index.html 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026
  1. <!doctype html>
  2. <html lang="en" class="no-js">
  3. <head>
  4. <meta charset="utf-8">
  5. <meta name="viewport" content="width=device-width,initial-scale=1">
  6. <meta http-equiv="x-ua-compatible" content="ie=edge">
  7. <meta name="lang:clipboard.copy" content="Copy to clipboard">
  8. <meta name="lang:clipboard.copied" content="Copied to clipboard">
  9. <meta name="lang:search.language" content="en">
  10. <meta name="lang:search.pipeline.stopwords" content="True">
  11. <meta name="lang:search.pipeline.trimmer" content="True">
  12. <meta name="lang:search.result.none" content="No matching documents">
  13. <meta name="lang:search.result.one" content="1 matching document">
  14. <meta name="lang:search.result.other" content="# matching documents">
  15. <meta name="lang:search.tokenizer" content="[\s\-]+">
  16. <link rel="shortcut icon" href="../assets/images/favicon.png">
  17. <meta name="generator" content="mkdocs-1.0.4, mkdocs-material-4.6.0">
  18. <title>Getting started - External Secrets Operator</title>
  19. <link rel="stylesheet" href="../assets/stylesheets/application.1b62728e.css">
  20. <script src="../assets/javascripts/modernizr.268332fc.js"></script>
  21. <link href="https://fonts.gstatic.com" rel="preconnect" crossorigin>
  22. <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,400,400i,700%7CRoboto+Mono&display=fallback">
  23. <style>body,input{font-family:"Roboto","Helvetica Neue",Helvetica,Arial,sans-serif}code,kbd,pre{font-family:"Roboto Mono","Courier New",Courier,monospace}</style>
  24. <link rel="stylesheet" href="../assets/fonts/material-icons.css">
  25. </head>
  26. <body dir="ltr">
  27. <svg class="md-svg">
  28. <defs>
  29. <svg xmlns="http://www.w3.org/2000/svg" width="416" height="448" viewBox="0 0 416 448" id="__github"><path fill="currentColor" d="M160 304q0 10-3.125 20.5t-10.75 19T128 352t-18.125-8.5-10.75-19T96 304t3.125-20.5 10.75-19T128 256t18.125 8.5 10.75 19T160 304zm160 0q0 10-3.125 20.5t-10.75 19T288 352t-18.125-8.5-10.75-19T256 304t3.125-20.5 10.75-19T288 256t18.125 8.5 10.75 19T320 304zm40 0q0-30-17.25-51T296 232q-10.25 0-48.75 5.25Q229.5 240 208 240t-39.25-2.75Q130.75 232 120 232q-29.5 0-46.75 21T56 304q0 22 8 38.375t20.25 25.75 30.5 15 35 7.375 37.25 1.75h42q20.5 0 37.25-1.75t35-7.375 30.5-15 20.25-25.75T360 304zm56-44q0 51.75-15.25 82.75-9.5 19.25-26.375 33.25t-35.25 21.5-42.5 11.875-42.875 5.5T212 416q-19.5 0-35.5-.75t-36.875-3.125-38.125-7.5-34.25-12.875T37 371.5t-21.5-28.75Q0 312 0 260q0-59.25 34-99-6.75-20.5-6.75-42.5 0-29 12.75-54.5 27 0 47.5 9.875t47.25 30.875Q171.5 96 212 96q37 0 70 8 26.25-20.5 46.75-30.25T376 64q12.75 25.5 12.75 54.5 0 21.75-6.75 42 34 40 34 99.5z"/></svg>
  30. </defs>
  31. </svg>
  32. <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
  33. <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
  34. <label class="md-overlay" data-md-component="overlay" for="__drawer"></label>
  35. <a href="#getting-started" tabindex="1" class="md-skip">
  36. Skip to content
  37. </a>
  38. <header class="md-header" data-md-component="header">
  39. <nav class="md-header-nav md-grid">
  40. <div class="md-flex">
  41. <div class="md-flex__cell md-flex__cell--shrink">
  42. <a href=".." title="External Secrets Operator" class="md-header-nav__button md-logo">
  43. <i class="md-icon"></i>
  44. </a>
  45. </div>
  46. <div class="md-flex__cell md-flex__cell--shrink">
  47. <label class="md-icon md-icon--menu md-header-nav__button" for="__drawer"></label>
