index.html 56 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683
  1. <!doctype html>
  2. <html lang="en" class="no-js">
  3. <head>
  4. <meta charset="utf-8">
  5. <meta name="viewport" content="width=device-width,initial-scale=1">
  6. <link rel="icon" href="../assets/images/favicon.png">
  7. <meta name="generator" content="mkdocs-1.1, mkdocs-material-7.1.8">
  8. <title>API specification - External Secrets Operator</title>
  9. <link rel="stylesheet" href="../assets/stylesheets/main.ca7ac06f.min.css">
  10. <link rel="stylesheet" href="../assets/stylesheets/palette.f1a3b89f.min.css">
  11. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  12. <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,400,400i,700%7CRoboto+Mono&display=fallback">
  13. <style>:root{--md-text-font-family:"Roboto";--md-code-font-family:"Roboto Mono"}</style>
  14. <script>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[],gtag("js",new Date),gtag("config","G-QP38TD8K7V"),document.addEventListener("DOMContentLoaded",function(){"undefined"!=typeof location$&&location$.subscribe(function(t){gtag("config","G-QP38TD8K7V",{page_path:t.pathname})})})</script>
  15. <script async src="https://www.googletagmanager.com/gtag/js?id=G-QP38TD8K7V"></script>
  16. </head>
  17. <body dir="ltr" data-md-color-scheme="" data-md-color-primary="none" data-md-color-accent="none">
  18. <script>function __prefix(e){return new URL("..",location).pathname+"."+e}function __get(e,t=localStorage){return JSON.parse(t.getItem(__prefix(e)))}</script>
  19. <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
  20. <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
  21. <label class="md-overlay" for="__drawer"></label>
  22. <div data-md-component="skip">
  23. </div>
  24. <div data-md-component="announce">
  25. </div>
  26. <header class="md-header" data-md-component="header">
  27. <nav class="md-header__inner md-grid" aria-label="Header">
  28. <a href=".." title="External Secrets Operator" class="md-header__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  29. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54z"/></svg>
  30. </a>
  31. <label class="md-header__button md-icon" for="__drawer">
  32. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3V6m0 5h18v2H3v-2m0 5h18v2H3v-2z"/></svg>
  33. </label>
  34. <div class="md-header__title" data-md-component="header-title">
  35. <div class="md-header__ellipsis">
  36. <div class="md-header__topic">
  37. <span class="md-ellipsis">
  38. External Secrets Operator
  39. </span>
  40. </div>
  41. <div class="md-header__topic" data-md-component="header-topic">
  42. <span class="md-ellipsis">
  43. API specification
  44. </span>
  45. </div>
  46. </div>
  47. </div>
  48. <label class="md-header__button md-icon" for="__search">
  49. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5z"/></svg>
  50. </label>
  51. <div class="md-search" data-md-component="search" role="dialog">
  52. <label class="md-search__overlay" for="__search"></label>
  53. <div class="md-search__inner" role="search">
  54. <form class="md-search__form" name="search">
  55. <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" data-md-state="active" required>
  56. <label class="md-search__icon md-icon" for="__search">
  57. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5z"/></svg>
  58. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12z"/></svg>
  59. </label>
  60. <button type="reset" class="md-search__icon md-icon" aria-label="Clear" tabindex="-1">
  61. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12 19 6.41z"/></svg>
  62. </button>
  63. </form>
  64. <div class="md-search__output">
  65. <div class="md-search__scrollwrap" data-md-scrollfix>
  66. <div class="md-search-result" data-md-component="search-result">
  67. <div class="md-search-result__meta">
  68. Initializing search
  69. </div>
  70. <ol class="md-search-result__list"></ol>
  71. </div>
  72. </div>
  73. </div>
  74. </div>
  75. </div>
  76. <div class="md-header__source">
  77. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-component="source">
  78. <div class="md-source__icon md-icon">
  79. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81z"/></svg>
  80. </div>
  81. <div class="md-source__repository">
  82. External Secrets Operator
  83. </div>
  84. </a>
  85. </div>
  86. </nav>
  87. </header>
  88. <div class="md-container" data-md-component="container">
  89. <main class="md-main" data-md-component="main">
  90. <div class="md-main__inner md-grid">
  91. <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
  92. <div class="md-sidebar__scrollwrap">
  93. <div class="md-sidebar__inner">
  94. <nav class="md-nav md-nav--primary" aria-label="Navigation" data-md-level="0">
  95. <label class="md-nav__title" for="__drawer">
  96. <a href=".." title="External Secrets Operator" class="md-nav__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  97. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54z"/></svg>
  98. </a>
  99. External Secrets Operator
  100. </label>
  101. <div class="md-nav__source">
  102. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-component="source">
  103. <div class="md-source__icon md-icon">
  104. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81z"/></svg>
  105. </div>
  106. <div class="md-source__repository">
  107. External Secrets Operator
  108. </div>
  109. </a>
  110. </div>
  111. <ul class="md-nav__list" data-md-scrollfix>
  112. <li class="md-nav__item">
  113. <a href=".." class="md-nav__link">
  114. Introduction
  115. </a>
  116. </li>
  117. <li class="md-nav__item">
  118. <a href="../api-overview/" class="md-nav__link">
  119. Overview
  120. </a>
  121. </li>
  122. <li class="md-nav__item md-nav__item--nested">
  123. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3" type="checkbox" id="__nav_3" >
  124. <label class="md-nav__link" for="__nav_3">
  125. API Types
  126. <span class="md-nav__icon md-icon"></span>
  127. </label>
  128. <nav class="md-nav" aria-label="API Types" data-md-level="1">
  129. <label class="md-nav__title" for="__nav_3">
  130. <span class="md-nav__icon md-icon"></span>
  131. API Types
  132. </label>
  133. <ul class="md-nav__list" data-md-scrollfix>
  134. <li class="md-nav__item">
  135. <a href="../api-externalsecret/" class="md-nav__link">
  136. ExternalSecret
  137. </a>
  138. </li>
  139. <li class="md-nav__item">
  140. <a href="../api-secretstore/" class="md-nav__link">
  141. SecretStore
  142. </a>
  143. </li>
  144. <li class="md-nav__item">
  145. <a href="../api-clustersecretstore/" class="md-nav__link">
  146. ClusterSecretStore
  147. </a>
  148. </li>
  149. </ul>
  150. </nav>
  151. </li>
  152. <li class="md-nav__item md-nav__item--nested">
  153. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_4" type="checkbox" id="__nav_4" >
  154. <label class="md-nav__link" for="__nav_4">
  155. Guides
  156. <span class="md-nav__icon md-icon"></span>
  157. </label>
  158. <nav class="md-nav" aria-label="Guides" data-md-level="1">
  159. <label class="md-nav__title" for="__nav_4">
  160. <span class="md-nav__icon md-icon"></span>
  161. Guides
  162. </label>
  163. <ul class="md-nav__list" data-md-scrollfix>
  164. <li class="md-nav__item">
  165. <a href="../guides-introduction/" class="md-nav__link">
  166. Introduction
  167. </a>
  168. </li>
  169. <li class="md-nav__item">
  170. <a href="../guides-getting-started/" class="md-nav__link">
  171. Getting started
  172. </a>
  173. </li>
  174. <li class="md-nav__item">
  175. <a href="../guides-templating/" class="md-nav__link">
  176. Advanced Templating
  177. </a>
  178. </li>
  179. <li class="md-nav__item">
  180. <a href="../guides-multi-tenancy/" class="md-nav__link">
  181. Multi Tenancy
  182. </a>
  183. </li>
  184. <li class="md-nav__item">
  185. <a href="../guides-metrics/" class="md-nav__link">
  186. Metrics
  187. </a>
  188. </li>
  189. </ul>
  190. </nav>
  191. </li>
  192. <li class="md-nav__item md-nav__item--nested">
  193. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_5" type="checkbox" id="__nav_5" >
  194. <label class="md-nav__link" for="__nav_5">
  195. Provider
  196. <span class="md-nav__icon md-icon"></span>
  197. </label>
  198. <nav class="md-nav" aria-label="Provider" data-md-level="1">
  199. <label class="md-nav__title" for="__nav_5">
  200. <span class="md-nav__icon md-icon"></span>
  201. Provider
  202. </label>
  203. <ul class="md-nav__list" data-md-scrollfix>
  204. <li class="md-nav__item md-nav__item--nested">
  205. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_5_1" type="checkbox" id="__nav_5_1" >
  206. <label class="md-nav__link" for="__nav_5_1">
  207. AWS
  208. <span class="md-nav__icon md-icon"></span>
  209. </label>
  210. <nav class="md-nav" aria-label="AWS" data-md-level="2">
  211. <label class="md-nav__title" for="__nav_5_1">
  212. <span class="md-nav__icon md-icon"></span>
  213. AWS
  214. </label>
