index.html 52 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534
  1. <!doctype html>
  2. <html lang="en" class="no-js">
  3. <head>
  4. <meta charset="utf-8">
  5. <meta name="viewport" content="width=device-width,initial-scale=1">
  6. <meta http-equiv="x-ua-compatible" content="ie=edge">
  7. <meta name="lang:clipboard.copy" content="Copy to clipboard">
  8. <meta name="lang:clipboard.copied" content="Copied to clipboard">
  9. <meta name="lang:search.language" content="en">
  10. <meta name="lang:search.pipeline.stopwords" content="True">
  11. <meta name="lang:search.pipeline.trimmer" content="True">
  12. <meta name="lang:search.result.none" content="No matching documents">
  13. <meta name="lang:search.result.one" content="1 matching document">
  14. <meta name="lang:search.result.other" content="# matching documents">
  15. <meta name="lang:search.tokenizer" content="[\s\-]+">
  16. <link rel="shortcut icon" href="../assets/images/favicon.png">
  17. <meta name="generator" content="mkdocs-1.0.4, mkdocs-material-4.6.0">
  18. <title>API specification - External Secrets Operator</title>
  19. <link rel="stylesheet" href="../assets/stylesheets/application.1b62728e.css">
  20. <script src="../assets/javascripts/modernizr.268332fc.js"></script>
  21. <link href="https://fonts.gstatic.com" rel="preconnect" crossorigin>
  22. <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,400,400i,700%7CRoboto+Mono&display=fallback">
  23. <style>body,input{font-family:"Roboto","Helvetica Neue",Helvetica,Arial,sans-serif}code,kbd,pre{font-family:"Roboto Mono","Courier New",Courier,monospace}</style>
  24. <link rel="stylesheet" href="../assets/fonts/material-icons.css">
  25. </head>
  26. <body dir="ltr">
  27. <svg class="md-svg">
  28. <defs>
  29. <svg xmlns="http://www.w3.org/2000/svg" width="416" height="448" viewBox="0 0 416 448" id="__github"><path fill="currentColor" d="M160 304q0 10-3.125 20.5t-10.75 19T128 352t-18.125-8.5-10.75-19T96 304t3.125-20.5 10.75-19T128 256t18.125 8.5 10.75 19T160 304zm160 0q0 10-3.125 20.5t-10.75 19T288 352t-18.125-8.5-10.75-19T256 304t3.125-20.5 10.75-19T288 256t18.125 8.5 10.75 19T320 304zm40 0q0-30-17.25-51T296 232q-10.25 0-48.75 5.25Q229.5 240 208 240t-39.25-2.75Q130.75 232 120 232q-29.5 0-46.75 21T56 304q0 22 8 38.375t20.25 25.75 30.5 15 35 7.375 37.25 1.75h42q20.5 0 37.25-1.75t35-7.375 30.5-15 20.25-25.75T360 304zm56-44q0 51.75-15.25 82.75-9.5 19.25-26.375 33.25t-35.25 21.5-42.5 11.875-42.875 5.5T212 416q-19.5 0-35.5-.75t-36.875-3.125-38.125-7.5-34.25-12.875T37 371.5t-21.5-28.75Q0 312 0 260q0-59.25 34-99-6.75-20.5-6.75-42.5 0-29 12.75-54.5 27 0 47.5 9.875t47.25 30.875Q171.5 96 212 96q37 0 70 8 26.25-20.5 46.75-30.25T376 64q12.75 25.5 12.75 54.5 0 21.75-6.75 42 34 40 34 99.5z"/></svg>
  30. </defs>
  31. </svg>
  32. <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
  33. <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
  34. <label class="md-overlay" data-md-component="overlay" for="__drawer"></label>
  35. <header class="md-header" data-md-component="header">
  36. <nav class="md-header-nav md-grid">
  37. <div class="md-flex">
  38. <div class="md-flex__cell md-flex__cell--shrink">
  39. <a href=".." title="External Secrets Operator" class="md-header-nav__button md-logo">
  40. <i class="md-icon"></i>
  41. </a>
  42. </div>
  43. <div class="md-flex__cell md-flex__cell--shrink">
  44. <label class="md-icon md-icon--menu md-header-nav__button" for="__drawer"></label>
  45. </div>
  46. <div class="md-flex__cell md-flex__cell--stretch">
  47. <div class="md-flex__ellipsis md-header-nav__title" data-md-component="title">
  48. <span class="md-header-nav__topic">
  49. External Secrets Operator
  50. </span>
  51. <span class="md-header-nav__topic">
  52. API specification
  53. </span>
  54. </div>
  55. </div>
  56. <div class="md-flex__cell md-flex__cell--shrink">
  57. <label class="md-icon md-icon--search md-header-nav__button" for="__search"></label>
  58. <div class="md-search" data-md-component="search" role="dialog">
  59. <label class="md-search__overlay" for="__search"></label>
  60. <div class="md-search__inner" role="search">
  61. <form class="md-search__form" name="search">
  62. <input type="text" class="md-search__input" name="query" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="query" data-md-state="active">
  63. <label class="md-icon md-search__icon" for="__search"></label>
  64. <button type="reset" class="md-icon md-search__icon" data-md-component="reset" tabindex="-1">
  65. &#xE5CD;
  66. </button>
  67. </form>
  68. <div class="md-search__output">
  69. <div class="md-search__scrollwrap" data-md-scrollfix>
  70. <div class="md-search-result" data-md-component="result">
  71. <div class="md-search-result__meta">
  72. Type to start searching
  73. </div>
  74. <ol class="md-search-result__list"></ol>
  75. </div>
  76. </div>
  77. </div>
  78. </div>
  79. </div>
  80. </div>
  81. <div class="md-flex__cell md-flex__cell--shrink">
  82. <div class="md-header-nav__source">
  83. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-source="github">
  84. <div class="md-source__icon">
  85. <svg viewBox="0 0 24 24" width="24" height="24">
  86. <use xlink:href="#__github" width="24" height="24"></use>
  87. </svg>
  88. </div>
  89. <div class="md-source__repository">
  90. External Secrets Operator
  91. </div>
  92. </a>
  93. </div>
  94. </div>
  95. </div>
  96. </nav>
  97. </header>
  98. <div class="md-container">
  99. <main class="md-main" role="main">
  100. <div class="md-main__inner md-grid" data-md-component="container">
  101. <div class="md-sidebar md-sidebar--primary" data-md-component="navigation">
  102. <div class="md-sidebar__scrollwrap">
  103. <div class="md-sidebar__inner">
  104. <nav class="md-nav md-nav--primary" data-md-level="0">
  105. <label class="md-nav__title md-nav__title--site" for="__drawer">
  106. <a href=".." title="External Secrets Operator" class="md-nav__button md-logo">
  107. <i class="md-icon"></i>
  108. </a>
  109. External Secrets Operator
  110. </label>
  111. <div class="md-nav__source">
  112. <a href="https://github.com/external-secrets/external-secrets/" title="Go to repository" class="md-source" data-md-source="github">
  113. <div class="md-source__icon">
  114. <svg viewBox="0 0 24 24" width="24" height="24">
  115. <use xlink:href="#__github" width="24" height="24"></use>
  116. </svg>
  117. </div>
  118. <div class="md-source__repository">
  119. External Secrets Operator
  120. </div>
  121. </a>
  122. </div>
  123. <ul class="md-nav__list" data-md-scrollfix>
  124. <li class="md-nav__item">
  125. <a href=".." title="Introduction" class="md-nav__link">
  126. Introduction
  127. </a>
  128. </li>
  129. <li class="md-nav__item">
  130. <a href="../api-overview/" title="Overview" class="md-nav__link">
  131. Overview
  132. </a>
  133. </li>
  134. <li class="md-nav__item md-nav__item--nested">
  135. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-3" type="checkbox" id="nav-3">
  136. <label class="md-nav__link" for="nav-3">
  137. API Types
  138. </label>
  139. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  140. <label class="md-nav__title" for="nav-3">
  141. API Types
  142. </label>
  143. <ul class="md-nav__list" data-md-scrollfix>
  144. <li class="md-nav__item">
  145. <a href="../api-externalsecret/" title="ExternalSecret" class="md-nav__link">
  146. ExternalSecret
  147. </a>
  148. </li>
  149. <li class="md-nav__item">
  150. <a href="../api-secretstore/" title="SecretStore" class="md-nav__link">
  151. SecretStore
  152. </a>
  153. </li>
  154. <li class="md-nav__item">
  155. <a href="../api-clustersecretstore/" title="ClusterSecretStore" class="md-nav__link">
  156. ClusterSecretStore
  157. </a>
  158. </li>
  159. </ul>
  160. </nav>
  161. </li>
  162. <li class="md-nav__item md-nav__item--nested">
  163. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-4" type="checkbox" id="nav-4">
  164. <label class="md-nav__link" for="nav-4">
  165. Guides
  166. </label>
  167. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  168. <label class="md-nav__title" for="nav-4">
  169. Guides
  170. </label>
  171. <ul class="md-nav__list" data-md-scrollfix>
  172. <li class="md-nav__item">
  173. <a href="../guides-introduction/" title="Introduction" class="md-nav__link">
  174. Introduction
  175. </a>
  176. </li>
  177. <li class="md-nav__item">
  178. <a href="../guides-getting-started/" title="Getting started" class="md-nav__link">
  179. Getting started
  180. </a>
  181. </li>
  182. <li class="md-nav__item">
  183. <a href="../guides-templating/" title="Advanced Templating" class="md-nav__link">
  184. Advanced Templating
  185. </a>
  186. </li>
  187. <li class="md-nav__item">
  188. <a href="../guides-multi-tenancy/" title="Multi Tenancy" class="md-nav__link">
  189. Multi Tenancy
  190. </a>
  191. </li>
  192. <li class="md-nav__item">
  193. <a href="../guides-metrics/" title="Metrics" class="md-nav__link">
  194. Metrics
  195. </a>
  196. </li>
  197. </ul>
  198. </nav>
  199. </li>
  200. <li class="md-nav__item md-nav__item--nested">
  201. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5" type="checkbox" id="nav-5">
