external-secrets.io_externalsecrets.yaml 10.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254
  1. ---
  2. apiVersion: apiextensions.k8s.io/v1
  3. kind: CustomResourceDefinition
  4. metadata:
  5. annotations:
  6. controller-gen.kubebuilder.io/version: v0.5.0
  7. creationTimestamp: null
  8. name: externalsecrets.external-secrets.io
  9. spec:
  10. group: external-secrets.io
  11. names:
  12. categories:
  13. - externalsecrets
  14. kind: ExternalSecret
  15. listKind: ExternalSecretList
  16. plural: externalsecrets
  17. shortNames:
  18. - es
  19. singular: externalsecret
  20. scope: Namespaced
  21. versions:
  22. - additionalPrinterColumns:
  23. - jsonPath: .spec.secretStoreRef.name
  24. name: Store
  25. type: string
  26. - jsonPath: .spec.refreshInterval
  27. name: Refresh Interval
  28. type: string
  29. - jsonPath: .status.conditions[?(@.type=="Ready")].reason
  30. name: Status
  31. type: string
  32. name: v1alpha1
  33. schema:
  34. openAPIV3Schema:
  35. description: ExternalSecret is the Schema for the external-secrets API.
  36. properties:
  37. apiVersion:
  38. description: 'APIVersion defines the versioned schema of this representation
  39. of an object. Servers should convert recognized schemas to the latest
  40. internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  41. type: string
  42. kind:
  43. description: 'Kind is a string value representing the REST resource this
  44. object represents. Servers may infer this from the endpoint the client
  45. submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  46. type: string
  47. metadata:
  48. type: object
  49. spec:
  50. description: ExternalSecretSpec defines the desired state of ExternalSecret.
  51. properties:
  52. data:
  53. description: Data defines the connection between the Kubernetes Secret
  54. keys and the Provider data
  55. items:
  56. description: ExternalSecretData defines the connection between the
  57. Kubernetes Secret key (spec.data.<key>) and the Provider data.
  58. properties:
  59. remoteRef:
  60. description: ExternalSecretDataRemoteRef defines Provider data
  61. location.
  62. properties:
  63. key:
  64. description: Key is the key used in the Provider, mandatory
  65. type: string
  66. property:
  67. description: Used to select a specific property of the Provider
  68. value (if a map), if supported
  69. type: string
  70. version:
  71. description: Used to select a specific version of the Provider
  72. value, if supported
  73. type: string
  74. required:
  75. - key
  76. type: object
  77. secretKey:
  78. type: string
  79. required:
  80. - remoteRef
  81. - secretKey
  82. type: object
  83. type: array
  84. dataFrom:
  85. description: DataFrom is used to fetch all properties from a specific
  86. Provider data If multiple entries are specified, the Secret keys
  87. are merged in the specified order
  88. items:
  89. description: ExternalSecretDataRemoteRef defines Provider data location.
  90. properties:
  91. key:
  92. description: Key is the key used in the Provider, mandatory
  93. type: string
  94. property:
  95. description: Used to select a specific property of the Provider
  96. value (if a map), if supported
  97. type: string
  98. version:
  99. description: Used to select a specific version of the Provider
  100. value, if supported
  101. type: string
  102. required:
  103. - key
  104. type: object
  105. type: array
  106. refreshInterval:
  107. default: 1h
  108. description: RefreshInterval is the amount of time before the values
  109. are read again from the SecretStore provider Valid time units are
  110. "ns", "us" (or "µs"), "ms", "s", "m", "h" May be set to zero to
  111. fetch and create it once. Defaults to 1h.
  112. type: string
  113. secretStoreRef:
  114. description: SecretStoreRef defines which SecretStore to fetch the
  115. ExternalSecret data.
  116. properties:
  117. kind:
  118. description: Kind of the SecretStore resource (SecretStore or
  119. ClusterSecretStore) Defaults to `SecretStore`
  120. type: string
  121. name:
  122. description: Name of the SecretStore resource
  123. type: string
  124. required:
  125. - name
  126. type: object
  127. target:
  128. description: ExternalSecretTarget defines the Kubernetes Secret to
  129. be created There can be only one target per ExternalSecret.
  130. properties:
  131. creationPolicy:
  132. default: Owner
  133. description: CreationPolicy defines rules on how to create the
  134. resulting Secret Defaults to 'Owner'
  135. type: string
  136. name:
  137. description: Name defines the name of the Secret resource to be
  138. managed This field is immutable Defaults to the .metadata.name
  139. of the ExternalSecret resource
  140. type: string
  141. template:
  142. description: Template defines a blueprint for the created Secret
  143. resource.
  144. properties:
  145. data:
  146. additionalProperties:
  147. type: string
  148. type: object
  149. metadata:
  150. description: ExternalSecretTemplateMetadata defines metadata
  151. fields for the Secret blueprint.
  152. properties:
  153. annotations:
  154. additionalProperties:
  155. type: string
  156. type: object
  157. labels:
  158. additionalProperties:
  159. type: string
  160. type: object
  161. type: object
  162. templateFrom:
  163. items:
  164. maxProperties: 1
  165. minProperties: 1
  166. properties:
  167. configMap:
  168. properties:
  169. items:
  170. items:
  171. properties:
  172. key:
  173. type: string
  174. required:
  175. - key
  176. type: object
  177. type: array
  178. name:
  179. type: string
  180. required:
  181. - items
  182. - name
  183. type: object
  184. secret:
  185. properties:
  186. items:
  187. items:
  188. properties:
  189. key:
  190. type: string
  191. required:
  192. - key
  193. type: object
  194. type: array
  195. name:
  196. type: string
  197. required:
  198. - items
  199. - name
  200. type: object
  201. type: object
  202. type: array
  203. type:
  204. type: string
  205. type: object
  206. type: object
  207. required:
  208. - secretStoreRef
  209. - target
  210. type: object
  211. status:
  212. properties:
  213. conditions:
  214. items:
  215. properties:
  216. lastTransitionTime:
  217. format: date-time
  218. type: string
  219. message:
  220. type: string
  221. reason:
  222. type: string
  223. status:
  224. type: string
  225. type:
  226. type: string
  227. required:
  228. - status
  229. - type
  230. type: object
  231. type: array
  232. refreshTime:
  233. description: refreshTime is the time and date the external secret
  234. was fetched and the target secret updated
  235. format: date-time
  236. nullable: true
  237. type: string
  238. syncedResourceVersion:
  239. description: SyncedResourceVersion keeps track of the last synced
  240. version
  241. type: string
  242. type: object
  243. type: object
  244. served: true
  245. storage: true
  246. subresources:
  247. status: {}
  248. status:
  249. acceptedNames:
  250. kind: ""
  251. plural: ""
  252. conditions: []
  253. storedVersions: []