secretstore-v1alpha1.yaml 7.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301
  1. apiVersion: external-secrets.io/v1alpha1
  2. kind: SecretStore
  3. metadata: {}
  4. spec:
  5. controller: string
  6. provider:
  7. akeyless:
  8. akeylessGWApiURL: string
  9. authSecretRef:
  10. kubernetesAuth:
  11. accessID: string
  12. k8sConfName: string
  13. secretRef:
  14. key: string
  15. name: string
  16. namespace: string
  17. serviceAccountRef:
  18. audiences: [] # minItems 0 of type string
  19. name: string
  20. namespace: string
  21. secretRef:
  22. accessID:
  23. key: string
  24. name: string
  25. namespace: string
  26. accessType:
  27. key: string
  28. name: string
  29. namespace: string
  30. accessTypeParam:
  31. key: string
  32. name: string
  33. namespace: string
  34. caBundle: c3RyaW5n
  35. caProvider:
  36. key: string
  37. name: string
  38. namespace: string
  39. type: "Secret" # "Secret", "ConfigMap"
  40. alibaba:
  41. auth:
  42. rrsa:
  43. oidcProviderArn: string
  44. oidcTokenFilePath: string
  45. roleArn: string
  46. sessionName: string
  47. secretRef:
  48. accessKeyIDSecretRef:
  49. key: string
  50. name: string
  51. namespace: string
  52. accessKeySecretSecretRef:
  53. key: string
  54. name: string
  55. namespace: string
  56. regionID: string
  57. aws:
  58. auth:
  59. jwt:
  60. serviceAccountRef:
  61. audiences: [] # minItems 0 of type string
  62. name: string
  63. namespace: string
  64. secretRef:
  65. accessKeyIDSecretRef:
  66. key: string
  67. name: string
  68. namespace: string
  69. secretAccessKeySecretRef:
  70. key: string
  71. name: string
  72. namespace: string
  73. region: string
  74. role: string
  75. service: "SecretsManager" # "SecretsManager", "ParameterStore"
  76. azurekv:
  77. authSecretRef:
  78. clientId:
  79. key: string
  80. name: string
  81. namespace: string
  82. clientSecret:
  83. key: string
  84. name: string
  85. namespace: string
  86. authType: "ServicePrincipal"
  87. identityId: string
  88. serviceAccountRef:
  89. audiences: [] # minItems 0 of type string
  90. name: string
  91. namespace: string
  92. tenantId: string
  93. vaultUrl: string
  94. fake:
  95. data:
  96. - key: string
  97. value: string
  98. valueMap: {}
  99. version: string
  100. gcpsm:
  101. auth:
  102. secretRef:
  103. secretAccessKeySecretRef:
  104. key: string
  105. name: string
  106. namespace: string
  107. workloadIdentity:
  108. clusterLocation: string
  109. clusterName: string
  110. clusterProjectID: string
  111. serviceAccountRef:
  112. audiences: [] # minItems 0 of type string
  113. name: string
  114. namespace: string
  115. projectID: string
  116. gitlab:
  117. auth:
  118. SecretRef:
  119. accessToken:
  120. key: string
  121. name: string
  122. namespace: string
  123. projectID: string
  124. url: string
  125. ibm:
  126. auth:
  127. secretRef:
  128. secretApiKeySecretRef:
  129. key: string
  130. name: string
  131. namespace: string
  132. serviceUrl: string
  133. kubernetes:
  134. auth:
  135. cert:
  136. clientCert:
  137. key: string
  138. name: string
  139. namespace: string
  140. clientKey:
  141. key: string
  142. name: string
  143. namespace: string
  144. serviceAccount:
  145. serviceAccount:
  146. audiences: [] # minItems 0 of type string
  147. name: string
  148. namespace: string
  149. token:
  150. bearerToken:
  151. key: string
  152. name: string
  153. namespace: string
  154. remoteNamespace: "default"
  155. server:
  156. caBundle: c3RyaW5n
  157. caProvider:
  158. key: string
  159. name: string
  160. namespace: string
  161. type: "Secret" # "Secret", "ConfigMap"
  162. url: "kubernetes.default"
  163. oracle:
  164. auth:
  165. secretRef:
  166. fingerprint:
  167. key: string
  168. name: string
  169. namespace: string
  170. privatekey:
  171. key: string
  172. name: string
  173. namespace: string
  174. tenancy: string
  175. user: string
  176. compartment: string
  177. encryptionKey: string
  178. principalType: "" # "", "UserPrincipal", "InstancePrincipal", "Workload"
  179. region: string
  180. serviceAccountRef:
  181. audiences: [] # minItems 0 of type string
  182. name: string
  183. namespace: string
  184. vault: string
  185. passworddepot:
  186. auth:
  187. secretRef:
  188. credentials:
  189. key: string
  190. name: string
  191. namespace: string
  192. database: string
  193. host: string
  194. vault:
  195. auth:
  196. appRole:
  197. path: "approle"
  198. roleId: string
  199. secretRef:
  200. key: string
  201. name: string
  202. namespace: string
  203. cert:
  204. clientCert:
  205. key: string
  206. name: string
  207. namespace: string
  208. secretRef:
  209. key: string
  210. name: string
  211. namespace: string
  212. jwt:
  213. kubernetesServiceAccountToken:
  214. audiences: [] # minItems 0 of type string
  215. expirationSeconds: 1
  216. serviceAccountRef:
  217. audiences: [] # minItems 0 of type string
  218. name: string
  219. namespace: string
  220. path: "jwt"
  221. role: string
  222. secretRef:
  223. key: string
  224. name: string
  225. namespace: string
  226. kubernetes:
  227. mountPath: "kubernetes"
  228. role: string
  229. secretRef:
  230. key: string
  231. name: string
  232. namespace: string
  233. serviceAccountRef:
  234. audiences: [] # minItems 0 of type string
  235. name: string
  236. namespace: string
  237. ldap:
  238. path: "ldap"
  239. secretRef:
  240. key: string
  241. name: string
  242. namespace: string
  243. username: string
  244. tokenSecretRef:
  245. key: string
  246. name: string
  247. namespace: string
  248. caBundle: c3RyaW5n
  249. caProvider:
  250. key: string
  251. name: string
  252. namespace: string
  253. type: "Secret" # "Secret", "ConfigMap"
  254. forwardInconsistent: true
  255. namespace: string
  256. path: string
  257. readYourWrites: true
  258. server: string
  259. version: "v2"
  260. webhook:
  261. body: string
  262. caBundle: c3RyaW5n
  263. caProvider:
  264. key: string
  265. name: string
  266. namespace: string
  267. type: "Secret" # "Secret", "ConfigMap"
  268. headers: {}
  269. method: string
  270. result:
  271. jsonPath: string
  272. secrets:
  273. - name: string
  274. secretRef:
  275. key: string
  276. name: string
  277. namespace: string
  278. timeout: string
  279. url: string
  280. yandexlockbox:
  281. apiEndpoint: string
  282. auth:
  283. authorizedKeySecretRef:
  284. key: string
  285. name: string
  286. namespace: string
  287. caProvider:
  288. certSecretRef:
  289. key: string
  290. name: string
  291. namespace: string
  292. retrySettings:
  293. maxRetries: 1
  294. retryInterval: string
  295. status:
  296. conditions:
  297. - lastTransitionTime: 2024-10-11T12:48:44Z
  298. message: string
  299. reason: string
  300. status: string
  301. type: string