  215. <ul class="md-nav__list" data-md-scrollfix>
  216. <li class="md-nav__item">
  217. <a href="../provider-aws-secrets-manager/" class="md-nav__link">
  218. Secrets Manager
  219. </a>
  220. </li>
  221. <li class="md-nav__item">
  222. <a href="../provider-aws-parameter-store/" class="md-nav__link">
  223. Parameter Store
  224. </a>
  225. </li>
  226. </ul>
  227. </nav>
  228. </li>
  229. <li class="md-nav__item md-nav__item--nested">
  230. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_5_2" type="checkbox" id="__nav_5_2" >
  231. <label class="md-nav__link" for="__nav_5_2">
  232. Azure
  233. <span class="md-nav__icon md-icon"></span>
  234. </label>
  235. <nav class="md-nav" aria-label="Azure" data-md-level="2">
  236. <label class="md-nav__title" for="__nav_5_2">
  237. <span class="md-nav__icon md-icon"></span>
  238. Azure
  239. </label>
  240. <ul class="md-nav__list" data-md-scrollfix>
  241. <li class="md-nav__item">
  242. <a href="../provider-azure-key-vault/" class="md-nav__link">
  243. Key Vault
  244. </a>
  245. </li>
  246. </ul>
  247. </nav>
  248. </li>
  249. <li class="md-nav__item md-nav__item--nested">
  250. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_5_3" type="checkbox" id="__nav_5_3" >
  251. <label class="md-nav__link" for="__nav_5_3">
  252. Google
  253. <span class="md-nav__icon md-icon"></span>
  254. </label>
  255. <nav class="md-nav" aria-label="Google" data-md-level="2">
  256. <label class="md-nav__title" for="__nav_5_3">
  257. <span class="md-nav__icon md-icon"></span>
  258. Google
  259. </label>
  260. <ul class="md-nav__list" data-md-scrollfix>
  261. <li class="md-nav__item">
  262. <a href="../provider-google-secrets-manager/" class="md-nav__link">
  263. Secrets Manager
  264. </a>
  265. </li>
  266. </ul>
  267. </nav>
  268. </li>
  269. <li class="md-nav__item">
  270. <a href="../provider-hashicorp-vault/" class="md-nav__link">
  271. HashiCorp Vault
  272. </a>
  273. </li>
  274. </ul>
  275. </nav>
  276. </li>
  277. <li class="md-nav__item md-nav__item--active md-nav__item--nested">
  278. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_6" type="checkbox" id="__nav_6" checked>
  279. <label class="md-nav__link" for="__nav_6">
  280. References
  281. <span class="md-nav__icon md-icon"></span>
  282. </label>
  283. <nav class="md-nav" aria-label="References" data-md-level="1">
  284. <label class="md-nav__title" for="__nav_6">
  285. <span class="md-nav__icon md-icon"></span>
  286. References
  287. </label>
  288. <ul class="md-nav__list" data-md-scrollfix>
  289. <li class="md-nav__item md-nav__item--active">
  290. <input class="md-nav__toggle md-toggle" data-md-toggle="toc" type="checkbox" id="__toc">
  291. <a href="./" class="md-nav__link md-nav__link--active">
  292. API specification
  293. </a>
  294. </li>
  295. </ul>
  296. </nav>
  297. </li>
  298. <li class="md-nav__item md-nav__item--nested">
  299. <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_7" type="checkbox" id="__nav_7" >
  300. <label class="md-nav__link" for="__nav_7">
  301. Contributing
  302. <span class="md-nav__icon md-icon"></span>
  303. </label>
  304. <nav class="md-nav" aria-label="Contributing" data-md-level="1">
  305. <label class="md-nav__title" for="__nav_7">
  306. <span class="md-nav__icon md-icon"></span>
  307. Contributing
  308. </label>
  309. <ul class="md-nav__list" data-md-scrollfix>
  310. <li class="md-nav__item">
  311. <a href="../contributing-devguide/" class="md-nav__link">
  312. Developer guide
  313. </a>
  314. </li>
  315. <li class="md-nav__item">
  316. <a href="../contributing-process/" class="md-nav__link">
  317. Contributing Process
  318. </a>
  319. </li>
  320. <li class="md-nav__item">
  321. <a href="../contributing-coc/" class="md-nav__link">
  322. Code of Conduct
  323. </a>
  324. </li>
  325. </ul>
  326. </nav>
  327. </li>
  328. </ul>
  329. </nav>
  330. </div>
  331. </div>
  332. </div>
  333. <div class="md-content" data-md-component="content">
  334. <article class="md-content__inner md-typeset">
  335. <a href="https://github.com/external-secrets/external-secrets/edit/master/docs/spec.md" title="Edit this page" class="md-content__button md-icon">
  336. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20.71 7.04c.39-.39.39-1.04 0-1.41l-2.34-2.34c-.37-.39-1.02-.39-1.41 0l-1.84 1.83 3.75 3.75M3 17.25V21h3.75L17.81 9.93l-3.75-3.75L3 17.25z"/></svg>
  337. </a>
  338. <h1>API specification</h1>
  339. <p>Packages:</p>
  340. <ul>
  341. <li>
  342. <a href="#external-secrets.io%2fv1alpha1">external-secrets.io/v1alpha1</a>
  343. </li>
  344. </ul>
  345. <h2 id="external-secrets.io/v1alpha1">external-secrets.io/v1alpha1</h2>
  346. <p>
  347. <p>Package v1alpha1 contains resources for external-secrets</p>
  348. </p>
  349. <p>Resource Types:
  350. <ul></ul>
  351. <h3 id="external-secrets.io/v1alpha1.AWSAuth">AWSAuth
  352. </h3>
  353. <p>
  354. (<em>Appears on:</em>
  355. <a href="#external-secrets.io/v1alpha1.AWSProvider">AWSProvider</a>)
  356. </p>
  357. <p>
  358. <p>AWSAuth contains a secretRef for credentials.</p>
  359. </p>
  360. <table>
  361. <thead>
  362. <tr>
  363. <th>Field</th>
  364. <th>Description</th>
  365. </tr>
  366. </thead>
  367. <tbody>
  368. <tr>
  369. <td>
  370. <code>secretRef</code></br>
  371. <em>
  372. <a href="#external-secrets.io/v1alpha1.AWSAuthSecretRef">
  373. AWSAuthSecretRef
  374. </a>
  375. </em>
  376. </td>
  377. <td>
  378. </td>
  379. </tr>
  380. </tbody>
  381. </table>
  382. <h3 id="external-secrets.io/v1alpha1.AWSAuthSecretRef">AWSAuthSecretRef
  383. </h3>
  384. <p>
  385. (<em>Appears on:</em>
  386. <a href="#external-secrets.io/v1alpha1.AWSAuth">AWSAuth</a>)
  387. </p>
  388. <p>
  389. <p>AWSAuthSecretRef holds secret references for aws credentials
  390. both AccessKeyID and SecretAccessKey must be defined in order to properly authenticate.</p>
  391. </p>
  392. <table>
  393. <thead>
  394. <tr>
  395. <th>Field</th>
  396. <th>Description</th>
  397. </tr>
  398. </thead>
  399. <tbody>
  400. <tr>
  401. <td>
  402. <code>accessKeyIDSecretRef</code></br>
  403. <em>
  404. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  405. </em>
  406. </td>
  407. <td>
  408. <p>The AccessKeyID is used for authentication</p>
  409. </td>
  410. </tr>
  411. <tr>
  412. <td>
  413. <code>secretAccessKeySecretRef</code></br>
  414. <em>
  415. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  416. </em>
  417. </td>
  418. <td>
  419. <p>The SecretAccessKey is used for authentication</p>
  420. </td>
  421. </tr>
  422. </tbody>
  423. </table>
  424. <h3 id="external-secrets.io/v1alpha1.AWSProvider">AWSProvider
  425. </h3>
  426. <p>
  427. (<em>Appears on:</em>
  428. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  429. </p>
  430. <p>
  431. <p>AWSProvider configures a store to sync secrets with AWS.</p>
  432. </p>
  433. <table>
  434. <thead>
  435. <tr>
  436. <th>Field</th>
  437. <th>Description</th>
  438. </tr>
  439. </thead>
  440. <tbody>
  441. <tr>
  442. <td>
  443. <code>service</code></br>
  444. <em>
  445. <a href="#external-secrets.io/v1alpha1.AWSServiceType">
  446. AWSServiceType
  447. </a>
  448. </em>
  449. </td>
  450. <td>
  451. <p>Service defines which service should be used to fetch the secrets</p>
  452. </td>
  453. </tr>
  454. <tr>
  455. <td>
  456. <code>auth</code></br>
  457. <em>
  458. <a href="#external-secrets.io/v1alpha1.AWSAuth">
  459. AWSAuth
  460. </a>
  461. </em>
  462. </td>
  463. <td>
  464. <em>(Optional)</em>
  465. <p>Auth defines the information necessary to authenticate against AWS
  466. if not set aws sdk will infer credentials from your environment
  467. see: <a href="https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials">https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials</a></p>
  468. </td>
  469. </tr>
  470. <tr>
  471. <td>
  472. <code>role</code></br>
  473. <em>
  474. string
  475. </em>
  476. </td>
  477. <td>
  478. <em>(Optional)</em>
  479. <p>Role is a Role ARN which the SecretManager provider will assume</p>
  480. </td>
  481. </tr>
  482. <tr>
  483. <td>
  484. <code>region</code></br>
  485. <em>
  486. string
  487. </em>
  488. </td>
  489. <td>
  490. <p>AWS Region to be used for the provider</p>
  491. </td>
  492. </tr>
  493. </tbody>
  494. </table>
  495. <h3 id="external-secrets.io/v1alpha1.AWSServiceType">AWSServiceType
  496. (<code>string</code> alias)</p></h3>
  497. <p>
  498. (<em>Appears on:</em>
  499. <a href="#external-secrets.io/v1alpha1.AWSProvider">AWSProvider</a>)
  500. </p>
  501. <p>
  502. <p>AWSServiceType is a enum that defines the service/API that is used to fetch the secrets.</p>
  503. </p>
  504. <table>
  505. <thead>
  506. <tr>
  507. <th>Value</th>
  508. <th>Description</th>
  509. </tr>
  510. </thead>
  511. <tbody><tr><td><p>&#34;ParameterStore&#34;</p></td>
  512. <td><p>AWSServiceParameterStore is the AWS SystemsManager ParameterStore.
