onboardbase.md 1.6 KB

Onboardbase External Secrets Provider

Onboardbase Secret Management

Sync secrets from Onboardbase to Kubernetes using the External Secrets Operator.

Authentication

Get an Onboardbase API Key.

Create the Onboardbase API by opening the organization tab under your account settings:

Onboardabse API Key

And view them under the team name in your Account settings

Onboardabse API Key

Create an Onboardbase API secret with your API Key and Passcode value:

HISTIGNORE='*kubectl*' \
  kubectl create secret generic onboardbase-auth-secret \
  --from-literal=API_KEY=*****VZYKYJNMMEMK***** \
  --from-literal=PASSCODE=api-key-passcode

Then to create a generic SecretStore:

{% include 'onboardbase-generic-secret-store.yaml' %}

Use Cases

The below operations are possible with the Onboardbase provider:

  1. Fetch
  2. Fetch all
  3. Filter

Let's explore each use case using a fictional auth-api Onboardbase project.

1. Fetch

To sync one or more individual secrets:

{% include 'onboardbase-fetch-secret.yaml' %}

2. Fetch all

To sync every secret from a config:

{% include 'onboardbase-fetch-all-secrets.yaml' %}

3. Filter

To filter secrets by path (path prefix), name (regular expression) or a combination of both:

{% include 'onboardbase-filtered-secrets.yaml' %}