  202. <label class="md-nav__link" for="nav-5">
  203. Provider
  204. </label>
  205. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  206. <label class="md-nav__title" for="nav-5">
  207. Provider
  208. </label>
  209. <ul class="md-nav__list" data-md-scrollfix>
  210. <li class="md-nav__item md-nav__item--nested">
  211. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-1" type="checkbox" id="nav-5-1">
  212. <label class="md-nav__link" for="nav-5-1">
  213. AWS
  214. </label>
  215. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  216. <label class="md-nav__title" for="nav-5-1">
  217. AWS
  218. </label>
  219. <ul class="md-nav__list" data-md-scrollfix>
  220. <li class="md-nav__item">
  221. <a href="../provider-aws-secrets-manager/" title="Secrets Manager" class="md-nav__link">
  222. Secrets Manager
  223. </a>
  224. </li>
  225. <li class="md-nav__item">
  226. <a href="../provider-aws-parameter-store/" title="Parameter Store" class="md-nav__link">
  227. Parameter Store
  228. </a>
  229. </li>
  230. </ul>
  231. </nav>
  232. </li>
  233. <li class="md-nav__item md-nav__item--nested">
  234. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-2" type="checkbox" id="nav-5-2">
  235. <label class="md-nav__link" for="nav-5-2">
  236. Azure
  237. </label>
  238. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  239. <label class="md-nav__title" for="nav-5-2">
  240. Azure
  241. </label>
  242. <ul class="md-nav__list" data-md-scrollfix>
  243. <li class="md-nav__item">
  244. <a href="../provider-azure-key-vault/" title="Key Vault" class="md-nav__link">
  245. Key Vault
  246. </a>
  247. </li>
  248. </ul>
  249. </nav>
  250. </li>
  251. <li class="md-nav__item md-nav__item--nested">
  252. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-5-3" type="checkbox" id="nav-5-3">
  253. <label class="md-nav__link" for="nav-5-3">
  254. Google
  255. </label>
  256. <nav class="md-nav" data-md-component="collapsible" data-md-level="2">
  257. <label class="md-nav__title" for="nav-5-3">
  258. Google
  259. </label>
  260. <ul class="md-nav__list" data-md-scrollfix>
  261. <li class="md-nav__item">
  262. <a href="../provider-google-secrets-manager/" title="Secrets Manager" class="md-nav__link">
  263. Secrets Manager
  264. </a>
  265. </li>
  266. </ul>
  267. </nav>
  268. </li>
  269. <li class="md-nav__item">
  270. <a href="../provider-hashicorp-vault/" title="HashiCorp Vault" class="md-nav__link">
  271. HashiCorp Vault
  272. </a>
  273. </li>
  274. </ul>
  275. </nav>
  276. </li>
  277. <li class="md-nav__item md-nav__item--active md-nav__item--nested">
  278. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-6" type="checkbox" id="nav-6" checked>
  279. <label class="md-nav__link" for="nav-6">
  280. References
  281. </label>
  282. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  283. <label class="md-nav__title" for="nav-6">
  284. References
  285. </label>
  286. <ul class="md-nav__list" data-md-scrollfix>
  287. <li class="md-nav__item md-nav__item--active">
  288. <input class="md-toggle md-nav__toggle" data-md-toggle="toc" type="checkbox" id="__toc">
  289. <a href="./" title="API specification" class="md-nav__link md-nav__link--active">
  290. API specification
  291. </a>
  292. </li>
  293. </ul>
  294. </nav>
  295. </li>
  296. <li class="md-nav__item md-nav__item--nested">
  297. <input class="md-toggle md-nav__toggle" data-md-toggle="nav-7" type="checkbox" id="nav-7">
  298. <label class="md-nav__link" for="nav-7">
  299. Contributing
  300. </label>
  301. <nav class="md-nav" data-md-component="collapsible" data-md-level="1">
  302. <label class="md-nav__title" for="nav-7">
  303. Contributing
  304. </label>
  305. <ul class="md-nav__list" data-md-scrollfix>
  306. <li class="md-nav__item">
  307. <a href="../contributing-devguide/" title="Developer guide" class="md-nav__link">
  308. Developer guide
  309. </a>
  310. </li>
  311. <li class="md-nav__item">
  312. <a href="../contributing-process/" title="Contributing Process" class="md-nav__link">
  313. Contributing Process
  314. </a>
  315. </li>
  316. <li class="md-nav__item">
  317. <a href="../contributing-coc/" title="Code of Conduct" class="md-nav__link">
  318. Code of Conduct
  319. </a>
  320. </li>
  321. </ul>
  322. </nav>
  323. </li>
  324. </ul>
  325. </nav>
  326. </div>
  327. </div>
  328. </div>
  329. <div class="md-content">
  330. <article class="md-content__inner md-typeset">
  331. <a href="https://github.com/external-secrets/external-secrets/edit/master/docs/spec.md" title="Edit this page" class="md-icon md-content__icon">&#xE3C9;</a>
  332. <h1>API specification</h1>
  333. <p>Packages:</p>
  334. <ul>
  335. <li>
  336. <a href="#external-secrets.io%2fv1alpha1">external-secrets.io/v1alpha1</a>
  337. </li>
  338. </ul>
  339. <h2 id="external-secrets.io/v1alpha1">external-secrets.io/v1alpha1</h2>
  340. <p>
  341. <p>Package v1alpha1 contains resources for external-secrets</p>
  342. </p>
  343. <p>Resource Types:
  344. <ul></ul>
  345. <h3 id="external-secrets.io/v1alpha1.AWSAuth">AWSAuth
  346. </h3>
  347. <p>
  348. (<em>Appears on:</em>
  349. <a href="#external-secrets.io/v1alpha1.AWSProvider">AWSProvider</a>)
  350. </p>
  351. <p>
  352. <p>AWSAuth contains a secretRef for credentials.</p>
  353. </p>
  354. <table>
  355. <thead>
  356. <tr>
  357. <th>Field</th>
  358. <th>Description</th>
  359. </tr>
  360. </thead>
  361. <tbody>
  362. <tr>
  363. <td>
  364. <code>secretRef</code></br>
  365. <em>
  366. <a href="#external-secrets.io/v1alpha1.AWSAuthSecretRef">
  367. AWSAuthSecretRef
  368. </a>
  369. </em>
  370. </td>
  371. <td>
  372. </td>
  373. </tr>
  374. </tbody>
  375. </table>
  376. <h3 id="external-secrets.io/v1alpha1.AWSAuthSecretRef">AWSAuthSecretRef
  377. </h3>
  378. <p>
  379. (<em>Appears on:</em>
  380. <a href="#external-secrets.io/v1alpha1.AWSAuth">AWSAuth</a>)
  381. </p>
  382. <p>
  383. <p>AWSAuthSecretRef holds secret references for aws credentials
  384. both AccessKeyID and SecretAccessKey must be defined in order to properly authenticate.</p>
  385. </p>
  386. <table>
  387. <thead>
  388. <tr>
  389. <th>Field</th>
  390. <th>Description</th>
  391. </tr>
  392. </thead>
  393. <tbody>
  394. <tr>
  395. <td>
  396. <code>accessKeyIDSecretRef</code></br>
  397. <em>
  398. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  399. </em>
  400. </td>
  401. <td>
  402. <p>The AccessKeyID is used for authentication</p>
  403. </td>
  404. </tr>
  405. <tr>
  406. <td>
  407. <code>secretAccessKeySecretRef</code></br>
  408. <em>
  409. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  410. </em>
  411. </td>
  412. <td>
  413. <p>The SecretAccessKey is used for authentication</p>
  414. </td>
  415. </tr>
  416. </tbody>
  417. </table>
  418. <h3 id="external-secrets.io/v1alpha1.AWSProvider">AWSProvider
  419. </h3>
  420. <p>
  421. (<em>Appears on:</em>
  422. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  423. </p>
  424. <p>
  425. <p>AWSProvider configures a store to sync secrets with AWS.</p>
  426. </p>
  427. <table>
  428. <thead>
  429. <tr>
  430. <th>Field</th>
  431. <th>Description</th>
  432. </tr>
  433. </thead>
  434. <tbody>
  435. <tr>
  436. <td>
  437. <code>service</code></br>
  438. <em>
  439. <a href="#external-secrets.io/v1alpha1.AWSServiceType">
  440. AWSServiceType
  441. </a>
  442. </em>
  443. </td>
  444. <td>
  445. <p>Service defines which service should be used to fetch the secrets</p>
  446. </td>
  447. </tr>
  448. <tr>
  449. <td>
  450. <code>auth</code></br>
  451. <em>
  452. <a href="#external-secrets.io/v1alpha1.AWSAuth">
  453. AWSAuth
  454. </a>
  455. </em>
  456. </td>
  457. <td>
  458. <em>(Optional)</em>
  459. <p>Auth defines the information necessary to authenticate against AWS
  460. if not set aws sdk will infer credentials from your environment
  461. see: <a href="https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials">https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials</a></p>
  462. </td>
  463. </tr>
  464. <tr>
  465. <td>
  466. <code>role</code></br>
  467. <em>
  468. string
  469. </em>
  470. </td>
  471. <td>
  472. <em>(Optional)</em>
  473. <p>Role is a Role ARN which the SecretManager provider will assume</p>
  474. </td>
  475. </tr>
  476. <tr>
  477. <td>
  478. <code>region</code></br>
  479. <em>
  480. string
  481. </em>
  482. </td>
  483. <td>
  484. <p>AWS Region to be used for the provider</p>
  485. </td>
  486. </tr>
  487. </tbody>
  488. </table>
  489. <h3 id="external-secrets.io/v1alpha1.AWSServiceType">AWSServiceType
  490. (<code>string</code> alias)</p></h3>
  491. <p>
  492. (<em>Appears on:</em>
  493. <a href="#external-secrets.io/v1alpha1.AWSProvider">AWSProvider</a>)
  494. </p>
  495. <p>
  496. <p>AWSServiceType is a enum that defines the service/API that is used to fetch the secrets.</p>
  497. </p>
  498. <table>
  499. <thead>
  500. <tr>
  501. <th>Value</th>
  502. <th>Description</th>
  503. </tr>
  504. </thead>
  505. <tbody><tr><td><p>&#34;ParameterStore&#34;</p></td>
  506. <td><p>AWSServiceParameterStore is the AWS SystemsManager ParameterStore.
