|
|
@@ -1443,7 +1443,7 @@ should match snapshot of default values:
|
|
|
description: AWS configures this store to sync secrets using AWS Secret Manager provider
|
|
|
properties:
|
|
|
additionalRoles:
|
|
|
- description: AdditionalRoles is a chained list of Role ARNs which the SecretManager provider will sequentially assume before assuming Role
|
|
|
+ description: AdditionalRoles is a chained list of Role ARNs which the provider will sequentially assume before assuming the Role
|
|
|
items:
|
|
|
type: string
|
|
|
type: array
|
|
|
@@ -1522,8 +1522,19 @@ should match snapshot of default values:
|
|
|
description: AWS Region to be used for the provider
|
|
|
type: string
|
|
|
role:
|
|
|
- description: Role is a Role ARN which the SecretManager provider will assume
|
|
|
+ description: Role is a Role ARN which the provider will assume
|
|
|
type: string
|
|
|
+ secretsManager:
|
|
|
+ description: SecretsManager defines how the provider behaves when interacting with AWS SecretsManager
|
|
|
+ properties:
|
|
|
+ forceDeleteWithoutRecovery:
|
|
|
+ description: 'Specifies whether to delete the secret without any recovery window. You can''t use both this parameter and RecoveryWindowInDays in the same call. If you don''t use either, then by default Secrets Manager uses a 30 day recovery window. see: https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-ForceDeleteWithoutRecovery'
|
|
|
+ type: boolean
|
|
|
+ recoveryWindowInDays:
|
|
|
+ description: 'The number of days from 7 to 30 that Secrets Manager waits before permanently deleting the secret. You can''t use both this parameter and ForceDeleteWithoutRecovery in the same call. If you don''t use either, then by default Secrets Manager uses a 30 day recovery window. see: https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-RecoveryWindowInDays'
|
|
|
+ format: int64
|
|
|
+ type: integer
|
|
|
+ type: object
|
|
|
service:
|
|
|
description: Service defines which service should be used to fetch the secrets
|
|
|
enum:
|
|
|
@@ -1544,7 +1555,7 @@ should match snapshot of default values:
|
|
|
type: object
|
|
|
type: array
|
|
|
transitiveTagKeys:
|
|
|
- description: AWS STS assume role transitive session tags. Required when multiple rules are used with SecretStore
|
|
|
+ description: AWS STS assume role transitive session tags. Required when multiple rules are used with the provider
|
|
|
items:
|
|
|
type: string
|
|
|
type: array
|