  513. see: <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html">https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html</a></p>
  514. </td>
  515. </tr><tr><td><p>&#34;SecretsManager&#34;</p></td>
  516. <td><p>AWSServiceSecretsManager is the AWS SecretsManager.
  517. see: <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html">https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html</a></p>
  518. </td>
  519. </tr></tbody>
  520. </table>
  521. <h3 id="external-secrets.io/v1alpha1.AzureKVAuth">AzureKVAuth
  522. </h3>
  523. <p>
  524. (<em>Appears on:</em>
  525. <a href="#external-secrets.io/v1alpha1.AzureKVProvider">AzureKVProvider</a>)
  526. </p>
  527. <p>
  528. <p>Configuration used to authenticate with Azure.</p>
  529. </p>
  530. <table>
  531. <thead>
  532. <tr>
  533. <th>Field</th>
  534. <th>Description</th>
  535. </tr>
  536. </thead>
  537. <tbody>
  538. <tr>
  539. <td>
  540. <code>clientId</code></br>
  541. <em>
  542. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  543. </em>
  544. </td>
  545. <td>
  546. <p>The Azure clientId of the service principle used for authentication.</p>
  547. </td>
  548. </tr>
  549. <tr>
  550. <td>
  551. <code>clientSecret</code></br>
  552. <em>
  553. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  554. </em>
  555. </td>
  556. <td>
  557. <p>The Azure ClientSecret of the service principle used for authentication.</p>
  558. </td>
  559. </tr>
  560. </tbody>
  561. </table>
  562. <h3 id="external-secrets.io/v1alpha1.AzureKVProvider">AzureKVProvider
  563. </h3>
  564. <p>
  565. (<em>Appears on:</em>
  566. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  567. </p>
  568. <p>
  569. <p>Configures an store to sync secrets using Azure KV.</p>
  570. </p>
  571. <table>
  572. <thead>
  573. <tr>
  574. <th>Field</th>
  575. <th>Description</th>
  576. </tr>
  577. </thead>
  578. <tbody>
  579. <tr>
  580. <td>
  581. <code>vaultUrl</code></br>
  582. <em>
  583. string
  584. </em>
  585. </td>
  586. <td>
  587. <p>Vault Url from which the secrets to be fetched from.</p>
  588. </td>
  589. </tr>
  590. <tr>
  591. <td>
  592. <code>tenantId</code></br>
  593. <em>
  594. string
  595. </em>
  596. </td>
  597. <td>
  598. <p>TenantID configures the Azure Tenant to send requests to.</p>
  599. </td>
  600. </tr>
  601. <tr>
  602. <td>
  603. <code>authSecretRef</code></br>
  604. <em>
  605. <a href="#external-secrets.io/v1alpha1.AzureKVAuth">
  606. AzureKVAuth
  607. </a>
  608. </em>
  609. </td>
  610. <td>
  611. <p>Auth configures how the operator authenticates with Azure.</p>
  612. </td>
  613. </tr>
  614. </tbody>
  615. </table>
  616. <h3 id="external-secrets.io/v1alpha1.ClusterSecretStore">ClusterSecretStore
  617. </h3>
  618. <p>
  619. <p>ClusterSecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  620. </p>
  621. <table>
  622. <thead>
  623. <tr>
  624. <th>Field</th>
  625. <th>Description</th>
  626. </tr>
  627. </thead>
  628. <tbody>
  629. <tr>
  630. <td>
  631. <code>metadata</code></br>
  632. <em>
  633. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  634. Kubernetes meta/v1.ObjectMeta
  635. </a>
  636. </em>
  637. </td>
  638. <td>
  639. Refer to the Kubernetes API documentation for the fields of the
  640. <code>metadata</code> field.
  641. </td>
  642. </tr>
  643. <tr>
  644. <td>
  645. <code>spec</code></br>
  646. <em>
  647. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">
  648. SecretStoreSpec
  649. </a>
  650. </em>
  651. </td>
  652. <td>
  653. <br/>
  654. <br/>
  655. <table>
  656. <tr>
  657. <td>
  658. <code>controller</code></br>
  659. <em>
  660. string
  661. </em>
  662. </td>
  663. <td>
  664. <em>(Optional)</em>
  665. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  666. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  667. </td>
  668. </tr>
  669. <tr>
  670. <td>
  671. <code>provider</code></br>
  672. <em>
  673. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  674. SecretStoreProvider
  675. </a>
  676. </em>
  677. </td>
  678. <td>
  679. <p>Used to configure the provider. Only one provider may be set</p>
  680. </td>
  681. </tr>
  682. </table>
  683. </td>
  684. </tr>
  685. </tbody>
  686. </table>
  687. <h3 id="external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret
  688. </h3>
  689. <p>
  690. <p>ExternalSecret is the Schema for the external-secrets API.</p>
  691. </p>
  692. <table>
  693. <thead>
  694. <tr>
  695. <th>Field</th>
  696. <th>Description</th>
  697. </tr>
  698. </thead>
  699. <tbody>
  700. <tr>
  701. <td>
  702. <code>metadata</code></br>
  703. <em>
  704. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  705. Kubernetes meta/v1.ObjectMeta
  706. </a>
  707. </em>
  708. </td>
  709. <td>
  710. Refer to the Kubernetes API documentation for the fields of the
  711. <code>metadata</code> field.
  712. </td>
  713. </tr>
  714. <tr>
  715. <td>
  716. <code>spec</code></br>
  717. <em>
  718. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">
  719. ExternalSecretSpec
  720. </a>
  721. </em>
  722. </td>
  723. <td>
  724. <br/>
  725. <br/>
  726. <table>
  727. <tr>
  728. <td>
  729. <code>secretStoreRef</code></br>
  730. <em>
  731. <a href="#external-secrets.io/v1alpha1.SecretStoreRef">
  732. SecretStoreRef
  733. </a>
  734. </em>
  735. </td>
  736. <td>
  737. </td>
  738. </tr>
  739. <tr>
  740. <td>
  741. <code>target</code></br>
  742. <em>
  743. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">
  744. ExternalSecretTarget
  745. </a>
  746. </em>
  747. </td>
  748. <td>
  749. </td>
  750. </tr>
  751. <tr>
  752. <td>
  753. <code>refreshInterval</code></br>
  754. <em>
  755. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#duration-v1-meta">
  756. Kubernetes meta/v1.Duration
  757. </a>
  758. </em>
  759. </td>
  760. <td>
  761. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider
  762. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  763. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  764. </td>
  765. </tr>
  766. <tr>
  767. <td>
  768. <code>data</code></br>
  769. <em>
  770. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">
  771. []ExternalSecretData
  772. </a>
  773. </em>
  774. </td>
  775. <td>
  776. <em>(Optional)</em>
  777. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  778. </td>
  779. </tr>
  780. <tr>
  781. <td>
  782. <code>dataFrom</code></br>
  783. <em>
  784. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  785. []ExternalSecretDataRemoteRef
  786. </a>
  787. </em>
  788. </td>
  789. <td>
  790. <em>(Optional)</em>
  791. <p>DataFrom is used to fetch all properties from a specific Provider data
  792. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  793. </td>
  794. </tr>
  795. </table>
  796. </td>
  797. </tr>
  798. <tr>
  799. <td>
  800. <code>status</code></br>
  801. <em>
  802. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatus">
  803. ExternalSecretStatus
  804. </a>
  805. </em>
  806. </td>
  807. <td>
  808. </td>
  809. </tr>
  810. </tbody>
  811. </table>
  812. <h3 id="external-secrets.io/v1alpha1.ExternalSecretConditionType">ExternalSecretConditionType
  813. (<code>string</code> alias)</p></h3>
  814. <p>
  815. (<em>Appears on:</em>
  816. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatusCondition">ExternalSecretStatusCondition</a>)
  817. </p>
  818. <p>
  819. </p>
  820. <table>
  821. <thead>
  822. <tr>
  823. <th>Value</th>
  824. <th>Description</th>
  825. </tr>
  826. </thead>
  827. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  828. <td></td>
  829. </tr></tbody>
  830. </table>
  831. <h3 id="external-secrets.io/v1alpha1.ExternalSecretCreationPolicy">ExternalSecretCreationPolicy
  832. (<code>string</code> alias)</p></h3>
  833. <p>
  834. (<em>Appears on:</em>
  835. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget</a>)
  836. </p>
  837. <p>
  838. <p>ExternalSecretCreationPolicy defines rules on how to create the resulting Secret.</p>
  839. </p>
  840. <table>
  841. <thead>
  842. <tr>
  843. <th>Value</th>
  844. <th>Description</th>
  845. </tr>
  846. </thead>
  847. <tbody><tr><td><p>&#34;Merge&#34;</p></td>
  848. <td><p>Merge does not create the Secret, but merges the data fields to the Secret.</p>
  849. </td>
  850. </tr><tr><td><p>&#34;None&#34;</p></td>
  851. <td><p>None does not create a Secret (future use with injector).</p>
  852. </td>
  853. </tr><tr><td><p>&#34;Owner&#34;</p></td>
  854. <td><p>Owner creates the Secret and sets .metadata.ownerReferences to the ExternalSecret resource.</p>
  855. </td>
  856. </tr></tbody>
  857. </table>
  858. <h3 id="external-secrets.io/v1alpha1.ExternalSecretData">ExternalSecretData
  859. </h3>
  860. <p>
  861. (<em>Appears on:</em>
  862. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  863. </p>
  864. <p>