  48. </div>
  49. <div class="md-flex__cell md-flex__cell--stretch">
  50. <div class="md-flex__ellipsis md-header-nav__title" data-md-component="title">
  51. <span class="md-header-nav__topic">
  52. External Secrets Operator
  53. </span>
  54. <span class="md-header-nav__topic">
  55. Getting started
  56. </span>
  57. </div>
  58. </div>
  59. <div class="md-flex__cell md-flex__cell--shrink">
  60. <label class="md-icon md-icon--search md-header-nav__button" for="__search"></label>
  61. <div class="md-search" data-md-component="search" role="dialog">
  62. <label class="md-search__overlay" for="__search"></label>
  63. <div class="md-search__inner" role="search">
  64. <form class="md-search__form" name="search">
  65. <input type="text" class="md-search__input" name="query" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="query" data-md-state="active">
  66. <label class="md-icon md-search__icon" for="__search"></label>
  67. <button type="reset" class="md-icon md-search__icon" data-md-component="reset" tabindex="-1">
  68. &#xE5CD;
  69. </button>
  70. </form>
  71. <div class="md-search__output">
  72. <div class="md-search__scrollwrap" data-md-scrollfix>
  73. <div class="md-search-result" data-md-component="result">
  74. <div class="md-search-result__meta">
  75. Type to start searching
  76. </div>
  77. <ol class="md-search-result__list"></ol>
  78. </div>
  79. </div>
  80. </div>
  81. </div>
  82. </div>
  83. </div>
  84. <div class="md-flex__cell md-flex__cell--shrink">
  85. <div class="md-header-nav__source">
  86. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-source="github">
  87. <div class="md-source__icon">
  88. <svg viewBox="0 0 24 24" width="24" height="24">
  89. <use xlink:href="#__github" width="24" height="24"></use>
  90. </svg>
  91. </div>
  92. <div class="md-source__repository">
  93. External Secrets Operator
  94. </div>
  95. </a>
  96. </div>
  97. </div>
  98. </div>
  99. </nav>
  100. </header>
  101. <div class="md-container">
  102. <main class="md-main" role="main">
  103. <div class="md-main__inner md-grid" data-md-component="container">
  104. <div class="md-sidebar md-sidebar--primary" data-md-component="navigation">
  105. <div class="md-sidebar__scrollwrap">
  106. <div class="md-sidebar__inner">
  107. <nav class="md-nav md-nav--primary" data-md-level="0">
  108. <label class="md-nav__title md-nav__title--site" for="__drawer">
  109. <a href=".." title="External Secrets Operator" class="md-nav__button md-logo">
  110. <i class="md-icon"></i>
  111. </a>
  112. External Secrets Operator
  113. </label>
  114. <div class="md-nav__source">
  115. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-source="github">
  116. <div class="md-source__icon">
  117. <svg viewBox="0 0 24 24" width="24" height="24">
  118. <use xlink:href="#__github" width="24" height="24"></use>
  119. </svg>
  120. </div>
  121. <div class="md-source__repository">
  122. External Secrets Operator
  123. </div>
  124. </a>
  125. </div>
  126. <ul class="md-nav__list" data-md-scrollfix>
  127. <li class="md-nav__item">
  128. <a href=".." title="Introduction" class="md-nav__link">
  129. Introduction
  130. </a>
  131. </li>
  132. <li class="md-nav__item">
  133. <a href="../api-overview/" title="Overview" class="md-nav__link">
  134. Overview
  135. </a>
  136. </li>
  137. <li class="md-nav__item md-nav__item--nested">
  138. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-3" type="checkbox" id="nav-3">
  139. <label class="md-nav__link" for="nav-3">