  507. see: <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html">https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html</a></p>
  508. </td>
  509. </tr><tr><td><p>&#34;SecretsManager&#34;</p></td>
  510. <td><p>AWSServiceSecretsManager is the AWS SecretsManager.
  511. see: <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html">https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html</a></p>
  512. </td>
  513. </tr></tbody>
  514. </table>
  515. <h3 id="external-secrets.io/v1alpha1.ClusterSecretStore">ClusterSecretStore
  516. </h3>
  517. <p>
  518. <p>ClusterSecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  519. </p>
  520. <table>
  521. <thead>
  522. <tr>
  523. <th>Field</th>
  524. <th>Description</th>
  525. </tr>
  526. </thead>
  527. <tbody>
  528. <tr>
  529. <td>
  530. <code>metadata</code></br>
  531. <em>
  532. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  533. Kubernetes meta/v1.ObjectMeta
  534. </a>
  535. </em>
  536. </td>
  537. <td>
  538. Refer to the Kubernetes API documentation for the fields of the
  539. <code>metadata</code> field.
  540. </td>
  541. </tr>
  542. <tr>
  543. <td>
  544. <code>spec</code></br>
  545. <em>
  546. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">
  547. SecretStoreSpec
  548. </a>
  549. </em>
  550. </td>
  551. <td>
  552. <br/>
  553. <br/>
  554. <table>
  555. <tr>
  556. <td>
  557. <code>controller</code></br>
  558. <em>
  559. string
  560. </em>
  561. </td>
  562. <td>
  563. <em>(Optional)</em>
  564. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  565. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  566. </td>
  567. </tr>
  568. <tr>
  569. <td>
  570. <code>provider</code></br>
  571. <em>
  572. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  573. SecretStoreProvider
  574. </a>
  575. </em>
  576. </td>
  577. <td>
  578. <p>Used to configure the provider. Only one provider may be set</p>
  579. </td>
  580. </tr>
  581. </table>
  582. </td>
  583. </tr>
  584. </tbody>
  585. </table>
  586. <h3 id="external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret
  587. </h3>
  588. <p>
  589. <p>ExternalSecret is the Schema for the external-secrets API.</p>
  590. </p>
  591. <table>
  592. <thead>
  593. <tr>
  594. <th>Field</th>
  595. <th>Description</th>
  596. </tr>
  597. </thead>
  598. <tbody>
  599. <tr>
  600. <td>
  601. <code>metadata</code></br>
  602. <em>
  603. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  604. Kubernetes meta/v1.ObjectMeta
  605. </a>
  606. </em>
  607. </td>
  608. <td>
  609. Refer to the Kubernetes API documentation for the fields of the
  610. <code>metadata</code> field.
  611. </td>
  612. </tr>
  613. <tr>
  614. <td>
  615. <code>spec</code></br>
  616. <em>
  617. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">
  618. ExternalSecretSpec
  619. </a>
  620. </em>
  621. </td>
  622. <td>
  623. <br/>
  624. <br/>
  625. <table>
  626. <tr>
  627. <td>
  628. <code>secretStoreRef</code></br>
  629. <em>
  630. <a href="#external-secrets.io/v1alpha1.SecretStoreRef">
  631. SecretStoreRef
  632. </a>
  633. </em>
  634. </td>
  635. <td>
  636. </td>
  637. </tr>
  638. <tr>
  639. <td>
  640. <code>target</code></br>
  641. <em>
  642. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">
  643. ExternalSecretTarget
  644. </a>
  645. </em>
  646. </td>
  647. <td>
  648. </td>
  649. </tr>
  650. <tr>
  651. <td>
  652. <code>refreshInterval</code></br>
  653. <em>
  654. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#duration-v1-meta">
  655. Kubernetes meta/v1.Duration
  656. </a>
  657. </em>
  658. </td>
  659. <td>
  660. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider
  661. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  662. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  663. </td>
  664. </tr>
  665. <tr>
  666. <td>
  667. <code>data</code></br>
  668. <em>
  669. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">
  670. []ExternalSecretData
  671. </a>
  672. </em>
  673. </td>
  674. <td>
  675. <em>(Optional)</em>
  676. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  677. </td>
  678. </tr>
  679. <tr>
  680. <td>
  681. <code>dataFrom</code></br>
  682. <em>
  683. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  684. []ExternalSecretDataRemoteRef
  685. </a>
  686. </em>
  687. </td>
  688. <td>
  689. <em>(Optional)</em>
  690. <p>DataFrom is used to fetch all properties from a specific Provider data
  691. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  692. </td>
  693. </tr>
  694. </table>
  695. </td>
  696. </tr>
  697. <tr>
  698. <td>
  699. <code>status</code></br>
  700. <em>
  701. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatus">
  702. ExternalSecretStatus
  703. </a>
  704. </em>
  705. </td>
  706. <td>
  707. </td>
  708. </tr>
  709. </tbody>
  710. </table>
  711. <h3 id="external-secrets.io/v1alpha1.ExternalSecretConditionType">ExternalSecretConditionType
  712. (<code>string</code> alias)</p></h3>
  713. <p>
  714. (<em>Appears on:</em>
  715. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatusCondition">ExternalSecretStatusCondition</a>)
  716. </p>
  717. <p>
  718. </p>
  719. <table>
  720. <thead>
  721. <tr>
  722. <th>Value</th>
  723. <th>Description</th>
  724. </tr>
  725. </thead>
  726. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  727. <td></td>
  728. </tr></tbody>
  729. </table>
  730. <h3 id="external-secrets.io/v1alpha1.ExternalSecretCreationPolicy">ExternalSecretCreationPolicy
  731. (<code>string</code> alias)</p></h3>
  732. <p>
  733. (<em>Appears on:</em>
  734. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget</a>)
  735. </p>
  736. <p>
  737. <p>ExternalSecretCreationPolicy defines rules on how to create the resulting Secret.</p>
  738. </p>
  739. <table>
  740. <thead>
  741. <tr>
  742. <th>Value</th>
  743. <th>Description</th>
  744. </tr>
  745. </thead>
  746. <tbody><tr><td><p>&#34;Merge&#34;</p></td>
  747. <td><p>Merge does not create the Secret, but merges the data fields to the Secret.</p>
  748. </td>
  749. </tr><tr><td><p>&#34;None&#34;</p></td>
  750. <td><p>None does not create a Secret (future use with injector).</p>
  751. </td>
  752. </tr><tr><td><p>&#34;Owner&#34;</p></td>
  753. <td><p>Owner creates the Secret and sets .metadata.ownerReferences to the ExternalSecret resource.</p>
  754. </td>
  755. </tr></tbody>
  756. </table>
  757. <h3 id="external-secrets.io/v1alpha1.ExternalSecretData">ExternalSecretData
  758. </h3>
  759. <p>
  760. (<em>Appears on:</em>
  761. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  762. </p>
  763. <p>
  764. <p>ExternalSecretData defines the connection between the Kubernetes Secret key (spec.data.<key>) and the Provider data.</p>
  765. </p>
  766. <table>
  767. <thead>
  768. <tr>
  769. <th>Field</th>
  770. <th>Description</th>
  771. </tr>
  772. </thead>
  773. <tbody>
  774. <tr>
  775. <td>
  776. <code>secretKey</code></br>
  777. <em>
  778. string
  779. </em>
  780. </td>
  781. <td>
  782. </td>
  783. </tr>
  784. <tr>
  785. <td>
  786. <code>remoteRef</code></br>
  787. <em>
  788. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  789. ExternalSecretDataRemoteRef
  790. </a>
  791. </em>
  792. </td>
  793. <td>
  794. </td>
  795. </tr>
  796. </tbody>
  797. </table>
  798. <h3 id="external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef
  799. </h3>
  800. <p>
  801. (<em>Appears on:</em>
  802. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">ExternalSecretData</a>,
  803. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  804. </p>
  805. <p>
  806. <p>ExternalSecretDataRemoteRef defines Provider data location.</p>
  807. </p>
