateRequestStatus

Source§

#### fn eq(&self, other: &PodCertificateRequestStatus) -> bool

Tests for `self` and `other` values to be equal, and is used by `==`.
1.0.0 · Source§

#### fn ne(&self, other: &Rhs) -> bool

Tests for `!=`. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

### impl Serialize for PodCertificateRequestStatus

Source§

#### fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

### impl StructuralPartialEq for PodCertificateRequestStatus

## Auto Trait Implementations§

§

### impl Freeze for PodCertificateRequestStatus

§

### impl RefUnwindSafe for PodCertificateRequestStatus

§

### impl Send for PodCertificateRequestStatus

§

### impl Sync for PodCertificateRequestStatus

§

### impl Unpin for PodCertificateRequestStatus

§

### impl UnwindSafe for PodCertificateRequestStatus

## Blanket Implementations§

Source§

### impl<T> Any for T
where T: 'static + ?Sized,

Source§

#### fn type_id(&self) -> TypeId

Gets the `TypeId` of `self`. Read more
Source§

### impl<T> Borrow<T> for T
where T: ?Sized,

Source§

#### fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

### impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

#### fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

### impl<T> CloneToUninit for T
where T: Clone,

Source§

#### unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (`clone_to_uninit`)
Performs copy-assignment from `self` to `dest`. Read more
Source§

### impl<T> From<T> for T

Source§

#### fn from(t: T) -> T

Returns the argument unchanged.

Source§

### impl<T, U> Into<U> for T
where U: From<T>,

Source§

#### fn into(self) -> U

Calls `U::from(self)`.

That is, this conversion is whatever the implementation of `From<T> for U` chooses to do.

Source§

### impl<T> ToOwned for T
where T: Clone,

Source§

#### type Owned = T

The resulting type after obtaining ownership.
Source§

#### fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

#### fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

### impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

#### type Error = Infallible

The type returned in the event of a conversion error.
Source§

#### fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

### impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

#### type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

#### fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

### impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,