  140. API Types
  141. </label>
  142. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  143. <label class="md-nav__title" for="nav-3">
  144. API Types
  145. </label>
  146. <ul class="md-nav__list" data-md-scrollfix>
  147. <li class="md-nav__item">
  148. <a href="../api-externalsecret/" title="ExternalSecret" class="md-nav__link">
  149. ExternalSecret
  150. </a>
  151. </li>
  152. <li class="md-nav__item">
  153. <a href="../api-secretstore/" title="SecretStore" class="md-nav__link">
  154. SecretStore
  155. </a>
  156. </li>
  157. <li class="md-nav__item">
  158. <a href="../api-clustersecretstore/" title="ClusterSecretStore" class="md-nav__link">
  159. ClusterSecretStore
  160. </a>
  161. </li>
  162. </ul>
  163. </nav>
  164. </li>
  165. <li class="md-nav__item md-nav__item--active md-nav__item--nested">
  166. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-4" type="checkbox" id="nav-4" checked>
  167. <label class="md-nav__link" for="nav-4">
  168. Guides
  169. </label>
  170. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  171. <label class="md-nav__title" for="nav-4">
  172. Guides
  173. </label>
  174. <ul class="md-nav__list" data-md-scrollfix>
  175. <li class="md-nav__item">
  176. <a href="../guides-introduction/" title="Introduction" class="md-nav__link">
  177. Introduction
  178. </a>
  179. </li>
  180. <li class="md-nav__item md-nav__item--active">
  181. <input class="md-toggle md-nav__toggle" data-md-toggle="toc" type="checkbox" id="__toc">
  182. <label class="md-nav__link md-nav__link--active" for="__toc">
  183. Getting started
  184. </label>
  185. <a href="./" title="Getting started" class="md-nav__link md-nav__link--active">
  186. Getting started
  187. </a>
  188. <nav class="md-nav md-nav--secondary">
  189. <label class="md-nav__title" for="__toc">Table of contents</label>
  190. <ul class="md-nav__list" data-md-scrollfix>
  191. <li class="md-nav__item">
  192. <a href="#installing-with-helm" class="md-nav__link">
  193. Installing with Helm
  194. </a>
  195. <nav class="md-nav">
  196. <ul class="md-nav__list">
  197. <li class="md-nav__item">
  198. <a href="#option-1-install-from-chart-repository" class="md-nav__link">
  199. Option 1: Install from chart repository
  200. </a>
  201. </li>
  202. <li class="md-nav__item">
  203. <a href="#option-2-install-chart-from-local-build" class="md-nav__link">
  204. Option 2: Install chart from local build
  205. </a>
  206. </li>
  207. <li class="md-nav__item">
  208. <a href="#create-a-secret-containing-your-aws-credentials" class="md-nav__link">
  209. Create a secret containing your AWS credentials
  210. </a>
  211. </li>
  212. <li class="md-nav__item">
  213. <a href="#create-your-first-secretstore" class="md-nav__link">
  214. Create your first SecretStore
  215. </a>
  216. </li>
  217. <li class="md-nav__item">
  218. <a href="#create-your-first-externalsecret" class="md-nav__link">
  219. Create your first ExternalSecret
  220. </a>
  221. </li>
  222. </ul>
  223. </nav>
  224. </li>
  225. <li class="md-nav__item">
  226. <a href="#uninstalling" class="md-nav__link">
  227. Uninstalling
  228. </a>
  229. <nav class="md-nav">
  230. <ul class="md-nav__list">
  231. <li class="md-nav__item">
  232. <a href="#uninstalling-with-helm" class="md-nav__link">
  233. Uninstalling with Helm
  234. </a>
  235. </li>
  236. </ul>
  237. </nav>
  238. </li>
  239. </ul>
  240. </nav>
  241. </li>
  242. <li class="md-nav__item">
  243. <a href="../guides-templating/" title="Advanced Templating" class="md-nav__link">