  808. <table>
  809. <thead>
  810. <tr>
  811. <th>Field</th>
  812. <th>Description</th>
  813. </tr>
  814. </thead>
  815. <tbody>
  816. <tr>
  817. <td>
  818. <code>key</code></br>
  819. <em>
  820. string
  821. </em>
  822. </td>
  823. <td>
  824. <p>Key is the key used in the Provider, mandatory</p>
  825. </td>
  826. </tr>
  827. <tr>
  828. <td>
  829. <code>version</code></br>
  830. <em>
  831. string
  832. </em>
  833. </td>
  834. <td>
  835. <em>(Optional)</em>
  836. <p>Used to select a specific version of the Provider value, if supported</p>
  837. </td>
  838. </tr>
  839. <tr>
  840. <td>
  841. <code>property</code></br>
  842. <em>
  843. string
  844. </em>
  845. </td>
  846. <td>
  847. <em>(Optional)</em>
  848. <p>Used to select a specific property of the Provider value (if a map), if supported</p>
  849. </td>
  850. </tr>
  851. </tbody>
  852. </table>
  853. <h3 id="external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec
  854. </h3>
  855. <p>
  856. (<em>Appears on:</em>
  857. <a href="#external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret</a>)
  858. </p>
  859. <p>
  860. <p>ExternalSecretSpec defines the desired state of ExternalSecret.</p>
  861. </p>
  862. <table>
  863. <thead>
  864. <tr>
  865. <th>Field</th>
  866. <th>Description</th>
  867. </tr>
  868. </thead>
  869. <tbody>
  870. <tr>
  871. <td>
  872. <code>secretStoreRef</code></br>
  873. <em>
  874. <a href="#external-secrets.io/v1alpha1.SecretStoreRef">
  875. SecretStoreRef
  876. </a>
  877. </em>
  878. </td>
  879. <td>
  880. </td>
  881. </tr>
  882. <tr>
  883. <td>
  884. <code>target</code></br>
  885. <em>
  886. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">
  887. ExternalSecretTarget
  888. </a>
  889. </em>
  890. </td>
  891. <td>
  892. </td>
  893. </tr>
  894. <tr>
  895. <td>
  896. <code>refreshInterval</code></br>
  897. <em>
  898. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#duration-v1-meta">
  899. Kubernetes meta/v1.Duration
  900. </a>
  901. </em>
  902. </td>
  903. <td>
  904. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider
  905. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  906. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  907. </td>
  908. </tr>
  909. <tr>
  910. <td>
  911. <code>data</code></br>
  912. <em>
  913. <a href="#external-secrets.io/v1alpha1.ExternalSecretData">
  914. []ExternalSecretData
  915. </a>
  916. </em>
  917. </td>
  918. <td>
  919. <em>(Optional)</em>
  920. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  921. </td>
  922. </tr>
  923. <tr>
  924. <td>
  925. <code>dataFrom</code></br>
  926. <em>
  927. <a href="#external-secrets.io/v1alpha1.ExternalSecretDataRemoteRef">
  928. []ExternalSecretDataRemoteRef
  929. </a>
  930. </em>
  931. </td>
  932. <td>
  933. <em>(Optional)</em>
  934. <p>DataFrom is used to fetch all properties from a specific Provider data
  935. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  936. </td>
  937. </tr>
  938. </tbody>
  939. </table>
  940. <h3 id="external-secrets.io/v1alpha1.ExternalSecretStatus">ExternalSecretStatus
  941. </h3>
  942. <p>
  943. (<em>Appears on:</em>
  944. <a href="#external-secrets.io/v1alpha1.ExternalSecret">ExternalSecret</a>)
  945. </p>
  946. <p>
  947. </p>
  948. <table>
  949. <thead>
  950. <tr>
  951. <th>Field</th>
  952. <th>Description</th>
  953. </tr>
  954. </thead>
  955. <tbody>
  956. <tr>
  957. <td>
  958. <code>refreshTime</code></br>
  959. <em>
  960. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  961. Kubernetes meta/v1.Time
  962. </a>
  963. </em>
  964. </td>
  965. <td>
  966. <p>refreshTime is the time and date the external secret was fetched and
  967. the target secret updated</p>
  968. </td>
  969. </tr>
  970. <tr>
  971. <td>
  972. <code>conditions</code></br>
  973. <em>
  974. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatusCondition">
  975. []ExternalSecretStatusCondition
  976. </a>
  977. </em>
  978. </td>
  979. <td>
  980. <em>(Optional)</em>
  981. </td>
  982. </tr>
  983. </tbody>
  984. </table>
  985. <h3 id="external-secrets.io/v1alpha1.ExternalSecretStatusCondition">ExternalSecretStatusCondition
  986. </h3>
  987. <p>
  988. (<em>Appears on:</em>
  989. <a href="#external-secrets.io/v1alpha1.ExternalSecretStatus">ExternalSecretStatus</a>)
  990. </p>
  991. <p>
  992. </p>
  993. <table>
  994. <thead>
  995. <tr>
  996. <th>Field</th>
  997. <th>Description</th>
  998. </tr>
  999. </thead>
  1000. <tbody>
  1001. <tr>
  1002. <td>
  1003. <code>type</code></br>
  1004. <em>
  1005. <a href="#external-secrets.io/v1alpha1.ExternalSecretConditionType">
  1006. ExternalSecretConditionType
  1007. </a>
  1008. </em>
  1009. </td>
  1010. <td>
  1011. </td>
  1012. </tr>
  1013. <tr>
  1014. <td>
  1015. <code>status</code></br>
  1016. <em>
  1017. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#conditionstatus-v1-core">
  1018. Kubernetes core/v1.ConditionStatus
  1019. </a>
  1020. </em>
  1021. </td>
  1022. <td>
  1023. </td>
  1024. </tr>
  1025. <tr>
  1026. <td>
  1027. <code>reason</code></br>
  1028. <em>
  1029. string
  1030. </em>
  1031. </td>
  1032. <td>
  1033. <em>(Optional)</em>
  1034. </td>
  1035. </tr>
  1036. <tr>
  1037. <td>
  1038. <code>message</code></br>
  1039. <em>
  1040. string
  1041. </em>
  1042. </td>
  1043. <td>
  1044. <em>(Optional)</em>
  1045. </td>
  1046. </tr>
  1047. <tr>
  1048. <td>
  1049. <code>lastTransitionTime</code></br>
  1050. <em>
  1051. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  1052. Kubernetes meta/v1.Time
  1053. </a>
  1054. </em>
  1055. </td>
  1056. <td>
  1057. <em>(Optional)</em>
  1058. </td>
  1059. </tr>
  1060. </tbody>
  1061. </table>
  1062. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget
  1063. </h3>
  1064. <p>
  1065. (<em>Appears on:</em>
  1066. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  1067. </p>
  1068. <p>
  1069. <p>ExternalSecretTarget defines the Kubernetes Secret to be created
  1070. There can be only one target per ExternalSecret.</p>
  1071. </p>
  1072. <table>
  1073. <thead>
  1074. <tr>
  1075. <th>Field</th>
  1076. <th>Description</th>
  1077. </tr>
  1078. </thead>
  1079. <tbody>
  1080. <tr>
  1081. <td>
  1082. <code>name</code></br>
  1083. <em>
  1084. string
  1085. </em>
  1086. </td>
  1087. <td>
  1088. <em>(Optional)</em>
  1089. <p>Name defines the name of the Secret resource to be managed
  1090. This field is immutable
  1091. Defaults to the .metadata.name of the ExternalSecret resource</p>
  1092. </td>
  1093. </tr>
  1094. <tr>
  1095. <td>
  1096. <code>creationPolicy</code></br>
  1097. <em>
  1098. <a href="#external-secrets.io/v1alpha1.ExternalSecretCreationPolicy">
  1099. ExternalSecretCreationPolicy
  1100. </a>
  1101. </em>
  1102. </td>
  1103. <td>
  1104. <em>(Optional)</em>
  1105. <p>CreationPolicy defines rules on how to create the resulting Secret
  1106. Defaults to &lsquo;Owner&rsquo;</p>
  1107. </td>
  1108. </tr>
  1109. <tr>
  1110. <td>
  1111. <code>template</code></br>
  1112. <em>
  1113. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplate">
  1114. ExternalSecretTemplate
  1115. </a>
  1116. </em>
  1117. </td>
  1118. <td>
  1119. <em>(Optional)</em>
  1120. <p>Template defines a blueprint for the created Secret resource.</p>
  1121. </td>
  1122. </tr>
  1123. </tbody>
  1124. </table>
  1125. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTemplate">ExternalSecretTemplate
  1126. </h3>
  1127. <p>
  1128. (<em>Appears on:</em>
  1129. <a href="#external-secrets.io/v1alpha1.ExternalSecretTarget">ExternalSecretTarget</a>)
  1130. </p>
  1131. <p>
  1132. <p>ExternalSecretTemplate defines a blueprint for the created Secret resource.