  865. <p>ExternalSecretData defines the connection between the Kubernetes Secret key (spec.data.<key>) and the Provider data.</p>
  866. </p>
  867. <table>
  868. <thead>
  869. <tr>
  870. <th>Field</th>
  871. <th>Description</th>
  872. </tr>
  873. </thead>
  874. <tbody>
  875. <tr>
  876. <td>
  877. <code>secretKey</code></br>
  878. <em>
  879. string
  880. </em>
  881. </td>
  882. <td>
  883. </td>
  884. </tr>
  885. <tr>
  886. <td>
  887. <code>remoteRef</code></br>
  888. <em>
  889. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  890. ExternalSecretDataRemoteRef
  891. </a>
  892. </em>
  893. </td>
  894. <td>
  895. </td>
  896. </tr>
  897. </tbody>
  898. </table>
  899. <h3 id="external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef
  900. </h3>
  901. <p>
  902. (<em>Appears on:</em>
  903. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">ExternalSecretData</a>,
  904. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  905. </p>
  906. <p>
  907. <p>ExternalSecretDataRemoteRef defines Provider data location.</p>
  908. </p>
  909. <table>
  910. <thead>
  911. <tr>
  912. <th>Field</th>
  913. <th>Description</th>
  914. </tr>
  915. </thead>
  916. <tbody>
  917. <tr>
  918. <td>
  919. <code>key</code></br>
  920. <em>
  921. string
  922. </em>
  923. </td>
  924. <td>
  925. <p>Key is the key used in the Provider, mandatory</p>
  926. </td>
  927. </tr>
  928. <tr>
  929. <td>
  930. <code>version</code></br>
  931. <em>
  932. string
  933. </em>
  934. </td>
  935. <td>
  936. <em>(Optional)</em>
  937. <p>Used to select a specific version of the Provider value, if supported</p>
  938. </td>
  939. </tr>
  940. <tr>
  941. <td>
  942. <code>property</code></br>
  943. <em>
  944. string
  945. </em>
  946. </td>
  947. <td>
  948. <em>(Optional)</em>
  949. <p>Used to select a specific property of the Provider value (if a map), if supported</p>
  950. </td>
  951. </tr>
  952. </tbody>
  953. </table>
  954. <h3 id="external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec
  955. </h3>
  956. <p>
  957. (<em>Appears on:</em>
  958. <a href="#external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret</a>)
  959. </p>
  960. <p>
  961. <p>ExternalSecretSpec defines the desired state of ExternalSecret.</p>
  962. </p>
  963. <table>
  964. <thead>
  965. <tr>
  966. <th>Field</th>
  967. <th>Description</th>
  968. </tr>
  969. </thead>
  970. <tbody>
  971. <tr>
  972. <td>
  973. <code>secretStoreRef</code></br>
  974. <em>
  975. <a href="#external-secrets.io/v1alpha1.SecretStoreRef">
  976. SecretStoreRef
  977. </a>
  978. </em>
  979. </td>
  980. <td>
  981. </td>
  982. </tr>
  983. <tr>
  984. <td>
  985. <code>target</code></br>
  986. <em>
  987. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">
  988. ExternalSecretTarget
  989. </a>
  990. </em>
  991. </td>
  992. <td>
  993. </td>
  994. </tr>
  995. <tr>
  996. <td>
  997. <code>refreshInterval</code></br>
  998. <em>
  999. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#duration-v1-meta">
  1000. Kubernetes meta/v1.Duration
  1001. </a>
  1002. </em>
  1003. </td>
  1004. <td>
  1005. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider
  1006. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  1007. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  1008. </td>
  1009. </tr>
  1010. <tr>
  1011. <td>
  1012. <code>data</code></br>
  1013. <em>
  1014. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">
  1015. []ExternalSecretData
  1016. </a>
  1017. </em>
  1018. </td>
  1019. <td>
  1020. <em>(Optional)</em>
  1021. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  1022. </td>
  1023. </tr>
  1024. <tr>
  1025. <td>
  1026. <code>dataFrom</code></br>
  1027. <em>
  1028. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  1029. []ExternalSecretDataRemoteRef
  1030. </a>
  1031. </em>
  1032. </td>
  1033. <td>
  1034. <em>(Optional)</em>
  1035. <p>DataFrom is used to fetch all properties from a specific Provider data
  1036. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  1037. </td>
  1038. </tr>
  1039. </tbody>
  1040. </table>
  1041. <h3 id="external-secrets.io/v1alpha1.ExternalSecretStatus">ExternalSecretStatus
  1042. </h3>
  1043. <p>
  1044. (<em>Appears on:</em>
  1045. <a href="#external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret</a>)
  1046. </p>
  1047. <p>
  1048. </p>
  1049. <table>
  1050. <thead>
  1051. <tr>
  1052. <th>Field</th>
  1053. <th>Description</th>
  1054. </tr>
  1055. </thead>
  1056. <tbody>
  1057. <tr>
  1058. <td>
  1059. <code>refreshTime</code></br>
  1060. <em>
  1061. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  1062. Kubernetes meta/v1.Time
  1063. </a>
  1064. </em>
  1065. </td>
  1066. <td>
  1067. <p>refreshTime is the time and date the external secret was fetched and
  1068. the target secret updated</p>
  1069. </td>
  1070. </tr>
  1071. <tr>
  1072. <td>
  1073. <code>conditions</code></br>
  1074. <em>
  1075. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatusCondition">
  1076. []ExternalSecretStatusCondition
  1077. </a>
  1078. </em>
  1079. </td>
  1080. <td>
  1081. <em>(Optional)</em>
  1082. </td>
  1083. </tr>
  1084. </tbody>
  1085. </table>
  1086. <h3 id="external-secrets.io/v1alpha1.ExternalSecretStatusCondition">ExternalSecretStatusCondition
  1087. </h3>
  1088. <p>
  1089. (<em>Appears on:</em>
  1090. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatus">ExternalSecretStatus</a>)
  1091. </p>
  1092. <p>
  1093. </p>
  1094. <table>
  1095. <thead>
  1096. <tr>
  1097. <th>Field</th>
  1098. <th>Description</th>
  1099. </tr>
  1100. </thead>
  1101. <tbody>
  1102. <tr>
  1103. <td>
  1104. <code>type</code></br>
  1105. <em>
  1106. <a href="#external-secrets.io/v1alpha1.ExternalSecretConditionType">
  1107. ExternalSecretConditionType
  1108. </a>
  1109. </em>
  1110. </td>
  1111. <td>
  1112. </td>
  1113. </tr>
  1114. <tr>
  1115. <td>
  1116. <code>status</code></br>
  1117. <em>
  1118. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#conditionstatus-v1-core">
  1119. Kubernetes core/v1.ConditionStatus
  1120. </a>
  1121. </em>
  1122. </td>
  1123. <td>
  1124. </td>
  1125. </tr>
  1126. <tr>
  1127. <td>
  1128. <code>reason</code></br>
  1129. <em>
  1130. string
  1131. </em>
  1132. </td>
  1133. <td>
  1134. <em>(Optional)</em>
  1135. </td>
  1136. </tr>
  1137. <tr>
  1138. <td>
  1139. <code>message</code></br>
  1140. <em>
  1141. string
  1142. </em>
  1143. </td>
  1144. <td>
  1145. <em>(Optional)</em>
  1146. </td>
  1147. </tr>
  1148. <tr>
  1149. <td>
  1150. <code>lastTransitionTime</code></br>
  1151. <em>
  1152. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  1153. Kubernetes meta/v1.Time
  1154. </a>
  1155. </em>
  1156. </td>
  1157. <td>
  1158. <em>(Optional)</em>
  1159. </td>
  1160. </tr>
  1161. </tbody>
  1162. </table>
  1163. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget
  1164. </h3>
  1165. <p>
  1166. (<em>Appears on:</em>
  1167. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  1168. </p>
  1169. <p>
  1170. <p>ExternalSecretTarget defines the Kubernetes Secret to be created
  1171. There can be only one target per ExternalSecret.</p>
  1172. </p>
  1173. <table>
  1174. <thead>
  1175. <tr>
  1176. <th>Field</th>
  1177. <th>Description</th>
  1178. </tr>
  1179. </thead>
  1180. <tbody>
  1181. <tr>
  1182. <td>
  1183. <code>name</code></br>
  1184. <em>
  1185. string
  1186. </em>
  1187. </td>
  1188. <td>
  1189. <em>(Optional)</em>
  1190. <p>Name defines the name of the Secret resource to be managed
  1191. This field is immutable
  1192. Defaults to the .metadata.name of the ExternalSecret resource</p>
  1193. </td>
  1194. </tr>
  1195. <tr>
  1196. <td>
  1197. <code>creationPolicy</code></br>
  1198. <em>
  1199. <a href="#external-secrets.io/v1alpha1.ExternalSecretCreationPolicy">
  1200. ExternalSecretCreationPolicy
  1201. </a>
  1202. </em>
  1203. </td>
  1204. <td>
  1205. <em>(Optional)</em>
  1206. <p>CreationPolicy defines rules on how to create the resulting Secret
  1207. Defaults to &lsquo;Owner&rsquo;</p>
  1208. </td>
  1209. </tr>
  1210. <tr>
  1211. <td>
  1212. <code>template</code></br>
  1213. <em>
  1214. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplate">
  1215. ExternalSecretTemplate
  1216. </a>
  1217. </em>
  1218. </td>
  1219. <td>
  1220. <em>(Optional)</em>
  1221. <p>Template defines a blueprint for the created Secret resource.</p>
  1222. </td>
  1223. </tr>
  1224. </tbody>
  1225. </table>
  1226. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTemplate">ExternalSecretTemplate
  1227. </h3>
  1228. <p>
  1229. (<em>Appears on:</em>
  1230. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget</a>)
  1231. </p>
  1232. <p>
  1233. <p>ExternalSecretTemplate defines a blueprint for the created Secret resource.
