clustergenerator-v1alpha1.yaml 7.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. ecrAuthorizationTokenSpec:
  30. auth:
  31. jwt:
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. secretRef:
  37. accessKeyIDSecretRef:
  38. key: string
  39. name: string
  40. namespace: string
  41. secretAccessKeySecretRef:
  42. key: string
  43. name: string
  44. namespace: string
  45. sessionTokenSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. region: string
  50. role: string
  51. scope: string
  52. fakeSpec:
  53. controller: string
  54. data: {}
  55. gcrAccessTokenSpec:
  56. auth:
  57. secretRef:
  58. secretAccessKeySecretRef:
  59. key: string
  60. name: string
  61. namespace: string
  62. workloadIdentity:
  63. clusterLocation: string
  64. clusterName: string
  65. clusterProjectID: string
  66. serviceAccountRef:
  67. audiences: [] # minItems 0 of type string
  68. name: string
  69. namespace: string
  70. projectID: string
  71. githubAccessTokenSpec:
  72. appID: string
  73. auth:
  74. privateKey:
  75. secretRef:
  76. key: string
  77. name: string
  78. namespace: string
  79. installID: string
  80. permissions: {}
  81. repositories: [] # minItems 0 of type string
  82. url: string
  83. grafanaSpec:
  84. auth:
  85. basic:
  86. password:
  87. key: string
  88. name: string
  89. username: string
  90. token:
  91. key: string
  92. name: string
  93. serviceAccount:
  94. name: string
  95. role: string
  96. url: string
  97. mfaSpec:
  98. algorithm: string
  99. length: 1
  100. secret:
  101. key: string
  102. name: string
  103. namespace: string
  104. timePeriod: 1
  105. when: 2024-10-11T12:48:44Z
  106. passwordSpec:
  107. allowRepeat: false
  108. digits: 1
  109. length: 24
  110. noUpper: false
  111. symbolCharacters: string
  112. symbols: 1
  113. quayAccessTokenSpec:
  114. robotAccount: string
  115. serviceAccountRef:
  116. audiences: [] # minItems 0 of type string
  117. name: string
  118. namespace: string
  119. url: string
  120. sshKeySpec:
  121. comment: string
  122. keySize: 256
  123. keyType: "rsa"
  124. stsSessionTokenSpec:
  125. auth:
  126. jwt:
  127. serviceAccountRef:
  128. audiences: [] # minItems 0 of type string
  129. name: string
  130. namespace: string
  131. secretRef:
  132. accessKeyIDSecretRef:
  133. key: string
  134. name: string
  135. namespace: string
  136. secretAccessKeySecretRef:
  137. key: string
  138. name: string
  139. namespace: string
  140. sessionTokenSecretRef:
  141. key: string
  142. name: string
  143. namespace: string
  144. region: string
  145. requestParameters:
  146. serialNumber: string
  147. sessionDuration: 1
  148. tokenCode: string
  149. role: string
  150. uuidSpec: {}
  151. vaultDynamicSecretSpec:
  152. allowEmptyResponse: false
  153. controller: string
  154. method: string
  155. parameters:
  156. path: string
  157. provider:
  158. auth:
  159. appRole:
  160. path: "approle"
  161. roleId: string
  162. roleRef:
  163. key: string
  164. name: string
  165. namespace: string
  166. secretRef:
  167. key: string
  168. name: string
  169. namespace: string
  170. cert:
  171. clientCert:
  172. key: string
  173. name: string
  174. namespace: string
  175. secretRef:
  176. key: string
  177. name: string
  178. namespace: string
  179. iam:
  180. externalID: string
  181. jwt:
  182. serviceAccountRef:
  183. audiences: [] # minItems 0 of type string
  184. name: string
  185. namespace: string
  186. path: string
  187. region: string
  188. role: string
  189. secretRef:
  190. accessKeyIDSecretRef:
  191. key: string
  192. name: string
  193. namespace: string
  194. secretAccessKeySecretRef:
  195. key: string
  196. name: string
  197. namespace: string
  198. sessionTokenSecretRef:
  199. key: string
  200. name: string
  201. namespace: string
  202. vaultAwsIamServerID: string
  203. vaultRole: string
  204. jwt:
  205. kubernetesServiceAccountToken:
  206. audiences: [] # minItems 0 of type string
  207. expirationSeconds: 1
  208. serviceAccountRef:
  209. audiences: [] # minItems 0 of type string
  210. name: string
  211. namespace: string
  212. path: "jwt"
  213. role: string
  214. secretRef:
  215. key: string
  216. name: string
  217. namespace: string
  218. kubernetes:
  219. mountPath: "kubernetes"
  220. role: string
  221. secretRef:
  222. key: string
  223. name: string
  224. namespace: string
  225. serviceAccountRef:
  226. audiences: [] # minItems 0 of type string
  227. name: string
  228. namespace: string
  229. ldap:
  230. path: "ldap"
  231. secretRef:
  232. key: string
  233. name: string
  234. namespace: string
  235. username: string
  236. namespace: string
  237. tokenSecretRef:
  238. key: string
  239. name: string
  240. namespace: string
  241. userPass:
  242. path: "userpass"
  243. secretRef:
  244. key: string
  245. name: string
  246. namespace: string
  247. username: string
  248. caBundle: c3RyaW5n
  249. caProvider:
  250. key: string
  251. name: string
  252. namespace: string
  253. type: "Secret" # "Secret", "ConfigMap"
  254. forwardInconsistent: true
  255. headers: {}
  256. namespace: string
  257. path: string
  258. readYourWrites: true
  259. server: string
  260. tls:
  261. certSecretRef:
  262. key: string
  263. name: string
  264. namespace: string
  265. keySecretRef:
  266. key: string
  267. name: string
  268. namespace: string
  269. version: "v2"
  270. resultType: "Data"
  271. retrySettings:
  272. maxRetries: 1
  273. retryInterval: string
  274. webhookSpec:
  275. auth:
  276. ntlm:
  277. passwordSecret:
  278. key: string
  279. name: string
  280. namespace: string
  281. usernameSecret:
  282. key: string
  283. name: string
  284. namespace: string
  285. body: string
  286. caBundle: c3RyaW5n
  287. caProvider:
  288. key: string
  289. name: string
  290. namespace: string
  291. type: "Secret" # "Secret", "ConfigMap"
  292. headers: {}
  293. method: string
  294. result:
  295. jsonPath: string
  296. secrets:
  297. - name: string
  298. secretRef:
  299. key: string
  300. name: string
  301. timeout: string
  302. url: string
  303. kind: "ACRAccessToken" # "ACRAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"