  1133. we can not use native corev1.Secret, it will have empty ObjectMeta values: <a href="https://github.com/kubernetes-sigs/controller-tools/issues/448">https://github.com/kubernetes-sigs/controller-tools/issues/448</a></p>
  1134. </p>
  1135. <table>
  1136. <thead>
  1137. <tr>
  1138. <th>Field</th>
  1139. <th>Description</th>
  1140. </tr>
  1141. </thead>
  1142. <tbody>
  1143. <tr>
  1144. <td>
  1145. <code>type</code></br>
  1146. <em>
  1147. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#secrettype-v1-core">
  1148. Kubernetes core/v1.SecretType
  1149. </a>
  1150. </em>
  1151. </td>
  1152. <td>
  1153. <em>(Optional)</em>
  1154. </td>
  1155. </tr>
  1156. <tr>
  1157. <td>
  1158. <code>metadata</code></br>
  1159. <em>
  1160. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplateMetadata">
  1161. ExternalSecretTemplateMetadata
  1162. </a>
  1163. </em>
  1164. </td>
  1165. <td>
  1166. <em>(Optional)</em>
  1167. </td>
  1168. </tr>
  1169. <tr>
  1170. <td>
  1171. <code>data</code></br>
  1172. <em>
  1173. map[string]string
  1174. </em>
  1175. </td>
  1176. <td>
  1177. <em>(Optional)</em>
  1178. </td>
  1179. </tr>
  1180. </tbody>
  1181. </table>
  1182. <h3 id="external-secrets.io/v1alpha1.ExternalSecretTemplateMetadata">ExternalSecretTemplateMetadata
  1183. </h3>
  1184. <p>
  1185. (<em>Appears on:</em>
  1186. <a href="#external-secrets.io/v1alpha1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  1187. </p>
  1188. <p>
  1189. <p>ExternalSecretTemplateMetadata defines metadata fields for the Secret blueprint.</p>
  1190. </p>
  1191. <table>
  1192. <thead>
  1193. <tr>
  1194. <th>Field</th>
  1195. <th>Description</th>
  1196. </tr>
  1197. </thead>
  1198. <tbody>
  1199. <tr>
  1200. <td>
  1201. <code>annotations</code></br>
  1202. <em>
  1203. map[string]string
  1204. </em>
  1205. </td>
  1206. <td>
  1207. <em>(Optional)</em>
  1208. </td>
  1209. </tr>
  1210. <tr>
  1211. <td>
  1212. <code>labels</code></br>
  1213. <em>
  1214. map[string]string
  1215. </em>
  1216. </td>
  1217. <td>
  1218. <em>(Optional)</em>
  1219. </td>
  1220. </tr>
  1221. </tbody>
  1222. </table>
  1223. <h3 id="external-secrets.io/v1alpha1.GCPSMAuth">GCPSMAuth
  1224. </h3>
  1225. <p>
  1226. (<em>Appears on:</em>
  1227. <a href="#external-secrets.io/v1alpha1.GCPSMProvider">GCPSMProvider</a>)
  1228. </p>
  1229. <p>
  1230. </p>
  1231. <table>
  1232. <thead>
  1233. <tr>
  1234. <th>Field</th>
  1235. <th>Description</th>
  1236. </tr>
  1237. </thead>
  1238. <tbody>
  1239. <tr>
  1240. <td>
  1241. <code>secretRef</code></br>
  1242. <em>
  1243. <a href="#external-secrets.io/v1alpha1.GCPSMAuthSecretRef">
  1244. GCPSMAuthSecretRef
  1245. </a>
  1246. </em>
  1247. </td>
  1248. <td>
  1249. </td>
  1250. </tr>
  1251. </tbody>
  1252. </table>
  1253. <h3 id="external-secrets.io/v1alpha1.GCPSMAuthSecretRef">GCPSMAuthSecretRef
  1254. </h3>
  1255. <p>
  1256. (<em>Appears on:</em>
  1257. <a href="#external-secrets.io/v1alpha1.GCPSMAuth">GCPSMAuth</a>)
  1258. </p>
  1259. <p>
  1260. </p>
  1261. <table>
  1262. <thead>
  1263. <tr>
  1264. <th>Field</th>
  1265. <th>Description</th>
  1266. </tr>
  1267. </thead>
  1268. <tbody>
  1269. <tr>
  1270. <td>
  1271. <code>secretAccessKeySecretRef</code></br>
  1272. <em>
  1273. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1274. </em>
  1275. </td>
  1276. <td>
  1277. <em>(Optional)</em>
  1278. <p>The SecretAccessKey is used for authentication</p>
  1279. </td>
  1280. </tr>
  1281. </tbody>
  1282. </table>
  1283. <h3 id="external-secrets.io/v1alpha1.GCPSMProvider">GCPSMProvider
  1284. </h3>
  1285. <p>
  1286. (<em>Appears on:</em>
  1287. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  1288. </p>
  1289. <p>
  1290. <p>GCPSMProvider Configures a store to sync secrets using the GCP Secret Manager provider.</p>
  1291. </p>
  1292. <table>
  1293. <thead>
  1294. <tr>
  1295. <th>Field</th>
  1296. <th>Description</th>
  1297. </tr>
  1298. </thead>
  1299. <tbody>
  1300. <tr>
  1301. <td>
  1302. <code>auth</code></br>
  1303. <em>
  1304. <a href="#external-secrets.io/v1alpha1.GCPSMAuth">
  1305. GCPSMAuth
  1306. </a>
  1307. </em>
  1308. </td>
  1309. <td>
  1310. <p>Auth defines the information necessary to authenticate against GCP</p>
  1311. </td>
  1312. </tr>
  1313. <tr>
  1314. <td>
  1315. <code>projectID</code></br>
  1316. <em>
  1317. string
  1318. </em>
  1319. </td>
  1320. <td>
  1321. <p>ProjectID project where secret is located</p>
  1322. </td>
  1323. </tr>
  1324. </tbody>
  1325. </table>
  1326. <h3 id="external-secrets.io/v1alpha1.GenericStore">GenericStore
  1327. </h3>
  1328. <p>
  1329. <p>GenericStore is a common interface for interacting with ClusterSecretStore
  1330. or a namespaced SecretStore.</p>
  1331. </p>
  1332. <h3 id="external-secrets.io/v1alpha1.SecretStore">SecretStore
  1333. </h3>
  1334. <p>
  1335. <p>SecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  1336. </p>
  1337. <table>
  1338. <thead>
  1339. <tr>
  1340. <th>Field</th>
  1341. <th>Description</th>
  1342. </tr>
  1343. </thead>
  1344. <tbody>
  1345. <tr>
  1346. <td>
  1347. <code>metadata</code></br>
  1348. <em>
  1349. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#objectmeta-v1-meta">
  1350. Kubernetes meta/v1.ObjectMeta
  1351. </a>
  1352. </em>
  1353. </td>
  1354. <td>
  1355. Refer to the Kubernetes API documentation for the fields of the
  1356. <code>metadata</code> field.