  1234. we can not use native corev1.Secret, it will have empty ObjectMeta values: <a href="https://github.com/kubernetes-sigs/controller-tools/issues/448">https://github.com/kubernetes-sigs/controller-tools/issues/448</a></p>
  1235. </p>
  1236. <table>
  1237. <thead>
  1238. <tr>
  1239. <th>Field</th>
  1240. <th>Description</th>
  1241. </tr>
  1242. </thead>
  1243. <tbody>
  1244. <tr>
  1245. <td>
  1246. <code>type</code></br>
  1247. <em>
  1248. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#secrettype-v1-core">
  1249. Kubernetes core/v1.SecretType
  1250. </a>
  1251. </em>
  1252. </td>
  1253. <td>
  1254. <em>(Optional)</em>
  1255. </td>
  1256. </tr>
  1257. <tr>
  1258. <td>
  1259. <code>metadata</code></br>
  1260. <em>
  1261. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplateMetadata">
  1262. ExternalSecretTemplateMetadata
  1263. </a>
  1264. </em>
  1265. </td>
  1266. <td>
  1267. <em>(Optional)</em>
  1268. </td>
  1269. </tr>
  1270. <tr>
  1271. <td>
  1272. <code>data</code></br>
  1273. <em>
  1274. map[string]string
  1275. </em>
  1276. </td>
  1277. <td>
  1278. <em>(Optional)</em>
  1279. </td>
  1280. </tr>
  1281. </tbody>
  1282. </table>
  1283. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTemplateMetadata">ExternalSecretTemplateMetadata
  1284. </h3>
  1285. <p>
  1286. (<em>Appears on:</em>
  1287. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  1288. </p>
  1289. <p>
  1290. <p>ExternalSecretTemplateMetadata defines metadata fields for the Secret blueprint.</p>
  1291. </p>
  1292. <table>
  1293. <thead>
  1294. <tr>
  1295. <th>Field</th>
  1296. <th>Description</th>
  1297. </tr>
  1298. </thead>
  1299. <tbody>
  1300. <tr>
  1301. <td>
  1302. <code>annotations</code></br>
  1303. <em>
  1304. map[string]string
  1305. </em>
  1306. </td>
  1307. <td>
  1308. <em>(Optional)</em>
  1309. </td>
  1310. </tr>
  1311. <tr>
  1312. <td>
  1313. <code>labels</code></br>
  1314. <em>
  1315. map[string]string
  1316. </em>
  1317. </td>
  1318. <td>
  1319. <em>(Optional)</em>
  1320. </td>
  1321. </tr>
  1322. </tbody>
  1323. </table>
  1324. <h3 id="external-secrets.io/v1alpha1.GCPSMAuth">GCPSMAuth
  1325. </h3>
  1326. <p>
  1327. (<em>Appears on:</em>
  1328. <a href="#external-secrets.io/v1alpha1.GCPSMProvider">GCPSMProvider</a>)
  1329. </p>
  1330. <p>
  1331. </p>
  1332. <table>
  1333. <thead>
  1334. <tr>
  1335. <th>Field</th>
  1336. <th>Description</th>
  1337. </tr>
  1338. </thead>
  1339. <tbody>
  1340. <tr>
  1341. <td>
  1342. <code>secretRef</code></br>
  1343. <em>
  1344. <a href="#external-secrets.io/v1alpha1.GCPSMAuthSecretRef">
  1345. GCPSMAuthSecretRef
  1346. </a>
  1347. </em>
  1348. </td>
  1349. <td>
  1350. </td>
  1351. </tr>
  1352. </tbody>
  1353. </table>
  1354. <h3 id="external-secrets.io/v1alpha1.GCPSMAuthSecretRef">GCPSMAuthSecretRef
  1355. </h3>
  1356. <p>
  1357. (<em>Appears on:</em>
  1358. <a href="#external-secrets.io/v1alpha1.GCPSMAuth">GCPSMAuth</a>)
  1359. </p>
  1360. <p>
  1361. </p>
  1362. <table>
  1363. <thead>
  1364. <tr>
  1365. <th>Field</th>
  1366. <th>Description</th>
  1367. </tr>
  1368. </thead>
  1369. <tbody>
  1370. <tr>
  1371. <td>
  1372. <code>secretAccessKeySecretRef</code></br>
  1373. <em>
  1374. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1375. </em>
  1376. </td>
  1377. <td>
  1378. <em>(Optional)</em>
  1379. <p>The SecretAccessKey is used for authentication</p>
  1380. </td>
  1381. </tr>
  1382. </tbody>
  1383. </table>
  1384. <h3 id="external-secrets.io/v1alpha1.GCPSMProvider">GCPSMProvider
  1385. </h3>
  1386. <p>
  1387. (<em>Appears on:</em>
  1388. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  1389. </p>
  1390. <p>
  1391. <p>GCPSMProvider Configures a store to sync secrets using the GCP Secret Manager provider.</p>
  1392. </p>
  1393. <table>
  1394. <thead>
  1395. <tr>
  1396. <th>Field</th>
  1397. <th>Description</th>
  1398. </tr>
  1399. </thead>
  1400. <tbody>
  1401. <tr>
  1402. <td>
  1403. <code>auth</code></br>
  1404. <em>
  1405. <a href="#external-secrets.io/v1alpha1.GCPSMAuth">
  1406. GCPSMAuth
  1407. </a>
  1408. </em>
  1409. </td>
  1410. <td>
  1411. <p>Auth defines the information necessary to authenticate against GCP</p>
  1412. </td>
  1413. </tr>
  1414. <tr>
  1415. <td>
  1416. <code>projectID</code></br>
  1417. <em>
  1418. string
  1419. </em>
  1420. </td>
  1421. <td>
  1422. <p>ProjectID project where secret is located</p>
  1423. </td>
  1424. </tr>
  1425. </tbody>
  1426. </table>
  1427. <h3 id="external-secrets.io/v1alpha1.GenericStore">GenericStore
  1428. </h3>
  1429. <p>
  1430. <p>GenericStore is a common interface for interacting with ClusterSecretStore
  1431. or a namespaced SecretStore.</p>
  1432. </p>
  1433. <h3 id="external-secrets.io/v1alpha1.SecretStore">SecretStore
  1434. </h3>
  1435. <p>
  1436. <p>SecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  1437. </p>
  1438. <table>
  1439. <thead>
  1440. <tr>
  1441. <th>Field</th>
  1442. <th>Description</th>
  1443. </tr>
  1444. </thead>
  1445. <tbody>
  1446. <tr>
  1447. <td>
  1448. <code>metadata</code></br>
  1449. <em>
  1450. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  1451. Kubernetes meta/v1.ObjectMeta
  1452. </a>
  1453. </em>
  1454. </td>
  1455. <td>
  1456. Refer to the Kubernetes API documentation for the fields of the
  1457. <code>metadata</code> field.