  244. Advanced Templating
  245. </a>
  246. </li>
  247. <li class="md-nav__item">
  248. <a href="../guides-multi-tenancy/" title="Multi Tenancy" class="md-nav__link">
  249. Multi Tenancy
  250. </a>
  251. </li>
  252. <li class="md-nav__item">
  253. <a href="../guides-metrics/" title="Metrics" class="md-nav__link">
  254. Metrics
  255. </a>
  256. </li>
  257. </ul>
  258. </nav>
  259. </li>
  260. <li class="md-nav__item md-nav__item--nested">
  261. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5" type="checkbox" id="nav-5">
  262. <label class="md-nav__link" for="nav-5">
  263. Provider
  264. </label>
  265. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  266. <label class="md-nav__title" for="nav-5">
  267. Provider
  268. </label>
  269. <ul class="md-nav__list" data-md-scrollfix>
  270. <li class="md-nav__item md-nav__item--nested">
  271. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-1" type="checkbox" id="nav-5-1">
  272. <label class="md-nav__link" for="nav-5-1">
  273. AWS
  274. </label>
  275. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  276. <label class="md-nav__title" for="nav-5-1">
  277. AWS
  278. </label>
  279. <ul class="md-nav__list" data-md-scrollfix>
  280. <li class="md-nav__item">
  281. <a href="../provider-aws-secrets-manager/" title="Secrets Manager" class="md-nav__link">
  282. Secrets Manager
  283. </a>
  284. </li>
  285. <li class="md-nav__item">
  286. <a href="../provider-aws-parameter-store/" title="Parameter Store" class="md-nav__link">
  287. Parameter Store
  288. </a>
  289. </li>
  290. </ul>
  291. </nav>
  292. </li>
  293. <li class="md-nav__item md-nav__item--nested">
  294. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-2" type="checkbox" id="nav-5-2">
  295. <label class="md-nav__link" for="nav-5-2">
  296. Azure
  297. </label>
  298. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  299. <label class="md-nav__title" for="nav-5-2">
  300. Azure
  301. </label>
  302. <ul class="md-nav__list" data-md-scrollfix>
  303. <li class="md-nav__item">
  304. <a href="../provider-azure-key-vault/" title="Key Vault" class="md-nav__link">
  305. Key Vault
  306. </a>
  307. </li>
  308. </ul>
  309. </nav>
  310. </li>
  311. <li class="md-nav__item md-nav__item--nested">
  312. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-3" type="checkbox" id="nav-5-3">
  313. <label class="md-nav__link" for="nav-5-3">
  314. Google
  315. </label>
  316. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  317. <label class="md-nav__title" for="nav-5-3">
  318. Google
  319. </label>
  320. <ul class="md-nav__list" data-md-scrollfix>
  321. <li class="md-nav__item">
  322. <a href="../provider-google-secrets-manager/" title="Secrets Manager" class="md-nav__link">
  323. Secrets Manager
  324. </a>
  325. </li>
  326. </ul>
  327. </nav>
  328. </li>
  329. <li class="md-nav__item">
  330. <a href="../provider-hashicorp-vault/" title="HashiCorp Vault" class="md-nav__link">
  331. HashiCorp Vault
  332. </a>
  333. </li>
  334. </ul>
  335. </nav>
  336. </li>
  337. <li class="md-nav__item md-nav__item--nested">
  338. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-6" type="checkbox" id="nav-6">
  339. <label class="md-nav__link" for="nav-6">
  340. References
  341. </label>
  342. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  343. <label class="md-nav__title" for="nav-6">
  344. References
  345. </label>
  346. <ul class="md-nav__list" data-md-scrollfix>