  1357. </td>
  1358. </tr>
  1359. <tr>
  1360. <td>
  1361. <code>spec</code></br>
  1362. <em>
  1363. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">
  1364. SecretStoreSpec
  1365. </a>
  1366. </em>
  1367. </td>
  1368. <td>
  1369. <br/>
  1370. <br/>
  1371. <table>
  1372. <tr>
  1373. <td>
  1374. <code>controller</code></br>
  1375. <em>
  1376. string
  1377. </em>
  1378. </td>
  1379. <td>
  1380. <em>(Optional)</em>
  1381. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  1382. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  1383. </td>
  1384. </tr>
  1385. <tr>
  1386. <td>
  1387. <code>provider</code></br>
  1388. <em>
  1389. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  1390. SecretStoreProvider
  1391. </a>
  1392. </em>
  1393. </td>
  1394. <td>
  1395. <p>Used to configure the provider. Only one provider may be set</p>
  1396. </td>
  1397. </tr>
  1398. </table>
  1399. </td>
  1400. </tr>
  1401. <tr>
  1402. <td>
  1403. <code>status</code></br>
  1404. <em>
  1405. <a href="#external-secrets.io/v1alpha1.SecretStoreStatus">
  1406. SecretStoreStatus
  1407. </a>
  1408. </em>
  1409. </td>
  1410. <td>
  1411. </td>
  1412. </tr>
  1413. </tbody>
  1414. </table>
  1415. <h3 id="external-secrets.io/v1alpha1.SecretStoreConditionType">SecretStoreConditionType
  1416. (<code>string</code> alias)</p></h3>
  1417. <p>
  1418. (<em>Appears on:</em>
  1419. <a href="#external-secrets.io/v1alpha1.SecretStoreStatusCondition">SecretStoreStatusCondition</a>)
  1420. </p>
  1421. <p>
  1422. </p>
  1423. <table>
  1424. <thead>
  1425. <tr>
  1426. <th>Value</th>
  1427. <th>Description</th>
  1428. </tr>
  1429. </thead>
  1430. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  1431. <td></td>
  1432. </tr></tbody>
  1433. </table>
  1434. <h3 id="external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider
  1435. </h3>
  1436. <p>
  1437. (<em>Appears on:</em>
  1438. <a href="#external-secrets.io/v1alpha1.SecretStoreSpec">SecretStoreSpec</a>)
  1439. </p>
  1440. <p>
  1441. <p>SecretStoreProvider contains the provider-specific configration.</p>
  1442. </p>
  1443. <table>
  1444. <thead>
  1445. <tr>
  1446. <th>Field</th>
  1447. <th>Description</th>
  1448. </tr>
  1449. </thead>
  1450. <tbody>
  1451. <tr>
  1452. <td>
  1453. <code>aws</code></br>
  1454. <em>
  1455. <a href="#external-secrets.io/v1alpha1.AWSProvider">
  1456. AWSProvider
  1457. </a>
  1458. </em>
  1459. </td>
  1460. <td>
  1461. <em>(Optional)</em>
  1462. <p>AWS configures this store to sync secrets using AWS Secret Manager provider</p>
  1463. </td>
  1464. </tr>
  1465. <tr>
  1466. <td>
  1467. <code>vault</code></br>
  1468. <em>
  1469. <a href="#external-secrets.io/v1alpha1.VaultProvider">
  1470. VaultProvider
  1471. </a>
  1472. </em>
  1473. </td>
  1474. <td>
  1475. <em>(Optional)</em>
  1476. <p>Vault configures this store to sync secrets using Hashi provider</p>
  1477. </td>
  1478. </tr>
  1479. <tr>
  1480. <td>
  1481. <code>gcpsm</code></br>
  1482. <em>
  1483. <a href="#external-secrets.io/v1alpha1.GCPSMProvider">
  1484. GCPSMProvider
  1485. </a>
  1486. </em>
  1487. </td>
  1488. <td>
  1489. <em>(Optional)</em>
  1490. <p>GCPSM configures this store to sync secrets using Google Cloud Platform Secret Manager provider</p>
  1491. </td>
  1492. </tr>
  1493. </tbody>
  1494. </table>
  1495. <h3 id="external-secrets.io/v1alpha1.SecretStoreRef">SecretStoreRef
  1496. </h3>
  1497. <p>
  1498. (<em>Appears on:</em>
  1499. <a href="#external-secrets.io/v1alpha1.ExternalSecretSpec">ExternalSecretSpec</a>)
  1500. </p>
  1501. <p>
  1502. <p>SecretStoreRef defines which SecretStore to fetch the ExternalSecret data.</p>
  1503. </p>
  1504. <table>
  1505. <thead>
  1506. <tr>
  1507. <th>Field</th>
  1508. <th>Description</th>
  1509. </tr>
  1510. </thead>
  1511. <tbody>
  1512. <tr>
  1513. <td>
  1514. <code>name</code></br>
  1515. <em>
  1516. string
  1517. </em>
  1518. </td>
  1519. <td>
  1520. <p>Name of the SecretStore resource</p>
  1521. </td>
  1522. </tr>
  1523. <tr>
  1524. <td>
  1525. <code>kind</code></br>
  1526. <em>
  1527. string
  1528. </em>
  1529. </td>
  1530. <td>
  1531. <em>(Optional)</em>
  1532. <p>Kind of the SecretStore resource (SecretStore or ClusterSecretStore)
  1533. Defaults to <code>SecretStore</code></p>
  1534. </td>
  1535. </tr>
  1536. </tbody>
  1537. </table>
  1538. <h3 id="external-secrets.io/v1alpha1.SecretStoreSpec">SecretStoreSpec
  1539. </h3>
  1540. <p>
  1541. (<em>Appears on:</em>
  1542. <a href="#external-secrets.io/v1alpha1.ClusterSecretStore">ClusterSecretStore</a>,
  1543. <a href="#external-secrets.io/v1alpha1.SecretStore">SecretStore</a>)
  1544. </p>
  1545. <p>
  1546. <p>SecretStoreSpec defines the desired state of SecretStore.</p>
  1547. </p>
  1548. <table>
  1549. <thead>
  1550. <tr>
  1551. <th>Field</th>
  1552. <th>Description</th>
  1553. </tr>
  1554. </thead>
  1555. <tbody>
  1556. <tr>
  1557. <td>
  1558. <code>controller</code></br>
  1559. <em>
  1560. string
  1561. </em>
  1562. </td>
  1563. <td>
  1564. <em>(Optional)</em>
  1565. <p>Used to select the correct KES controller (think: ingress.ingressClassName)
  1566. The KES controller is instantiated with a specific controller name and filters ES based on this property</p>
  1567. </td>
  1568. </tr>
  1569. <tr>
  1570. <td>
  1571. <code>provider</code></br>
  1572. <em>
  1573. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">
  1574. SecretStoreProvider
  1575. </a>
  1576. </em>
  1577. </td>
  1578. <td>
  1579. <p>Used to configure the provider. Only one provider may be set</p>
  1580. </td>
  1581. </tr>
  1582. </tbody>
  1583. </table>
  1584. <h3 id="external-secrets.io/v1alpha1.SecretStoreStatus">SecretStoreStatus
  1585. </h3>
  1586. <p>
  1587. (<em>Appears on:</em>
  1588. <a href="#external-secrets.io/v1alpha1.SecretStore">SecretStore</a>)
  1589. </p>
  1590. <p>
  1591. <p>SecretStoreStatus defines the observed state of the SecretStore.</p>
  1592. </p>
  1593. <table>
  1594. <thead>
  1595. <tr>
  1596. <th>Field</th>
  1597. <th>Description</th>
  1598. </tr>
  1599. </thead>
  1600. <tbody>
  1601. <tr>
  1602. <td>
  1603. <code>conditions</code></br>
  1604. <em>
  1605. <a href="#external-secrets.io/v1alpha1.SecretStoreStatusCondition">
  1606. []SecretStoreStatusCondition
  1607. </a>
  1608. </em>
  1609. </td>
  1610. <td>
  1611. <em>(Optional)</em>
  1612. </td>
  1613. </tr>
  1614. </tbody>
  1615. </table>
  1616. <h3 id="external-secrets.io/v1alpha1.SecretStoreStatusCondition">SecretStoreStatusCondition
  1617. </h3>
  1618. <p>
  1619. (<em>Appears on:</em>
  1620. <a href="#external-secrets.io/v1alpha1.SecretStoreStatus">SecretStoreStatus</a>)
  1621. </p>
  1622. <p>
  1623. </p>
  1624. <table>
  1625. <thead>
  1626. <tr>
  1627. <th>Field</th>
  1628. <th>Description</th>
  1629. </tr>
  1630. </thead>
  1631. <tbody>
  1632. <tr>
  1633. <td>
  1634. <code>type</code></br>
  1635. <em>
  1636. <a href="#external-secrets.io/v1alpha1.SecretStoreConditionType">
  1637. SecretStoreConditionType
  1638. </a>
  1639. </em>
  1640. </td>
  1641. <td>
  1642. </td>
  1643. </tr>
  1644. <tr>
  1645. <td>
  1646. <code>status</code></br>
  1647. <em>
  1648. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#conditionstatus-v1-core">
  1649. Kubernetes core/v1.ConditionStatus
  1650. </a>
  1651. </em>
  1652. </td>
  1653. <td>
  1654. </td>
  1655. </tr>
  1656. <tr>
  1657. <td>
  1658. <code>reason</code></br>
  1659. <em>
  1660. string
  1661. </em>
  1662. </td>
  1663. <td>
  1664. <em>(Optional)</em>
  1665. </td>
  1666. </tr>
  1667. <tr>
  1668. <td>
  1669. <code>message</code></br>
  1670. <em>
  1671. string
  1672. </em>
  1673. </td>
  1674. <td>
  1675. <em>(Optional)</em>
  1676. </td>
  1677. </tr>
  1678. <tr>
  1679. <td>
  1680. <code>lastTransitionTime</code></br>
  1681. <em>
  1682. <a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Time">
  1683. Kubernetes meta/v1.Time
  1684. </a>
  1685. </em>
  1686. </td>
  1687. <td>
  1688. <em>(Optional)</em>
  1689. </td>
  1690. </tr>
  1691. </tbody>
  1692. </table>
  1693. <h3 id="external-secrets.io/v1alpha1.VaultAppRole">VaultAppRole
  1694. </h3>
  1695. <p>
  1696. (<em>Appears on:</em>
  1697. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1698. </p>
  1699. <p>
  1700. <p>VaultAppRole authenticates with Vault using the App Role auth mechanism,
  1701. with the role and secret stored in a Kubernetes Secret resource.</p>
  1702. </p>
  1703. <table>
  1704. <thead>
  1705. <tr>
  1706. <th>Field</th>
  1707. <th>Description</th>
  1708. </tr>
  1709. </thead>
  1710. <tbody>
  1711. <tr>
  1712. <td>
  1713. <code>path</code></br>
  1714. <em>
  1715. string
  1716. </em>
  1717. </td>
  1718. <td>
  1719. <p>Path where the App Role authentication backend is mounted
  1720. in Vault, e.g: &ldquo;approle&rdquo;</p>
  1721. </td>
  1722. </tr>
  1723. <tr>
  1724. <td>
  1725. <code>roleId</code></br>
  1726. <em>
  1727. string
  1728. </em>
  1729. </td>
  1730. <td>
  1731. <p>RoleID configured in the App Role authentication backend when setting
  1732. up the authentication backend in Vault.</p>
  1733. </td>
  1734. </tr>
  1735. <tr>
  1736. <td>
  1737. <code>secretRef</code></br>
  1738. <em>
  1739. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1740. </em>
  1741. </td>
  1742. <td>
  1743. <p>Reference to a key in a Secret that contains the App Role secret used
  1744. to authenticate with Vault.
