clusterexternalsecret-v1.yaml 3.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117
  1. apiVersion: external-secrets.io/v1
  2. kind: ClusterExternalSecret
  3. metadata: {}
  4. spec:
  5. externalSecretMetadata:
  6. annotations: {}
  7. labels: {}
  8. externalSecretName: string
  9. externalSecretSpec:
  10. data:
  11. - remoteRef:
  12. conversionStrategy: "Default"
  13. decodingStrategy: "None"
  14. key: string
  15. metadataPolicy: "None"
  16. property: string
  17. version: string
  18. secretKey: string
  19. sourceRef:
  20. generatorRef:
  21. apiVersion: external-secrets.io/v1
  22. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  23. name: string
  24. storeRef:
  25. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  26. name: string
  27. dataFrom:
  28. - extract:
  29. conversionStrategy: "Default"
  30. decodingStrategy: "None"
  31. key: string
  32. metadataPolicy: "None"
  33. property: string
  34. version: string
  35. find:
  36. conversionStrategy: "Default"
  37. decodingStrategy: "None"
  38. name:
  39. regexp: string
  40. path: string
  41. tags: {}
  42. rewrite:
  43. - merge:
  44. conflictPolicy: "Error"
  45. into: ""
  46. priority: [] # minItems 0 of type string
  47. priorityPolicy: "Strict"
  48. strategy: "Extract"
  49. regexp:
  50. source: string
  51. target: string
  52. transform:
  53. template: string
  54. sourceRef:
  55. generatorRef:
  56. apiVersion: external-secrets.io/v1
  57. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  58. name: string
  59. storeRef:
  60. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  61. name: string
  62. refreshInterval: "1h"
  63. refreshPolicy: "CreatedOnce" # "CreatedOnce", "Periodic", "OnChange"
  64. secretStoreRef:
  65. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  66. name: string
  67. target:
  68. creationPolicy: "Owner"
  69. deletionPolicy: "Retain"
  70. immutable: true
  71. name: string
  72. template:
  73. data: {}
  74. engineVersion: "v2"
  75. mergePolicy: "Replace"
  76. metadata:
  77. annotations: {}
  78. finalizers: [] # minItems 0 of type string
  79. labels: {}
  80. templateFrom:
  81. - configMap:
  82. items:
  83. - key: string
  84. templateAs: "Values"
  85. name: string
  86. literal: string
  87. secret:
  88. items:
  89. - key: string
  90. templateAs: "Values"
  91. name: string
  92. target: "Data"
  93. type: string
  94. namespaceSelector:
  95. matchExpressions:
  96. - key: string
  97. operator: string
  98. values: [] # minItems 0 of type string
  99. matchLabels: {}
  100. namespaceSelectors:
  101. - matchExpressions:
  102. - key: string
  103. operator: string
  104. values: [] # minItems 0 of type string
  105. matchLabels: {}
  106. namespaces: [] # minItems 0 of type string
  107. refreshTime: string
  108. status:
  109. conditions:
  110. - message: string
  111. status: string
  112. type: string
  113. externalSecretName: string
  114. failedNamespaces:
  115. - namespace: string
  116. reason: string
  117. provisionedNamespaces: [] # minItems 0 of type string