  347. <li class="md-nav__item">
  348. <a href="../spec/" title="API specification" class="md-nav__link">
  349. API specification
  350. </a>
  351. </li>
  352. </ul>
  353. </nav>
  354. </li>
  355. <li class="md-nav__item md-nav__item--nested">
  356. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-7" type="checkbox" id="nav-7">
  357. <label class="md-nav__link" for="nav-7">
  358. Contributing
  359. </label>
  360. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  361. <label class="md-nav__title" for="nav-7">
  362. Contributing
  363. </label>
  364. <ul class="md-nav__list" data-md-scrollfix>
  365. <li class="md-nav__item">
  366. <a href="../contributing-devguide/" title="Developer guide" class="md-nav__link">
  367. Developer guide
  368. </a>
  369. </li>
  370. <li class="md-nav__item">
  371. <a href="../contributing-process/" title="Contributing Process" class="md-nav__link">
  372. Contributing Process
  373. </a>
  374. </li>
  375. <li class="md-nav__item">
  376. <a href="../contributing-coc/" title="Code of Conduct" class="md-nav__link">
  377. Code of Conduct
  378. </a>
  379. </li>
  380. </ul>
  381. </nav>
  382. </li>
  383. </ul>
  384. </nav>
  385. </div>
  386. </div>
  387. </div>
  388. <div class="md-sidebar md-sidebar--secondary" data-md-component="toc">
  389. <div class="md-sidebar__scrollwrap">
  390. <div class="md-sidebar__inner">
  391. <nav class="md-nav md-nav--secondary">
  392. <label class="md-nav__title" for="__toc">Table of contents</label>
  393. <ul class="md-nav__list" data-md-scrollfix>
  394. <li class="md-nav__item">
  395. <a href="#installing-with-helm" class="md-nav__link">
  396. Installing with Helm
  397. </a>
  398. <nav class="md-nav">
  399. <ul class="md-nav__list">
  400. <li class="md-nav__item">
  401. <a href="#option-1-install-from-chart-repository" class="md-nav__link">
  402. Option 1: Install from chart repository
  403. </a>
  404. </li>
  405. <li class="md-nav__item">
  406. <a href="#option-2-install-chart-from-local-build" class="md-nav__link">
  407. Option 2: Install chart from local build
  408. </a>
  409. </li>
  410. <li class="md-nav__item">
  411. <a href="#create-a-secret-containing-your-aws-credentials" class="md-nav__link">
  412. Create a secret containing your AWS credentials
  413. </a>
  414. </li>
  415. <li class="md-nav__item">
  416. <a href="#create-your-first-secretstore" class="md-nav__link">
  417. Create your first SecretStore
  418. </a>
  419. </li>
  420. <li class="md-nav__item">
  421. <a href="#create-your-first-externalsecret" class="md-nav__link">
  422. Create your first ExternalSecret
  423. </a>
  424. </li>
  425. </ul>
  426. </nav>
  427. </li>
  428. <li class="md-nav__item">
  429. <a href="#uninstalling" class="md-nav__link">
  430. Uninstalling
  431. </a>
  432. <nav class="md-nav">
  433. <ul class="md-nav__list">
  434. <li class="md-nav__item">
  435. <a href="#uninstalling-with-helm" class="md-nav__link">
  436. Uninstalling with Helm
  437. </a>
  438. </li>
  439. </ul>
  440. </nav>
  441. </li>
  442. </ul>
  443. </nav>
  444. </div>
  445. </div>
  446. </div>
  447. <div class="md-content">
  448. <article class="md-content__inner md-typeset">
  449. <a href="https://github.com/external-secrets/external-secrets/edit/master/docs/guides-getting-started.md" title="Edit this page" class="md-icon md-content__icon">&#xE3C9;</a>
  450. <h1 id="getting-started">Getting started</h1>
  451. <p>External-secrets runs within your Kubernetes cluster as a deployment resource.