  1745. The <code>key</code> field must be specified and denotes which entry within the Secret
  1746. resource is used as the app role secret.</p>
  1747. </td>
  1748. </tr>
  1749. </tbody>
  1750. </table>
  1751. <h3 id="external-secrets.io/v1alpha1.VaultAuth">VaultAuth
  1752. </h3>
  1753. <p>
  1754. (<em>Appears on:</em>
  1755. <a href="#external-secrets.io/v1alpha1.VaultProvider">VaultProvider</a>)
  1756. </p>
  1757. <p>
  1758. <p>VaultAuth is the configuration used to authenticate with a Vault server.
  1759. Only one of <code>tokenSecretRef</code>, <code>appRole</code>, <code>kubernetes</code>, <code>ldap</code> or <code>jwt</code>
  1760. can be specified.</p>
  1761. </p>
  1762. <table>
  1763. <thead>
  1764. <tr>
  1765. <th>Field</th>
  1766. <th>Description</th>
  1767. </tr>
  1768. </thead>
  1769. <tbody>
  1770. <tr>
  1771. <td>
  1772. <code>tokenSecretRef</code></br>
  1773. <em>
  1774. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1775. </em>
  1776. </td>
  1777. <td>
  1778. <em>(Optional)</em>
  1779. <p>TokenSecretRef authenticates with Vault by presenting a token.</p>
  1780. </td>
  1781. </tr>
  1782. <tr>
  1783. <td>
  1784. <code>appRole</code></br>
  1785. <em>
  1786. <a href="#external-secrets.io/v1alpha1.VaultAppRole">
  1787. VaultAppRole
  1788. </a>
  1789. </em>
  1790. </td>
  1791. <td>
  1792. <em>(Optional)</em>
  1793. <p>AppRole authenticates with Vault using the App Role auth mechanism,
  1794. with the role and secret stored in a Kubernetes Secret resource.</p>
  1795. </td>
  1796. </tr>
  1797. <tr>
  1798. <td>
  1799. <code>kubernetes</code></br>
  1800. <em>
  1801. <a href="#external-secrets.io/v1alpha1.VaultKubernetesAuth">
  1802. VaultKubernetesAuth
  1803. </a>
  1804. </em>
  1805. </td>
  1806. <td>
  1807. <em>(Optional)</em>
  1808. <p>Kubernetes authenticates with Vault by passing the ServiceAccount
  1809. token stored in the named Secret resource to the Vault server.</p>
  1810. </td>
  1811. </tr>
  1812. <tr>
  1813. <td>
  1814. <code>ldap</code></br>
  1815. <em>
  1816. <a href="#external-secrets.io/v1alpha1.VaultLdapAuth">
  1817. VaultLdapAuth
  1818. </a>
  1819. </em>
  1820. </td>
  1821. <td>
  1822. <em>(Optional)</em>
  1823. <p>Ldap authenticates with Vault by passing username/password pair using
  1824. the LDAP authentication method</p>
  1825. </td>
  1826. </tr>
  1827. <tr>
  1828. <td>
  1829. <code>jwt</code></br>
  1830. <em>
  1831. <a href="#external-secrets.io/v1alpha1.VaultJwtAuth">
  1832. VaultJwtAuth
  1833. </a>
  1834. </em>
  1835. </td>
  1836. <td>
  1837. <em>(Optional)</em>
  1838. <p>Jwt authenticates with Vault by passing role and JWT token using the
  1839. JWT/OIDC authentication method</p>
  1840. </td>
  1841. </tr>
  1842. </tbody>
  1843. </table>
  1844. <h3 id="external-secrets.io/v1alpha1.VaultJwtAuth">VaultJwtAuth
  1845. </h3>
  1846. <p>
  1847. (<em>Appears on:</em>
  1848. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1849. </p>
  1850. <p>
  1851. <p>VaultJwtAuth authenticates with Vault using the JWT/OIDC authentication
  1852. method, with the role name and token stored in a Kubernetes Secret resource.</p>
  1853. </p>
  1854. <table>
  1855. <thead>
  1856. <tr>
  1857. <th>Field</th>
  1858. <th>Description</th>
  1859. </tr>
  1860. </thead>
  1861. <tbody>
  1862. <tr>
  1863. <td>
  1864. <code>role</code></br>
  1865. <em>
  1866. string
  1867. </em>
  1868. </td>
  1869. <td>
  1870. <em>(Optional)</em>
  1871. <p>Role is a JWT role to authenticate using the JWT/OIDC Vault
  1872. authentication method</p>
  1873. </td>
  1874. </tr>
  1875. <tr>
  1876. <td>
  1877. <code>secretRef</code></br>
  1878. <em>
  1879. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1880. </em>
  1881. </td>
  1882. <td>
  1883. <p>SecretRef to a key in a Secret resource containing JWT token to
  1884. authenticate with Vault using the JWT/OIDC authentication method</p>
  1885. </td>
  1886. </tr>
  1887. </tbody>
  1888. </table>
  1889. <h3 id="external-secrets.io/v1alpha1.VaultKVStoreVersion">VaultKVStoreVersion
  1890. (<code>string</code> alias)</p></h3>
  1891. <p>
  1892. (<em>Appears on:</em>
  1893. <a href="#external-secrets.io/v1alpha1.VaultProvider">VaultProvider</a>)
  1894. </p>
  1895. <p>
  1896. </p>
  1897. <table>
  1898. <thead>
  1899. <tr>
  1900. <th>Value</th>
  1901. <th>Description</th>
  1902. </tr>
  1903. </thead>
  1904. <tbody><tr><td><p>&#34;v1&#34;</p></td>
  1905. <td></td>
  1906. </tr><tr><td><p>&#34;v2&#34;</p></td>
  1907. <td></td>
  1908. </tr></tbody>
  1909. </table>
  1910. <h3 id="external-secrets.io/v1alpha1.VaultKubernetesAuth">VaultKubernetesAuth
  1911. </h3>
  1912. <p>
  1913. (<em>Appears on:</em>
  1914. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1915. </p>
  1916. <p>
  1917. <p>Authenticate against Vault using a Kubernetes ServiceAccount token stored in
  1918. a Secret.</p>
  1919. </p>
  1920. <table>
  1921. <thead>
  1922. <tr>
  1923. <th>Field</th>
  1924. <th>Description</th>
  1925. </tr>
  1926. </thead>
  1927. <tbody>
  1928. <tr>
  1929. <td>
  1930. <code>mountPath</code></br>
  1931. <em>
  1932. string
  1933. </em>
  1934. </td>
  1935. <td>
  1936. <p>Path where the Kubernetes authentication backend is mounted in Vault, e.g:
  1937. &ldquo;kubernetes&rdquo;</p>
  1938. </td>
  1939. </tr>
  1940. <tr>
  1941. <td>
  1942. <code>serviceAccountRef</code></br>
  1943. <em>
  1944. github.com/external-secrets/external-secrets/apis/meta/v1.ServiceAccountSelector
  1945. </em>
  1946. </td>
  1947. <td>
  1948. <em>(Optional)</em>
  1949. <p>Optional service account field containing the name of a kubernetes ServiceAccount.
