vaultdynamicsecret-v1alpha1.yaml 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: VaultDynamicSecret
  3. metadata: {}
  4. spec:
  5. allowEmptyResponse: false
  6. controller: string
  7. method: string
  8. parameters:
  9. path: string
  10. provider:
  11. auth:
  12. appRole:
  13. path: "approle"
  14. roleId: string
  15. roleRef:
  16. key: string
  17. name: string
  18. namespace: string
  19. secretRef:
  20. key: string
  21. name: string
  22. namespace: string
  23. cert:
  24. clientCert:
  25. key: string
  26. name: string
  27. namespace: string
  28. path: "cert"
  29. secretRef:
  30. key: string
  31. name: string
  32. namespace: string
  33. gcp:
  34. location: string
  35. path: "gcp"
  36. projectID: string
  37. role: string
  38. secretRef:
  39. secretAccessKeySecretRef:
  40. key: string
  41. name: string
  42. namespace: string
  43. serviceAccountRef:
  44. audiences: [] # minItems 0 of type string
  45. name: string
  46. namespace: string
  47. workloadIdentity:
  48. clusterLocation: string
  49. clusterName: string
  50. clusterProjectID: string
  51. serviceAccountRef:
  52. audiences: [] # minItems 0 of type string
  53. name: string
  54. namespace: string
  55. iam:
  56. externalID: string
  57. jwt:
  58. serviceAccountRef:
  59. audiences: [] # minItems 0 of type string
  60. name: string
  61. namespace: string
  62. path: string
  63. region: string
  64. role: string
  65. secretRef:
  66. accessKeyIDSecretRef:
  67. key: string
  68. name: string
  69. namespace: string
  70. secretAccessKeySecretRef:
  71. key: string
  72. name: string
  73. namespace: string
  74. sessionTokenSecretRef:
  75. key: string
  76. name: string
  77. namespace: string
  78. vaultAwsIamServerID: string
  79. vaultRole: string
  80. jwt:
  81. kubernetesServiceAccountToken:
  82. audiences: [] # minItems 0 of type string
  83. expirationSeconds: 1
  84. serviceAccountRef:
  85. audiences: [] # minItems 0 of type string
  86. name: string
  87. namespace: string
  88. path: "jwt"
  89. role: string
  90. secretRef:
  91. key: string
  92. name: string
  93. namespace: string
  94. kubernetes:
  95. mountPath: "kubernetes"
  96. role: string
  97. secretRef:
  98. key: string
  99. name: string
  100. namespace: string
  101. serviceAccountRef:
  102. audiences: [] # minItems 0 of type string
  103. name: string
  104. namespace: string
  105. ldap:
  106. path: "ldap"
  107. secretRef:
  108. key: string
  109. name: string
  110. namespace: string
  111. username: string
  112. namespace: string
  113. tokenSecretRef:
  114. key: string
  115. name: string
  116. namespace: string
  117. userPass:
  118. path: "userpass"
  119. secretRef:
  120. key: string
  121. name: string
  122. namespace: string
  123. username: string
  124. caBundle: c3RyaW5n
  125. caProvider:
  126. key: string
  127. name: string
  128. namespace: string
  129. type: "Secret" # "Secret", "ConfigMap"
  130. checkAndSet:
  131. required: true
  132. forwardInconsistent: true
  133. headers: {}
  134. namespace: string
  135. path: string
  136. readYourWrites: true
  137. server: string
  138. tls:
  139. certSecretRef:
  140. key: string
  141. name: string
  142. namespace: string
  143. keySecretRef:
  144. key: string
  145. name: string
  146. namespace: string
  147. version: "v2"
  148. resultType: "Data"
  149. retrySettings:
  150. maxRetries: 1
  151. retryInterval: string