  452. It utilizes CustomResourceDefinitions to configure access to secret providers through SecretStore resources
  453. and manages Kubernetes secret resources with ExternalSecret resources.</p>
  454. <blockquote>
  455. <p>Note: The minimum supported version of Kubernetes is <code>1.16.0</code>. Users still running Kubernetes v1.15 or below should upgrade
  456. to a supported version before installing external-secrets.</p>
  457. </blockquote>
  458. <h2 id="installing-with-helm">Installing with Helm</h2>
  459. <p>To automatically install and manage the CRDs as part of your Helm release, you must add the --set installCRDs=true flag to your Helm installation command.</p>
  460. <p>Uncomment the relevant line in the next steps to enable this.</p>
  461. <h3 id="option-1-install-from-chart-repository">Option 1: Install from chart repository</h3>
  462. <div class="highlight"><pre><span></span>helm repo add external-secrets https://charts.external-secrets.io
  463. helm install external-secrets <span class="se">\</span>
  464. external-secrets/external-secrets <span class="se">\</span>
  465. -n external-secrets <span class="se">\</span>
  466. --create-namespace <span class="se">\</span>
  467. <span class="c1"># --set installCRDs=true</span>
  468. </pre></div>
  469. <h3 id="option-2-install-chart-from-local-build">Option 2: Install chart from local build</h3>
  470. <p>Build and install the Helm chart locally after cloning the repository.</p>
  471. <div class="highlight"><pre><span></span>make helm.build
  472. helm install external-secrets <span class="se">\</span>
  473. ./bin/chart/external-secrets.tgz <span class="se">\</span>
  474. -n external-secrets <span class="se">\</span>
  475. --create-namespace <span class="se">\</span>
  476. <span class="c1"># --set installCRDs=true</span>
  477. </pre></div>
  478. <h3 id="create-a-secret-containing-your-aws-credentials">Create a secret containing your AWS credentials</h3>
  479. <div class="highlight"><pre><span></span><span class="nb">echo</span> -n <span class="s1">&#39;KEYID&#39;</span> &gt; ./access-key
  480. <span class="nb">echo</span> -n <span class="s1">&#39;SECRETKEY&#39;</span> &gt; ./secret-access-key
  481. kubectl create secret generic awssm-secret --from-file<span class="o">=</span>./access-key --from-file<span class="o">=</span>./secret-access-key
  482. </pre></div>
  483. <h3 id="create-your-first-secretstore">Create your first SecretStore</h3>
  484. <div class="highlight"><pre><span></span><span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">external-secrets.io/v1alpha1</span>
  485. <span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">SecretStore</span>
  486. <span class="nt">metadata</span><span class="p">:</span>
  487. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secretstore-sample</span>
  488. <span class="nt">spec</span><span class="p">:</span>
  489. <span class="nt">controller</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">dev</span>
  490. <span class="nt">provider</span><span class="p">:</span>
  491. <span class="nt">aws</span><span class="p">:</span>
  492. <span class="nt">service</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">SecretsManager</span>
  493. <span class="nt">role</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">arn:aws:iam::123456789012:role/team-a-reader</span>
  494. <span class="nt">region</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">us-east-1</span>
  495. <span class="nt">auth</span><span class="p">:</span>
  496. <span class="nt">secretRef</span><span class="p">:</span>
  497. <span class="nt">accessKeyIDSecretRef</span><span class="p">:</span>
  498. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">awssm-secret</span>
  499. <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">access-key</span>
  500. <span class="nt">secretAccessKeySecretRef</span><span class="p">:</span>
  501. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">awssm-secret</span>
  502. <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secret-access-key</span>
  503. </pre></div>
  504. <h3 id="create-your-first-externalsecret">Create your first ExternalSecret</h3>
  505. <div class="highlight"><pre><span></span><span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">external-secrets.io/v1alpha1</span>
  506. <span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">ExternalSecret</span>
  507. <span class="nt">metadata</span><span class="p">:</span>
  508. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">example</span>
  509. <span class="nt">spec</span><span class="p">:</span>
