import { IComGithubExternalSecretsExternalSecretsApisMetaV1SecretKeySelector } from "../../github.com/external-secrets/external-secrets/apis/meta/v1/SecretKeySelector.js";
import { IComGithubExternalSecretsExternalSecretsApisMetaV1ServiceAccountSelector } from "../../github.com/external-secrets/external-secrets/apis/meta/v1/ServiceAccountSelector.js";
import { ModelData, Model } from "@kubernetes-models/base";
/**
 * Authenticate against Vault using a Kubernetes ServiceAccount token stored in
 * a Secret.
 */
export interface IVaultKubernetesAuth {
    /**
     * Path where the Kubernetes authentication backend is mounted in Vault, e.g:
     * "kubernetes"
     */
    "mountPath": string;
    /**
     * A required field containing the Vault Role to assume. A Role binds a
     * Kubernetes ServiceAccount with a set of Vault policies.
     */
    "role": string;
    /**
     * Optional secret field containing a Kubernetes ServiceAccount JWT used
     * for authenticating with Vault. If a name is specified without a key,
     * `token` is the default. If one is not specified, the one bound to
     * the controller will be used.
     */
    "secretRef"?: IComGithubExternalSecretsExternalSecretsApisMetaV1SecretKeySelector;
    /**
     * Optional service account field containing the name of a kubernetes ServiceAccount.
     * If the service account is specified, the service account secret token JWT will be used
     * for authenticating with Vault. If the service account selector is not supplied,
     * the secretRef will be used instead.
     */
    "serviceAccountRef"?: IComGithubExternalSecretsExternalSecretsApisMetaV1ServiceAccountSelector;
}
/**
 * Authenticate against Vault using a Kubernetes ServiceAccount token stored in
 * a Secret.
 */
export declare class VaultKubernetesAuth extends Model<IVaultKubernetesAuth> implements IVaultKubernetesAuth {
    "mountPath": string;
    "role": string;
    "secretRef"?: IComGithubExternalSecretsExternalSecretsApisMetaV1SecretKeySelector;
    "serviceAccountRef"?: IComGithubExternalSecretsExternalSecretsApisMetaV1ServiceAccountSelector;
    constructor(data?: ModelData<IVaultKubernetesAuth>);
}
export type { IVaultKubernetesAuth as IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultKubernetesAuth, VaultKubernetesAuth as ComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultKubernetesAuth };