|
|
@@ -135,6 +135,48 @@ spec:
|
|
|
- region
|
|
|
- service
|
|
|
type: object
|
|
|
+ gcpsm:
|
|
|
+ description: GCPSM configures this store to sync secrets using
|
|
|
+ Google Cloud Platform Secret Manager provider
|
|
|
+ properties:
|
|
|
+ auth:
|
|
|
+ description: Auth defines the information necessary to authenticate
|
|
|
+ against GCP
|
|
|
+ properties:
|
|
|
+ secretRef:
|
|
|
+ properties:
|
|
|
+ secretAccessKeySecretRef:
|
|
|
+ description: The SecretAccessKey is used for authentication
|
|
|
+ properties:
|
|
|
+ key:
|
|
|
+ description: The key of the entry in the Secret
|
|
|
+ resource's `data` field to be used. Some instances
|
|
|
+ of this field may be defaulted, in others it
|
|
|
+ may be required.
|
|
|
+ type: string
|
|
|
+ name:
|
|
|
+ description: The name of the Secret resource being
|
|
|
+ referred to.
|
|
|
+ type: string
|
|
|
+ namespace:
|
|
|
+ description: Namespace of the resource being referred
|
|
|
+ to. Ignored if referent is not cluster-scoped.
|
|
|
+ cluster-scoped defaults to the namespace of
|
|
|
+ the referent.
|
|
|
+ type: string
|
|
|
+ required:
|
|
|
+ - name
|
|
|
+ type: object
|
|
|
+ type: object
|
|
|
+ required:
|
|
|
+ - secretRef
|
|
|
+ type: object
|
|
|
+ projectID:
|
|
|
+ description: ProjectID project where secret is located
|
|
|
+ type: string
|
|
|
+ required:
|
|
|
+ - auth
|
|
|
+ type: object
|
|
|
vault:
|
|
|
description: Vault configures this store to sync secrets using
|
|
|
Hashi provider
|