  510. <span class="nt">refreshInterval</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">1h</span>
  511. <span class="nt">secretStoreRef</span><span class="p">:</span>
  512. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secretstore-sample</span>
  513. <span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">SecretStore</span>
  514. <span class="nt">target</span><span class="p">:</span>
  515. <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secret-to-be-created</span>
  516. <span class="nt">creationPolicy</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Owner</span>
  517. <span class="nt">data</span><span class="p">:</span>
  518. <span class="p p-Indicator">-</span> <span class="nt">secretKey</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">secret-key-to-be-managed</span>
  519. <span class="nt">remoteRef</span><span class="p">:</span>
  520. <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">provider-key</span>
  521. <span class="nt">version</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">provider-key-version</span>
  522. <span class="nt">property</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">provider-key-property</span>
  523. <span class="nt">dataFrom</span><span class="p">:</span>
  524. <span class="p p-Indicator">-</span> <span class="nt">remoteRef</span><span class="p">:</span>
  525. <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">remote-key-in-the-provider</span>
  526. </pre></div>
  527. <div class="highlight"><pre><span></span>kubectl describe externalsecret example
  528. <span class="c1"># [...]</span>
  529. Name: example
  530. Status:
  531. Conditions:
  532. Last Transition Time: <span class="m">2021</span>-02-24T16:45:23Z
  533. Message: Secret was synced
  534. Reason: SecretSynced
  535. Status: True
  536. Type: Ready
  537. Refresh Time: <span class="m">2021</span>-02-24T16:45:24Z
  538. Events: &lt;none&gt;
  539. </pre></div>
  540. <p>For more advanced examples, please read the other
  541. <a href="../guides-introduction/">guides</a>.</p>
  542. <h2 id="uninstalling">Uninstalling</h2>
  543. <p>Before continuing, ensure that all external-secret resources that have been created by users have been deleted.
  544. You can check for any existing resources with the following command:</p>
  545. <div class="highlight"><pre><span></span>kubectl get SecretStores,ClusterSecretStores,ExternalSecrets --all-namespaces
  546. </pre></div>
  547. <p>Once all these resources have been deleted you are ready to uninstall external-secrets.</p>
  548. <h3 id="uninstalling-with-helm">Uninstalling with Helm</h3>
  549. <p>Uninstall the helm release using the delete command.</p>
  550. <div class="highlight"><pre><span></span>helm delete external-secrets --namespace external-secrets
  551. </pre></div>
  552. </article>
  553. </div>
  554. </div>
  555. </main>
  556. <footer class="md-footer">
  557. <div class="md-footer-nav">
  558. <nav class="md-footer-nav__inner md-grid">
  559. <a href="../guides-introduction/" title="Introduction" class="md-flex md-footer-nav__link md-footer-nav__link--prev" rel="prev">
  560. <div class="md-flex__cell md-flex__cell--shrink">
  561. <i class="md-icon md-icon--arrow-back md-footer-nav__button"></i>
  562. </div>
  563. <div class="md-flex__cell md-flex__cell--stretch md-footer-nav__title">
  564. <span class="md-flex__ellipsis">
  565. <span class="md-footer-nav__direction">
  566. Previous
  567. </span>
  568. Introduction
  569. </span>
  570. </div>
  571. </a>
  572. <a href="../guides-templating/" title="Advanced Templating" class="md-flex md-footer-nav__link md-footer-nav__link--next" rel="next">
  573. <div class="md-flex__cell md-flex__cell--stretch md-footer-nav__title">
  574. <span class="md-flex__ellipsis">
  575. <span class="md-footer-nav__direction">
  576. Next
  577. </span>
  578. Advanced Templating
  579. </span>
  580. </div>
  581. <div class="md-flex__cell md-flex__cell--shrink">
  582. <i class="md-icon md-icon--arrow-forward md-footer-nav__button"></i>
  583. </div>
  584. </a>
  585. </nav>
  586. </div>
  587. <div class="md-footer-meta md-typeset">
  588. <div class="md-footer-meta__inner md-grid">
  589. <div class="md-footer-copyright">
  590. powered by
  591. <a href="https://www.mkdocs.org">MkDocs</a>
  592. and
  593. <a href="https://squidfunk.github.io/mkdocs-material/">
  594. Material for MkDocs</a>
  595. </div>
  596. </div>
  597. </div>
  598. </footer>
  599. </div>
  600. <script src="../assets/javascripts/application.808e90bb.js"></script>
  601. <script>app.initialize({version:"1.0.4",url:{base:".."}})</script>
  602. </body>
  603. </html>