  1458. </td>
  1459. </tr>
  1460. <tr>
  1461. <td>
  1462. <code>spec</code></br>
  1463. <em>
  1464. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">
  1465. SecretStoreSpec
  1466. </a>
  1467. </em>
  1468. </td>
  1469. <td>
  1470. <br/>
  1471. <br/>
  1472. <table>
  1473. <tr>
  1474. <td>
  1475. <code>controller</code></br>
  1476. <em>
  1477. string
  1478. </em>
  1479. </td>
  1480. <td>
  1481. <em>(Optional)</em>
  1482. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  1483. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  1484. </td>
  1485. </tr>
  1486. <tr>
  1487. <td>
  1488. <code>provider</code></br>
  1489. <em>
  1490. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  1491. SecretStoreProvider
  1492. </a>
  1493. </em>
  1494. </td>
  1495. <td>
  1496. <p>Used to configure the provider. Only one provider may be set</p>
  1497. </td>
  1498. </tr>
  1499. </table>
  1500. </td>
  1501. </tr>
  1502. <tr>
  1503. <td>
  1504. <code>status</code></br>
  1505. <em>
  1506. <a href="#external-secrets.io/v1alpha1.SecretStoreStatus">
  1507. SecretStoreStatus
  1508. </a>
  1509. </em>
  1510. </td>
  1511. <td>
  1512. </td>
  1513. </tr>
  1514. </tbody>
  1515. </table>
  1516. <h3 id="external-secrets.io/v1alpha1.SecretStoreConditionType">SecretStoreConditionType
  1517. (<code>string</code> alias)</p></h3>
  1518. <p>
  1519. (<em>Appears on:</em>
  1520. <a href="#external-secrets.io/v1alpha1.SecretStoreStatusCondition">SecretStoreStatusCondition</a>)
  1521. </p>
  1522. <p>
  1523. </p>
  1524. <table>
  1525. <thead>
  1526. <tr>
  1527. <th>Value</th>
  1528. <th>Description</th>
  1529. </tr>
  1530. </thead>
  1531. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  1532. <td></td>
  1533. </tr></tbody>
  1534. </table>
  1535. <h3 id="external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider
  1536. </h3>
  1537. <p>
  1538. (<em>Appears on:</em>
  1539. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">SecretStoreSpec</a>)
  1540. </p>
  1541. <p>
  1542. <p>SecretStoreProvider contains the provider-specific configration.</p>
  1543. </p>
  1544. <table>
  1545. <thead>
  1546. <tr>
  1547. <th>Field</th>
  1548. <th>Description</th>
  1549. </tr>
  1550. </thead>
  1551. <tbody>
  1552. <tr>
  1553. <td>
  1554. <code>aws</code></br>
  1555. <em>
  1556. <a href="#external-secrets.io/v1alpha1.AWSProvider">
  1557. AWSProvider
  1558. </a>
  1559. </em>
  1560. </td>
  1561. <td>
  1562. <em>(Optional)</em>
  1563. <p>AWS configures this store to sync secrets using AWS Secret Manager provider</p>
  1564. </td>
  1565. </tr>
  1566. <tr>
  1567. <td>
  1568. <code>azurekv</code></br>
  1569. <em>
  1570. <a href="#external-secrets.io/v1alpha1.AzureKVProvider">
  1571. AzureKVProvider
  1572. </a>
  1573. </em>
  1574. </td>
  1575. <td>
  1576. <em>(Optional)</em>
  1577. <p>AzureKV configures this store to sync secrets using Azure Key Vault provider</p>
  1578. </td>
  1579. </tr>
  1580. <tr>
  1581. <td>
  1582. <code>vault</code></br>
  1583. <em>
  1584. <a href="#external-secrets.io/v1alpha1.VaultProvider">
  1585. VaultProvider
  1586. </a>
  1587. </em>
  1588. </td>
  1589. <td>
  1590. <em>(Optional)</em>
  1591. <p>Vault configures this store to sync secrets using Hashi provider</p>
  1592. </td>
  1593. </tr>
  1594. <tr>
  1595. <td>
  1596. <code>gcpsm</code></br>
  1597. <em>
  1598. <a href="#external-secrets.io/v1alpha1.GCPSMProvider">
  1599. GCPSMProvider
  1600. </a>
  1601. </em>
  1602. </td>
  1603. <td>
  1604. <em>(Optional)</em>
  1605. <p>GCPSM configures this store to sync secrets using Google Cloud Platform Secret Manager provider</p>
  1606. </td>
  1607. </tr>
  1608. </tbody>
  1609. </table>
  1610. <h3 id="external-secrets.io/v1alpha1.SecretStoreRef">SecretStoreRef
  1611. </h3>
  1612. <p>
  1613. (<em>Appears on:</em>
  1614. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  1615. </p>
  1616. <p>
  1617. <p>SecretStoreRef defines which SecretStore to fetch the ExternalSecret data.</p>
  1618. </p>
  1619. <table>
  1620. <thead>
  1621. <tr>
  1622. <th>Field</th>
  1623. <th>Description</th>
  1624. </tr>
  1625. </thead>
  1626. <tbody>
  1627. <tr>
  1628. <td>
  1629. <code>name</code></br>
  1630. <em>
  1631. string
  1632. </em>
  1633. </td>
  1634. <td>
  1635. <p>Name of the SecretStore resource</p>
  1636. </td>
  1637. </tr>
  1638. <tr>
  1639. <td>
  1640. <code>kind</code></br>
  1641. <em>
  1642. string
  1643. </em>
  1644. </td>
  1645. <td>
  1646. <em>(Optional)</em>
  1647. <p>Kind of the SecretStore resource (SecretStore or ClusterSecretStore)
  1648. Defaults to <code>SecretStore</code></p>
  1649. </td>
  1650. </tr>
  1651. </tbody>
  1652. </table>
  1653. <h3 id="external-secrets.io/v1alpha1.SecretStoreSpec">SecretStoreSpec
  1654. </h3>
  1655. <p>
  1656. (<em>Appears on:</em>
  1657. <a href="#external-secrets.io/v1alpha1.ClusterSecretStore">ClusterSecretStore</a>,
  1658. <a href="#external-secrets.io/v1alpha1.SecretStore">SecretStore</a>)
  1659. </p>
  1660. <p>
  1661. <p>SecretStoreSpec defines the desired state of SecretStore.</p>
  1662. </p>
  1663. <table>
  1664. <thead>
  1665. <tr>
  1666. <th>Field</th>
  1667. <th>Description</th>
  1668. </tr>
  1669. </thead>
  1670. <tbody>
  1671. <tr>
  1672. <td>
  1673. <code>controller</code></br>
  1674. <em>
  1675. string
  1676. </em>
  1677. </td>
  1678. <td>
  1679. <em>(Optional)</em>
  1680. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  1681. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  1682. </td>
  1683. </tr>
  1684. <tr>
  1685. <td>
  1686. <code>provider</code></br>
  1687. <em>
  1688. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  1689. SecretStoreProvider
  1690. </a>
  1691. </em>
  1692. </td>
  1693. <td>
  1694. <p>Used to configure the provider. Only one provider may be set</p>
  1695. </td>
  1696. </tr>
  1697. </tbody>
  1698. </table>
  1699. <h3 id="external-secrets.io/v1alpha1.SecretStoreStatus">SecretStoreStatus
  1700. </h3>
  1701. <p>
  1702. (<em>Appears on:</em>
  1703. <a href="#external-secrets.io/v1alpha1.SecretStore">SecretStore</a>)
  1704. </p>
  1705. <p>
  1706. <p>SecretStoreStatus defines the observed state of the SecretStore.</p>
  1707. </p>
  1708. <table>
  1709. <thead>
  1710. <tr>
  1711. <th>Field</th>
  1712. <th>Description</th>
  1713. </tr>
  1714. </thead>
  1715. <tbody>
  1716. <tr>
  1717. <td>
  1718. <code>conditions</code></br>
  1719. <em>
  1720. <a href="#external-secrets.io/v1alpha1.SecretStoreStatusCondition">
  1721. []SecretStoreStatusCondition
  1722. </a>
  1723. </em>
  1724. </td>
  1725. <td>
  1726. <em>(Optional)</em>
  1727. </td>
  1728. </tr>
  1729. </tbody>
  1730. </table>
  1731. <h3 id="external-secrets.io/v1alpha1.SecretStoreStatusCondition">SecretStoreStatusCondition
  1732. </h3>
  1733. <p>
  1734. (<em>Appears on:</em>
  1735. <a href="#external-secrets.io/v1alpha1.SecretStoreStatus">SecretStoreStatus</a>)
  1736. </p>
  1737. <p>
  1738. </p>
  1739. <table>
  1740. <thead>
  1741. <tr>
  1742. <th>Field</th>
  1743. <th>Description</th>
  1744. </tr>
  1745. </thead>
  1746. <tbody>
  1747. <tr>
  1748. <td>
  1749. <code>type</code></br>
  1750. <em>
  1751. <a href="#external-secrets.io/v1alpha1.SecretStoreConditionType">
  1752. SecretStoreConditionType
  1753. </a>
  1754. </em>
  1755. </td>
  1756. <td>
  1757. </td>
  1758. </tr>
  1759. <tr>
  1760. <td>
  1761. <code>status</code></br>
  1762. <em>
  1763. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#conditionstatus-v1-core">
  1764. Kubernetes core/v1.ConditionStatus
  1765. </a>
  1766. </em>
  1767. </td>
  1768. <td>
  1769. </td>
  1770. </tr>
  1771. <tr>
  1772. <td>
  1773. <code>reason</code></br>
  1774. <em>
  1775. string
  1776. </em>
  1777. </td>
  1778. <td>
  1779. <em>(Optional)</em>
  1780. </td>
  1781. </tr>
  1782. <tr>
  1783. <td>
  1784. <code>message</code></br>
  1785. <em>
  1786. string
  1787. </em>
  1788. </td>
  1789. <td>
  1790. <em>(Optional)</em>
  1791. </td>
  1792. </tr>
  1793. <tr>
  1794. <td>
  1795. <code>lastTransitionTime</code></br>
  1796. <em>
  1797. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  1798. Kubernetes meta/v1.Time
  1799. </a>
  1800. </em>
  1801. </td>
  1802. <td>
  1803. <em>(Optional)</em>
  1804. </td>
  1805. </tr>
  1806. </tbody>
  1807. </table>
  1808. <h3 id="external-secrets.io/v1alpha1.VaultAppRole">VaultAppRole
  1809. </h3>
  1810. <p>
  1811. (<em>Appears on:</em>
  1812. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1813. </p>
  1814. <p>
  1815. <p>VaultAppRole authenticates with Vault using the App Role auth mechanism,
  1816. with the role and secret stored in a Kubernetes Secret resource.</p>
  1817. </p>
  1818. <table>
  1819. <thead>
  1820. <tr>
  1821. <th>Field</th>
  1822. <th>Description</th>
  1823. </tr>
  1824. </thead>
  1825. <tbody>
  1826. <tr>
  1827. <td>
  1828. <code>path</code></br>
  1829. <em>
  1830. string
  1831. </em>
  1832. </td>
  1833. <td>
  1834. <p>Path where the App Role authentication backend is mounted
  1835. in Vault, e.g: &ldquo;approle&rdquo;</p>
  1836. </td>
  1837. </tr>
  1838. <tr>
  1839. <td>
  1840. <code>roleId</code></br>
  1841. <em>
  1842. string
  1843. </em>
  1844. </td>
  1845. <td>
  1846. <p>RoleID configured in the App Role authentication backend when setting
  1847. up the authentication backend in Vault.</p>
  1848. </td>
  1849. </tr>
  1850. <tr>
  1851. <td>
  1852. <code>secretRef</code></br>
  1853. <em>
  1854. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1855. </em>
  1856. </td>
  1857. <td>
  1858. <p>Reference to a key in a Secret that contains the App Role secret used
  1859. to authenticate with Vault.
