clustergenerator-v1alpha1.yaml 7.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. ecrAuthorizationTokenSpec:
  30. auth:
  31. jwt:
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. secretRef:
  37. accessKeyIDSecretRef:
  38. key: string
  39. name: string
  40. namespace: string
  41. secretAccessKeySecretRef:
  42. key: string
  43. name: string
  44. namespace: string
  45. sessionTokenSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. region: string
  50. role: string
  51. scope: string
  52. fakeSpec:
  53. controller: string
  54. data: {}
  55. gcrAccessTokenSpec:
  56. auth:
  57. secretRef:
  58. secretAccessKeySecretRef:
  59. key: string
  60. name: string
  61. namespace: string
  62. workloadIdentity:
  63. clusterLocation: string
  64. clusterName: string
  65. clusterProjectID: string
  66. serviceAccountRef:
  67. audiences: [] # minItems 0 of type string
  68. name: string
  69. namespace: string
  70. projectID: string
  71. githubAccessTokenSpec:
  72. appID: string
  73. auth:
  74. privateKey:
  75. secretRef:
  76. key: string
  77. name: string
  78. namespace: string
  79. installID: string
  80. permissions: {}
  81. repositories: [] # minItems 0 of type string
  82. url: string
  83. grafanaSpec:
  84. auth:
  85. basic:
  86. password:
  87. key: string
  88. name: string
  89. username: string
  90. token:
  91. key: string
  92. name: string
  93. serviceAccount:
  94. name: string
  95. role: string
  96. url: string
  97. passwordSpec:
  98. allowRepeat: false
  99. digits: 1
  100. length: 24
  101. noUpper: false
  102. symbolCharacters: string
  103. symbols: 1
  104. quayAccessTokenSpec:
  105. robotAccount: string
  106. serviceAccountRef:
  107. audiences: [] # minItems 0 of type string
  108. name: string
  109. namespace: string
  110. url: string
  111. stsSessionTokenSpec:
  112. auth:
  113. jwt:
  114. serviceAccountRef:
  115. audiences: [] # minItems 0 of type string
  116. name: string
  117. namespace: string
  118. secretRef:
  119. accessKeyIDSecretRef:
  120. key: string
  121. name: string
  122. namespace: string
  123. secretAccessKeySecretRef:
  124. key: string
  125. name: string
  126. namespace: string
  127. sessionTokenSecretRef:
  128. key: string
  129. name: string
  130. namespace: string
  131. region: string
  132. requestParameters:
  133. serialNumber: string
  134. sessionDuration: 1
  135. tokenCode: string
  136. role: string
  137. uuidSpec: {}
  138. vaultDynamicSecretSpec:
  139. allowEmptyResponse: false
  140. controller: string
  141. method: string
  142. parameters:
  143. path: string
  144. provider:
  145. auth:
  146. appRole:
  147. path: "approle"
  148. roleId: string
  149. roleRef:
  150. key: string
  151. name: string
  152. namespace: string
  153. secretRef:
  154. key: string
  155. name: string
  156. namespace: string
  157. cert:
  158. clientCert:
  159. key: string
  160. name: string
  161. namespace: string
  162. secretRef:
  163. key: string
  164. name: string
  165. namespace: string
  166. iam:
  167. externalID: string
  168. jwt:
  169. serviceAccountRef:
  170. audiences: [] # minItems 0 of type string
  171. name: string
  172. namespace: string
  173. path: string
  174. region: string
  175. role: string
  176. secretRef:
  177. accessKeyIDSecretRef:
  178. key: string
  179. name: string
  180. namespace: string
  181. secretAccessKeySecretRef:
  182. key: string
  183. name: string
  184. namespace: string
  185. sessionTokenSecretRef:
  186. key: string
  187. name: string
  188. namespace: string
  189. vaultAwsIamServerID: string
  190. vaultRole: string
  191. jwt:
  192. kubernetesServiceAccountToken:
  193. audiences: [] # minItems 0 of type string
  194. expirationSeconds: 1
  195. serviceAccountRef:
  196. audiences: [] # minItems 0 of type string
  197. name: string
  198. namespace: string
  199. path: "jwt"
  200. role: string
  201. secretRef:
  202. key: string
  203. name: string
  204. namespace: string
  205. kubernetes:
  206. mountPath: "kubernetes"
  207. role: string
  208. secretRef:
  209. key: string
  210. name: string
  211. namespace: string
  212. serviceAccountRef:
  213. audiences: [] # minItems 0 of type string
  214. name: string
  215. namespace: string
  216. ldap:
  217. path: "ldap"
  218. secretRef:
  219. key: string
  220. name: string
  221. namespace: string
  222. username: string
  223. namespace: string
  224. tokenSecretRef:
  225. key: string
  226. name: string
  227. namespace: string
  228. userPass:
  229. path: "userpass"
  230. secretRef:
  231. key: string
  232. name: string
  233. namespace: string
  234. username: string
  235. caBundle: c3RyaW5n
  236. caProvider:
  237. key: string
  238. name: string
  239. namespace: string
  240. type: "Secret" # "Secret", "ConfigMap"
  241. forwardInconsistent: true
  242. headers: {}
  243. namespace: string
  244. path: string
  245. readYourWrites: true
  246. server: string
  247. tls:
  248. certSecretRef:
  249. key: string
  250. name: string
  251. namespace: string
  252. keySecretRef:
  253. key: string
  254. name: string
  255. namespace: string
  256. version: "v2"
  257. resultType: "Data"
  258. retrySettings:
  259. maxRetries: 1
  260. retryInterval: string
  261. webhookSpec:
  262. body: string
  263. caBundle: c3RyaW5n
  264. caProvider:
  265. key: string
  266. name: string
  267. namespace: string
  268. type: "Secret" # "Secret", "ConfigMap"
  269. headers: {}
  270. method: string
  271. result:
  272. jsonPath: string
  273. secrets:
  274. - name: string
  275. secretRef:
  276. key: string
  277. name: string
  278. timeout: string
  279. url: string
  280. kind: "ACRAccessToken" # "ACRAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"