vaultdynamicsecret-v1alpha1.yaml 3.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: VaultDynamicSecret
  3. metadata: {}
  4. spec:
  5. allowEmptyResponse: false
  6. controller: string
  7. method: string
  8. parameters:
  9. path: string
  10. provider:
  11. auth:
  12. appRole:
  13. path: "approle"
  14. roleId: string
  15. roleRef:
  16. key: string
  17. name: string
  18. namespace: string
  19. secretRef:
  20. key: string
  21. name: string
  22. namespace: string
  23. cert:
  24. clientCert:
  25. key: string
  26. name: string
  27. namespace: string
  28. path: "cert"
  29. secretRef:
  30. key: string
  31. name: string
  32. namespace: string
  33. iam:
  34. externalID: string
  35. jwt:
  36. serviceAccountRef:
  37. audiences: [] # minItems 0 of type string
  38. name: string
  39. namespace: string
  40. path: string
  41. region: string
  42. role: string
  43. secretRef:
  44. accessKeyIDSecretRef:
  45. key: string
  46. name: string
  47. namespace: string
  48. secretAccessKeySecretRef:
  49. key: string
  50. name: string
  51. namespace: string
  52. sessionTokenSecretRef:
  53. key: string
  54. name: string
  55. namespace: string
  56. vaultAwsIamServerID: string
  57. vaultRole: string
  58. jwt:
  59. kubernetesServiceAccountToken:
  60. audiences: [] # minItems 0 of type string
  61. expirationSeconds: 1
  62. serviceAccountRef:
  63. audiences: [] # minItems 0 of type string
  64. name: string
  65. namespace: string
  66. path: "jwt"
  67. role: string
  68. secretRef:
  69. key: string
  70. name: string
  71. namespace: string
  72. kubernetes:
  73. mountPath: "kubernetes"
  74. role: string
  75. secretRef:
  76. key: string
  77. name: string
  78. namespace: string
  79. serviceAccountRef:
  80. audiences: [] # minItems 0 of type string
  81. name: string
  82. namespace: string
  83. ldap:
  84. path: "ldap"
  85. secretRef:
  86. key: string
  87. name: string
  88. namespace: string
  89. username: string
  90. namespace: string
  91. tokenSecretRef:
  92. key: string
  93. name: string
  94. namespace: string
  95. userPass:
  96. path: "userpass"
  97. secretRef:
  98. key: string
  99. name: string
  100. namespace: string
  101. username: string
  102. caBundle: c3RyaW5n
  103. caProvider:
  104. key: string
  105. name: string
  106. namespace: string
  107. type: "Secret" # "Secret", "ConfigMap"
  108. checkAndSet:
  109. required: true
  110. forwardInconsistent: true
  111. headers: {}
  112. namespace: string
  113. path: string
  114. readYourWrites: true
  115. server: string
  116. tls:
  117. certSecretRef:
  118. key: string
  119. name: string
  120. namespace: string
  121. keySecretRef:
  122. key: string
  123. name: string
  124. namespace: string
  125. version: "v2"
  126. resultType: "Data"
  127. retrySettings:
  128. maxRetries: 1
  129. retryInterval: string