  1860. The <code>key</code> field must be specified and denotes which entry within the Secret
  1861. resource is used as the app role secret.</p>
  1862. </td>
  1863. </tr>
  1864. </tbody>
  1865. </table>
  1866. <h3 id="external-secrets.io/v1alpha1.VaultAuth">VaultAuth
  1867. </h3>
  1868. <p>
  1869. (<em>Appears on:</em>
  1870. <a href="#external-secrets.io/v1alpha1.VaultProvider">VaultProvider</a>)
  1871. </p>
  1872. <p>
  1873. <p>VaultAuth is the configuration used to authenticate with a Vault server.
  1874. Only one of <code>tokenSecretRef</code>, <code>appRole</code>, <code>kubernetes</code>, <code>ldap</code> or <code>jwt</code>
  1875. can be specified.</p>
  1876. </p>
  1877. <table>
  1878. <thead>
  1879. <tr>
  1880. <th>Field</th>
  1881. <th>Description</th>
  1882. </tr>
  1883. </thead>
  1884. <tbody>
  1885. <tr>
  1886. <td>
  1887. <code>tokenSecretRef</code></br>
  1888. <em>
  1889. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1890. </em>
  1891. </td>
  1892. <td>
  1893. <em>(Optional)</em>
  1894. <p>TokenSecretRef authenticates with Vault by presenting a token.</p>
  1895. </td>
  1896. </tr>
  1897. <tr>
  1898. <td>
  1899. <code>appRole</code></br>
  1900. <em>
  1901. <a href="#external-secrets.io/v1alpha1.VaultAppRole">
  1902. VaultAppRole
  1903. </a>
  1904. </em>
  1905. </td>
  1906. <td>
  1907. <em>(Optional)</em>
  1908. <p>AppRole authenticates with Vault using the App Role auth mechanism,
  1909. with the role and secret stored in a Kubernetes Secret resource.</p>
  1910. </td>
  1911. </tr>
  1912. <tr>
  1913. <td>
  1914. <code>kubernetes</code></br>
  1915. <em>
  1916. <a href="#external-secrets.io/v1alpha1.VaultKubernetesAuth">
  1917. VaultKubernetesAuth
  1918. </a>
  1919. </em>
  1920. </td>
  1921. <td>
  1922. <em>(Optional)</em>
  1923. <p>Kubernetes authenticates with Vault by passing the ServiceAccount
  1924. token stored in the named Secret resource to the Vault server.</p>
  1925. </td>
  1926. </tr>
  1927. <tr>
  1928. <td>
  1929. <code>ldap</code></br>
  1930. <em>
  1931. <a href="#external-secrets.io/v1alpha1.VaultLdapAuth">
  1932. VaultLdapAuth
  1933. </a>
  1934. </em>
  1935. </td>
  1936. <td>
  1937. <em>(Optional)</em>
  1938. <p>Ldap authenticates with Vault by passing username/password pair using
  1939. the LDAP authentication method</p>
  1940. </td>
  1941. </tr>
  1942. <tr>
  1943. <td>
  1944. <code>jwt</code></br>
  1945. <em>
  1946. <a href="#external-secrets.io/v1alpha1.VaultJwtAuth">
  1947. VaultJwtAuth
  1948. </a>
  1949. </em>
  1950. </td>
  1951. <td>
  1952. <em>(Optional)</em>
  1953. <p>Jwt authenticates with Vault by passing role and JWT token using the
  1954. JWT/OIDC authentication method</p>
  1955. </td>
  1956. </tr>
  1957. </tbody>
  1958. </table>
  1959. <h3 id="external-secrets.io/v1alpha1.VaultJwtAuth">VaultJwtAuth
  1960. </h3>
  1961. <p>
  1962. (<em>Appears on:</em>
  1963. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1964. </p>
  1965. <p>
  1966. <p>VaultJwtAuth authenticates with Vault using the JWT/OIDC authentication
  1967. method, with the role name and token stored in a Kubernetes Secret resource.</p>
  1968. </p>
  1969. <table>
  1970. <thead>
  1971. <tr>
  1972. <th>Field</th>
  1973. <th>Description</th>
  1974. </tr>
  1975. </thead>
  1976. <tbody>
  1977. <tr>
  1978. <td>
  1979. <code>role</code></br>
  1980. <em>
  1981. string
  1982. </em>
  1983. </td>
  1984. <td>
  1985. <em>(Optional)</em>
  1986. <p>Role is a JWT role to authenticate using the JWT/OIDC Vault
  1987. authentication method</p>
  1988. </td>
  1989. </tr>
  1990. <tr>
  1991. <td>
  1992. <code>secretRef</code></br>
  1993. <em>
  1994. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1995. </em>
  1996. </td>
  1997. <td>
  1998. <p>SecretRef to a key in a Secret resource containing JWT token to
  1999. authenticate with Vault using the JWT/OIDC authentication method</p>
  2000. </td>
  2001. </tr>
  2002. </tbody>
  2003. </table>
  2004. <h3 id="external-secrets.io/v1alpha1.VaultKVStoreVersion">VaultKVStoreVersion
  2005. (<code>string</code> alias)</p></h3>
  2006. <p>
  2007. (<em>Appears on:</em>
  2008. <a href="#external-secrets.io/v1alpha1.VaultProvider">VaultProvider</a>)
  2009. </p>
  2010. <p>
  2011. </p>
  2012. <table>
  2013. <thead>
  2014. <tr>
  2015. <th>Value</th>
  2016. <th>Description</th>
  2017. </tr>
  2018. </thead>
  2019. <tbody><tr><td><p>&#34;v1&#34;</p></td>
  2020. <td></td>
  2021. </tr><tr><td><p>&#34;v2&#34;</p></td>
  2022. <td></td>
  2023. </tr></tbody>
  2024. </table>
  2025. <h3 id="external-secrets.io/v1alpha1.VaultKubernetesAuth">VaultKubernetesAuth
  2026. </h3>
  2027. <p>
  2028. (<em>Appears on:</em>
  2029. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  2030. </p>
  2031. <p>
  2032. <p>Authenticate against Vault using a Kubernetes ServiceAccount token stored in
  2033. a Secret.</p>
  2034. </p>
  2035. <table>
  2036. <thead>
  2037. <tr>
  2038. <th>Field</th>
  2039. <th>Description</th>
  2040. </tr>
  2041. </thead>
  2042. <tbody>
  2043. <tr>
  2044. <td>
  2045. <code>mountPath</code></br>
  2046. <em>
  2047. string
  2048. </em>
  2049. </td>
  2050. <td>
  2051. <p>Path where the Kubernetes authentication backend is mounted in Vault, e.g:
  2052. &ldquo;kubernetes&rdquo;</p>
  2053. </td>
  2054. </tr>
  2055. <tr>
  2056. <td>
  2057. <code>serviceAccountRef</code></br>
  2058. <em>
  2059. github.com/external-secrets/external-secrets/apis/meta/v1.ServiceAccountSelector
  2060. </em>
  2061. </td>
  2062. <td>
  2063. <em>(Optional)</em>
  2064. <p>Optional service account field containing the name of a kubernetes ServiceAccount.