  1950. If the service account is specified, the service account secret token JWT will be used
  1951. for authenticating with Vault. If the service account selector is not supplied,
  1952. the secretRef will be used instead.</p>
  1953. </td>
  1954. </tr>
  1955. <tr>
  1956. <td>
  1957. <code>secretRef</code></br>
  1958. <em>
  1959. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  1960. </em>
  1961. </td>
  1962. <td>
  1963. <em>(Optional)</em>
  1964. <p>Optional secret field containing a Kubernetes ServiceAccount JWT used
  1965. for authenticating with Vault. If a name is specified without a key,
  1966. <code>token</code> is the default. If one is not specified, the one bound to
  1967. the controller will be used.</p>
  1968. </td>
  1969. </tr>
  1970. <tr>
  1971. <td>
  1972. <code>role</code></br>
  1973. <em>
  1974. string
  1975. </em>
  1976. </td>
  1977. <td>
  1978. <p>A required field containing the Vault Role to assume. A Role binds a
  1979. Kubernetes ServiceAccount with a set of Vault policies.</p>
  1980. </td>
  1981. </tr>
  1982. </tbody>
  1983. </table>
  1984. <h3 id="external-secrets.io/v1alpha1.VaultLdapAuth">VaultLdapAuth
  1985. </h3>
  1986. <p>
  1987. (<em>Appears on:</em>
  1988. <a href="#external-secrets.io/v1alpha1.VaultAuth">VaultAuth</a>)
  1989. </p>
  1990. <p>
  1991. <p>VaultLdapAuth authenticates with Vault using the LDAP authentication method,
  1992. with the username and password stored in a Kubernetes Secret resource.</p>
  1993. </p>
  1994. <table>
  1995. <thead>
  1996. <tr>
  1997. <th>Field</th>
  1998. <th>Description</th>
  1999. </tr>
  2000. </thead>
  2001. <tbody>
  2002. <tr>
  2003. <td>
  2004. <code>username</code></br>
  2005. <em>
  2006. string
  2007. </em>
  2008. </td>
  2009. <td>
  2010. <p>Username is a LDAP user name used to authenticate using the LDAP Vault
  2011. authentication method</p>
  2012. </td>
  2013. </tr>
  2014. <tr>
  2015. <td>
  2016. <code>secretRef</code></br>
  2017. <em>
  2018. github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
  2019. </em>
  2020. </td>
  2021. <td>
  2022. <p>SecretRef to a key in a Secret resource containing password for the LDAP
  2023. user used to authenticate with Vault using the LDAP authentication
  2024. method</p>
  2025. </td>
  2026. </tr>
  2027. </tbody>
  2028. </table>
  2029. <h3 id="external-secrets.io/v1alpha1.VaultProvider">VaultProvider
  2030. </h3>
  2031. <p>
  2032. (<em>Appears on:</em>
  2033. <a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
  2034. </p>
  2035. <p>
  2036. <p>Configures an store to sync secrets using a HashiCorp Vault
  2037. KV backend.</p>
  2038. </p>
  2039. <table>
  2040. <thead>
  2041. <tr>
  2042. <th>Field</th>
  2043. <th>Description</th>
  2044. </tr>
  2045. </thead>
  2046. <tbody>
  2047. <tr>
  2048. <td>
  2049. <code>auth</code></br>
  2050. <em>
  2051. <a href="#external-secrets.io/v1alpha1.VaultAuth">
  2052. VaultAuth
  2053. </a>
  2054. </em>
  2055. </td>
  2056. <td>
  2057. <p>Auth configures how secret-manager authenticates with the Vault server.</p>
  2058. </td>
  2059. </tr>
  2060. <tr>
  2061. <td>
  2062. <code>server</code></br>
  2063. <em>
  2064. string
  2065. </em>
  2066. </td>
  2067. <td>
  2068. <p>Server is the connection address for the Vault server, e.g: &ldquo;<a href="https://vault.example.com:8200&quot;">https://vault.example.com:8200&rdquo;</a>.</p>
  2069. </td>
  2070. </tr>
  2071. <tr>
  2072. <td>
  2073. <code>path</code></br>
  2074. <em>
  2075. string
  2076. </em>
  2077. </td>
  2078. <td>
  2079. <p>Path is the mount path of the Vault KV backend endpoint, e.g:
  2080. &ldquo;secret&rdquo;. The v2 KV secret engine version specific &ldquo;/data&rdquo; path suffix
  2081. for fetching secrets from Vault is optional and will be appended
  2082. if not present in specified path.</p>
  2083. </td>
  2084. </tr>
  2085. <tr>
  2086. <td>
  2087. <code>version</code></br>
  2088. <em>
  2089. <a href="#external-secrets.io/v1alpha1.VaultKVStoreVersion">
  2090. VaultKVStoreVersion
  2091. </a>
  2092. </em>
  2093. </td>
  2094. <td>
  2095. <p>Version is the Vault KV secret engine version. This can be either &ldquo;v1&rdquo; or
  2096. &ldquo;v2&rdquo;. Version defaults to &ldquo;v2&rdquo;.</p>
  2097. </td>
  2098. </tr>
  2099. <tr>
  2100. <td>
  2101. <code>namespace</code></br>
  2102. <em>
  2103. string
  2104. </em>
  2105. </td>
  2106. <td>
  2107. <em>(Optional)</em>
  2108. <p>Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows
  2109. Vault environments to support Secure Multi-tenancy. e.g: &ldquo;ns1&rdquo;.
  2110. More about namespaces can be found here <a href="https://www.vaultproject.io/docs/enterprise/namespaces">https://www.vaultproject.io/docs/enterprise/namespaces</a></p>
  2111. </td>
  2112. </tr>
  2113. <tr>
  2114. <td>
  2115. <code>caBundle</code></br>
  2116. <em>
  2117. []byte
  2118. </em>
  2119. </td>
  2120. <td>
  2121. <em>(Optional)</em>
  2122. <p>PEM encoded CA bundle used to validate Vault server certificate. Only used
  2123. if the Server URL is using HTTPS protocol. This parameter is ignored for
  2124. plain HTTP protocol connection. If not set the system root certificates
  2125. are used to validate the TLS connection.</p>
  2126. </td>
  2127. </tr>
  2128. </tbody>
  2129. </table>
  2130. <hr/>
  2131. <p><em>
  2132. Generated with <code>gen-crd-api-reference-docs</code>.
  2133. </em></p></p>
  2134. </article>
  2135. </div>
  2136. </div>
  2137. </main>
  2138. <footer class="md-footer">
  2139. <div class="md-footer-nav">
  2140. <nav class="md-footer-nav__inner md-grid">
  2141. <a href="../provider-hashicorp-vault/" title="HashiCorp Vault" class="md-flex md-footer-nav__link md-footer-nav__link--prev" rel="prev">
  2142. <div class="md-flex__cell md-flex__cell--shrink">
  2143. <i class="md-icon md-icon--arrow-back md-footer-nav__button"></i>
  2144. </div>
  2145. <div class="md-flex__cell md-flex__cell--stretch md-footer-nav__title">
  2146. <span class="md-flex__ellipsis">
  2147. <span class="md-footer-nav__direction">
  2148. Previous
  2149. </span>
  2150. HashiCorp Vault
  2151. </span>
  2152. </div>
  2153. </a>
  2154. <a href="../contributing-devguide/" title="Developer guide" class="md-flex md-footer-nav__link md-footer-nav__link--next" rel="next">
  2155. <div class="md-flex__cell md-flex__cell--stretch md-footer-nav__title">
  2156. <span class="md-flex__ellipsis">
  2157. <span class="md-footer-nav__direction">
  2158. Next
  2159. </span>
  2160. Developer guide
  2161. </span>
  2162. </div>
  2163. <div class="md-flex__cell md-flex__cell--shrink">
  2164. <i class="md-icon md-icon--arrow-forward md-footer-nav__button"></i>
  2165. </div>
  2166. </a>
  2167. </nav>
  2168. </div>
  2169. <div class="md-footer-meta md-typeset">
  2170. <div class="md-footer-meta__inner md-grid">
  2171. <div class="md-footer-copyright">
  2172. powered by
  2173. <a href="https://www.mkdocs.org">MkDocs</a>
  2174. and
  2175. <a href="https://squidfunk.github.io/mkdocs-material/">
  2176. Material for MkDocs</a>
  2177. </div>
  2178. </div>
  2179. </div>
  2180. </footer>
  2181. </div>
  2182. <script src="../assets/javascripts/application.808e90bb.js"></script>
  2183. <script>app.initialize({version:"1.0.4",url:{base:".."}})</script>
  2184. </body>
  2185. </html>