clustergenerator-v1alpha1.yaml 7.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. ecrAuthorizationTokenSpec:
  30. auth:
  31. jwt:
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. secretRef:
  37. accessKeyIDSecretRef:
  38. key: string
  39. name: string
  40. namespace: string
  41. secretAccessKeySecretRef:
  42. key: string
  43. name: string
  44. namespace: string
  45. sessionTokenSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. region: string
  50. role: string
  51. scope: string
  52. fakeSpec:
  53. controller: string
  54. data: {}
  55. gcrAccessTokenSpec:
  56. auth:
  57. secretRef:
  58. secretAccessKeySecretRef:
  59. key: string
  60. name: string
  61. namespace: string
  62. workloadIdentity:
  63. clusterLocation: string
  64. clusterName: string
  65. clusterProjectID: string
  66. serviceAccountRef:
  67. audiences: [] # minItems 0 of type string
  68. name: string
  69. namespace: string
  70. projectID: string
  71. githubAccessTokenSpec:
  72. appID: string
  73. auth:
  74. privateKey:
  75. secretRef:
  76. key: string
  77. name: string
  78. namespace: string
  79. installID: string
  80. permissions: {}
  81. repositories: [] # minItems 0 of type string
  82. url: string
  83. grafanaSpec:
  84. auth:
  85. token:
  86. key: string
  87. name: string
  88. serviceAccount:
  89. name: string
  90. role: string
  91. url: string
  92. passwordSpec:
  93. allowRepeat: false
  94. digits: 1
  95. length: 24
  96. noUpper: false
  97. symbolCharacters: string
  98. symbols: 1
  99. quayAccessTokenSpec:
  100. robotAccount: string
  101. serviceAccountRef:
  102. audiences: [] # minItems 0 of type string
  103. name: string
  104. namespace: string
  105. url: string
  106. stsSessionTokenSpec:
  107. auth:
  108. jwt:
  109. serviceAccountRef:
  110. audiences: [] # minItems 0 of type string
  111. name: string
  112. namespace: string
  113. secretRef:
  114. accessKeyIDSecretRef:
  115. key: string
  116. name: string
  117. namespace: string
  118. secretAccessKeySecretRef:
  119. key: string
  120. name: string
  121. namespace: string
  122. sessionTokenSecretRef:
  123. key: string
  124. name: string
  125. namespace: string
  126. region: string
  127. requestParameters:
  128. serialNumber: string
  129. sessionDuration: 1
  130. tokenCode: string
  131. role: string
  132. uuidSpec: {}
  133. vaultDynamicSecretSpec:
  134. allowEmptyResponse: false
  135. controller: string
  136. method: string
  137. parameters:
  138. path: string
  139. provider:
  140. auth:
  141. appRole:
  142. path: "approle"
  143. roleId: string
  144. roleRef:
  145. key: string
  146. name: string
  147. namespace: string
  148. secretRef:
  149. key: string
  150. name: string
  151. namespace: string
  152. cert:
  153. clientCert:
  154. key: string
  155. name: string
  156. namespace: string
  157. secretRef:
  158. key: string
  159. name: string
  160. namespace: string
  161. iam:
  162. externalID: string
  163. jwt:
  164. serviceAccountRef:
  165. audiences: [] # minItems 0 of type string
  166. name: string
  167. namespace: string
  168. path: string
  169. region: string
  170. role: string
  171. secretRef:
  172. accessKeyIDSecretRef:
  173. key: string
  174. name: string
  175. namespace: string
  176. secretAccessKeySecretRef:
  177. key: string
  178. name: string
  179. namespace: string
  180. sessionTokenSecretRef:
  181. key: string
  182. name: string
  183. namespace: string
  184. vaultAwsIamServerID: string
  185. vaultRole: string
  186. jwt:
  187. kubernetesServiceAccountToken:
  188. audiences: [] # minItems 0 of type string
  189. expirationSeconds: 1
  190. serviceAccountRef:
  191. audiences: [] # minItems 0 of type string
  192. name: string
  193. namespace: string
  194. path: "jwt"
  195. role: string
  196. secretRef:
  197. key: string
  198. name: string
  199. namespace: string
  200. kubernetes:
  201. mountPath: "kubernetes"
  202. role: string
  203. secretRef:
  204. key: string
  205. name: string
  206. namespace: string
  207. serviceAccountRef:
  208. audiences: [] # minItems 0 of type string
  209. name: string
  210. namespace: string
  211. ldap:
  212. path: "ldap"
  213. secretRef:
  214. key: string
  215. name: string
  216. namespace: string
  217. username: string
  218. namespace: string
  219. tokenSecretRef:
  220. key: string
  221. name: string
  222. namespace: string
  223. userPass:
  224. path: "user"
  225. secretRef:
  226. key: string
  227. name: string
  228. namespace: string
  229. username: string
  230. caBundle: c3RyaW5n
  231. caProvider:
  232. key: string
  233. name: string
  234. namespace: string
  235. type: "Secret" # "Secret", "ConfigMap"
  236. forwardInconsistent: true
  237. headers: {}
  238. namespace: string
  239. path: string
  240. readYourWrites: true
  241. server: string
  242. tls:
  243. certSecretRef:
  244. key: string
  245. name: string
  246. namespace: string
  247. keySecretRef:
  248. key: string
  249. name: string
  250. namespace: string
  251. version: "v2"
  252. resultType: "Data"
  253. retrySettings:
  254. maxRetries: 1
  255. retryInterval: string
  256. webhookSpec:
  257. body: string
  258. caBundle: c3RyaW5n
  259. caProvider:
  260. key: string
  261. name: string
  262. namespace: string
  263. type: "Secret" # "Secret", "ConfigMap"
  264. headers: {}
  265. method: string
  266. result:
  267. jsonPath: string
  268. secrets:
  269. - name: string
  270. secretRef:
  271. key: string
  272. name: string
  273. timeout: string
  274. url: string
  275. kind: "ACRAccessToken" # "ACRAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"