  2065. If the service account is specified, the service account secret token JWT will be used
  2066. for authenticating with Vault. If the service account selector is not supplied,
  2067. the secretRef will be used instead.</p>
  2068. </td>
  2069. </tr>
  2070. <tr>
  2071. <td>
  2072. <code>secretRef</code></br>
  2073. <em>
  2074. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  2075. </em>
  2076. </td>
  2077. <td>
  2078. <em>(Optional)</em>
  2079. <p>Optional secret field containing a Kubernetes ServiceAccount JWT used
  2080. for authenticating with Vault. If a name is specified without a key,
  2081. <code>token</code> is the default. If one is not specified, the one bound to
  2082. the controller will be used.</p>
  2083. </td>
  2084. </tr>
  2085. <tr>
  2086. <td>
  2087. <code>role</code></br>
  2088. <em>
  2089. string
  2090. </em>
  2091. </td>
  2092. <td>
  2093. <p>A required field containing the Vault Role to assume. A Role binds a
  2094. Kubernetes ServiceAccount with a set of Vault policies.</p>
  2095. </td>
  2096. </tr>
  2097. </tbody>
  2098. </table>
  2099. <h3 id="external-secrets.io/v1alpha1.VaultLdapAuth">VaultLdapAuth
  2100. </h3>
  2101. <p>
  2102. (<em>Appears on:</em>
  2103. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  2104. </p>
  2105. <p>
  2106. <p>VaultLdapAuth authenticates with Vault using the LDAP authentication method,
  2107. with the username and password stored in a Kubernetes Secret resource.</p>
  2108. </p>
  2109. <table>
  2110. <thead>
  2111. <tr>
  2112. <th>Field</th>
  2113. <th>Description</th>
  2114. </tr>
  2115. </thead>
  2116. <tbody>
  2117. <tr>
  2118. <td>
  2119. <code>username</code></br>
  2120. <em>
  2121. string
  2122. </em>
  2123. </td>
  2124. <td>
  2125. <p>Username is a LDAP user name used to authenticate using the LDAP Vault
  2126. authentication method</p>
  2127. </td>
  2128. </tr>
  2129. <tr>
  2130. <td>
  2131. <code>secretRef</code></br>
  2132. <em>
  2133. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  2134. </em>
  2135. </td>
  2136. <td>
  2137. <p>SecretRef to a key in a Secret resource containing password for the LDAP
  2138. user used to authenticate with Vault using the LDAP authentication
  2139. method</p>
  2140. </td>
  2141. </tr>
  2142. </tbody>
  2143. </table>
  2144. <h3 id="external-secrets.io/v1alpha1.VaultProvider">VaultProvider
  2145. </h3>
  2146. <p>
  2147. (<em>Appears on:</em>
  2148. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  2149. </p>
  2150. <p>
  2151. <p>Configures an store to sync secrets using a HashiCorp Vault
  2152. KV backend.</p>
  2153. </p>
  2154. <table>
  2155. <thead>
  2156. <tr>
  2157. <th>Field</th>
  2158. <th>Description</th>
  2159. </tr>
  2160. </thead>
  2161. <tbody>
  2162. <tr>
  2163. <td>
  2164. <code>auth</code></br>
  2165. <em>
  2166. <a href="#external-secrets.io/v1alpha1.VaultAuth">
  2167. VaultAuth
  2168. </a>
  2169. </em>
  2170. </td>
  2171. <td>
  2172. <p>Auth configures how secret-manager authenticates with the Vault server.</p>
  2173. </td>
  2174. </tr>
  2175. <tr>
  2176. <td>
  2177. <code>server</code></br>
  2178. <em>
  2179. string
  2180. </em>
  2181. </td>
  2182. <td>
  2183. <p>Server is the connection address for the Vault server, e.g: &ldquo;<a href="https://vault.example.com:8200&quot;">https://vault.example.com:8200&rdquo;</a>.</p>
  2184. </td>
  2185. </tr>
  2186. <tr>
  2187. <td>
  2188. <code>path</code></br>
  2189. <em>
  2190. string
  2191. </em>
  2192. </td>
  2193. <td>
  2194. <p>Path is the mount path of the Vault KV backend endpoint, e.g:
  2195. &ldquo;secret&rdquo;. The v2 KV secret engine version specific &ldquo;/data&rdquo; path suffix
  2196. for fetching secrets from Vault is optional and will be appended
  2197. if not present in specified path.</p>
  2198. </td>
  2199. </tr>
  2200. <tr>
  2201. <td>
  2202. <code>version</code></br>
  2203. <em>
  2204. <a href="#external-secrets.io/v1alpha1.VaultKVStoreVersion">
  2205. VaultKVStoreVersion
  2206. </a>
  2207. </em>
  2208. </td>
  2209. <td>
  2210. <p>Version is the Vault KV secret engine version. This can be either &ldquo;v1&rdquo; or
  2211. &ldquo;v2&rdquo;. Version defaults to &ldquo;v2&rdquo;.</p>
  2212. </td>
  2213. </tr>
  2214. <tr>
  2215. <td>
  2216. <code>namespace</code></br>
  2217. <em>
  2218. string
  2219. </em>
  2220. </td>
  2221. <td>
  2222. <em>(Optional)</em>
  2223. <p>Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows
  2224. Vault environments to support Secure Multi-tenancy. e.g: &ldquo;ns1&rdquo;.
  2225. More about namespaces can be found here <a href="https://www.vaultproject.io/docs/enterprise/namespaces">https://www.vaultproject.io/docs/enterprise/namespaces</a></p>
  2226. </td>
  2227. </tr>
  2228. <tr>
  2229. <td>
  2230. <code>caBundle</code></br>
  2231. <em>
  2232. []byte
  2233. </em>
  2234. </td>
  2235. <td>
  2236. <em>(Optional)</em>
  2237. <p>PEM encoded CA bundle used to validate Vault server certificate. Only used
  2238. if the Server URL is using HTTPS protocol. This parameter is ignored for
  2239. plain HTTP protocol connection. If not set the system root certificates
  2240. are used to validate the TLS connection.</p>
  2241. </td>
  2242. </tr>
  2243. </tbody>
  2244. </table>
  2245. <hr/>
  2246. <p><em>
  2247. Generated with <code>gen-crd-api-reference-docs</code>.
  2248. </em></p></p>
  2249. </article>
  2250. </div>
  2251. </div>
  2252. </main>
  2253. <footer class="md-footer">
  2254. <nav class="md-footer__inner md-grid" aria-label="Footer">
  2255. <a href="../provider-hashicorp-vault/" class="md-footer__link md-footer__link--prev" aria-label="Previous: HashiCorp Vault" rel="prev">
  2256. <div class="md-footer__button md-icon">
  2257. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12z"/></svg>
  2258. </div>
  2259. <div class="md-footer__title">
  2260. <div class="md-ellipsis">
  2261. <span class="md-footer__direction">
  2262. Previous
  2263. </span>
  2264. HashiCorp Vault
  2265. </div>
  2266. </div>
  2267. </a>
  2268. <a href="../contributing-devguide/" class="md-footer__link md-footer__link--next" aria-label="Next: Developer guide" rel="next">
  2269. <div class="md-footer__title">
  2270. <div class="md-ellipsis">
  2271. <span class="md-footer__direction">
  2272. Next
  2273. </span>
  2274. Developer guide
  2275. </div>
  2276. </div>
  2277. <div class="md-footer__button md-icon">
  2278. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11H4z"/></svg>
  2279. </div>
  2280. </a>
  2281. </nav>
  2282. <div class="md-footer-meta md-typeset">
  2283. <div class="md-footer-meta__inner md-grid">
  2284. <div class="md-footer-copyright">
  2285. Made with
  2286. <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
  2287. Material for MkDocs
  2288. </a>
  2289. </div>
  2290. </div>
  2291. </div>
  2292. </footer>
  2293. </div>
  2294. <div class="md-dialog" data-md-component="dialog">
  2295. <div class="md-dialog__inner md-typeset"></div>
  2296. </div>
  2297. <script id="__config" type="application/json">{"base": "..", "features": [], "translations": {"clipboard.copy": "Copy to clipboard", "clipboard.copied": "Copied to clipboard", "search.config.lang": "en", "search.config.pipeline": "trimmer, stopWordFilter", "search.config.separator": "[\\s\\-]+", "search.placeholder": "Search", "search.result.placeholder": "Type to start searching", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.term.missing": "Missing", "select.version.title": "Select version"}, "search": "../assets/javascripts/workers/search.b0710199.min.js", "version": null}</script>
  2298. <script src="../assets/javascripts/bundle.76f349be.min.js"></script>
  2299. </body>
  2300. </html>