vaultdynamicsecret-v1alpha1.yaml 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: VaultDynamicSecret
  3. metadata: {}
  4. spec:
  5. allowEmptyResponse: false
  6. controller: string
  7. method: string
  8. parameters:
  9. path: string
  10. provider:
  11. auth:
  12. appRole:
  13. path: "approle"
  14. roleId: string
  15. roleRef:
  16. key: string
  17. name: string
  18. namespace: string
  19. secretRef:
  20. key: string
  21. name: string
  22. namespace: string
  23. cert:
  24. clientCert:
  25. key: string
  26. name: string
  27. namespace: string
  28. path: "cert"
  29. secretRef:
  30. key: string
  31. name: string
  32. namespace: string
  33. vaultRole: string
  34. gcp:
  35. location: string
  36. path: "gcp"
  37. projectID: string
  38. role: string
  39. secretRef:
  40. secretAccessKeySecretRef:
  41. key: string
  42. name: string
  43. namespace: string
  44. serviceAccountRef:
  45. audiences: [] # minItems 0 of type string
  46. name: string
  47. namespace: string
  48. workloadIdentity:
  49. clusterLocation: string
  50. clusterName: string
  51. clusterProjectID: string
  52. serviceAccountRef:
  53. audiences: [] # minItems 0 of type string
  54. name: string
  55. namespace: string
  56. iam:
  57. externalID: string
  58. jwt:
  59. serviceAccountRef:
  60. audiences: [] # minItems 0 of type string
  61. name: string
  62. namespace: string
  63. path: string
  64. region: string
  65. role: string
  66. secretRef:
  67. accessKeyIDSecretRef:
  68. key: string
  69. name: string
  70. namespace: string
  71. secretAccessKeySecretRef:
  72. key: string
  73. name: string
  74. namespace: string
  75. sessionTokenSecretRef:
  76. key: string
  77. name: string
  78. namespace: string
  79. vaultAwsIamServerID: string
  80. vaultRole: string
  81. jwt:
  82. kubernetesServiceAccountToken:
  83. audiences: [] # minItems 0 of type string
  84. expirationSeconds: 1
  85. serviceAccountRef:
  86. audiences: [] # minItems 0 of type string
  87. name: string
  88. namespace: string
  89. path: "jwt"
  90. role: string
  91. secretRef:
  92. key: string
  93. name: string
  94. namespace: string
  95. kubernetes:
  96. mountPath: "kubernetes"
  97. role: string
  98. secretRef:
  99. key: string
  100. name: string
  101. namespace: string
  102. serviceAccountRef:
  103. audiences: [] # minItems 0 of type string
  104. name: string
  105. namespace: string
  106. ldap:
  107. path: "ldap"
  108. secretRef:
  109. key: string
  110. name: string
  111. namespace: string
  112. username: string
  113. namespace: string
  114. tokenSecretRef:
  115. key: string
  116. name: string
  117. namespace: string
  118. userPass:
  119. path: "userpass"
  120. secretRef:
  121. key: string
  122. name: string
  123. namespace: string
  124. username: string
  125. caBundle: c3RyaW5n
  126. caProvider:
  127. key: string
  128. name: string
  129. namespace: string
  130. type: "Secret" # "Secret", "ConfigMap"
  131. checkAndSet:
  132. required: true
  133. forwardInconsistent: true
  134. headers: {}
  135. namespace: string
  136. path: string
  137. readYourWrites: true
  138. server: string
  139. tls:
  140. certSecretRef:
  141. key: string
  142. name: string
  143. namespace: string
  144. keySecretRef:
  145. key: string
  146. name: string
  147. namespace: string
  148. version: "v2"
  149. resultType: "Data"
  150. retrySettings:
  151. maxRetries: 1
  152. retryInterval: string