clusterexternalsecret-v1.yaml 3.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116
  1. apiVersion: external-secrets.io/v1
  2. kind: ClusterExternalSecret
  3. metadata: {}
  4. spec:
  5. externalSecretMetadata:
  6. annotations: {}
  7. labels: {}
  8. externalSecretName: string
  9. externalSecretSpec:
  10. data:
  11. - remoteRef:
  12. conversionStrategy: "Default"
  13. decodingStrategy: "None"
  14. key: string
  15. metadataPolicy: "None"
  16. property: string
  17. version: string
  18. secretKey: string
  19. sourceRef:
  20. generatorRef:
  21. apiVersion: external-secrets.io/v1
  22. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  23. name: string
  24. storeRef:
  25. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  26. name: string
  27. dataFrom:
  28. - extract:
  29. conversionStrategy: "Default"
  30. decodingStrategy: "None"
  31. key: string
  32. metadataPolicy: "None"
  33. property: string
  34. version: string
  35. find:
  36. conversionStrategy: "Default"
  37. decodingStrategy: "None"
  38. name:
  39. regexp: string
  40. path: string
  41. tags: {}
  42. rewrite:
  43. - merge:
  44. conflictPolicy: "Error"
  45. into: ""
  46. priority: [] # minItems 0 of type string
  47. strategy: "Extract"
  48. regexp:
  49. source: string
  50. target: string
  51. transform:
  52. template: string
  53. sourceRef:
  54. generatorRef:
  55. apiVersion: external-secrets.io/v1
  56. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  57. name: string
  58. storeRef:
  59. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  60. name: string
  61. refreshInterval: "1h"
  62. refreshPolicy: "CreatedOnce" # "CreatedOnce", "Periodic", "OnChange"
  63. secretStoreRef:
  64. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  65. name: string
  66. target:
  67. creationPolicy: "Owner"
  68. deletionPolicy: "Retain"
  69. immutable: true
  70. name: string
  71. template:
  72. data: {}
  73. engineVersion: "v2"
  74. mergePolicy: "Replace"
  75. metadata:
  76. annotations: {}
  77. finalizers: [] # minItems 0 of type string
  78. labels: {}
  79. templateFrom:
  80. - configMap:
  81. items:
  82. - key: string
  83. templateAs: "Values"
  84. name: string
  85. literal: string
  86. secret:
  87. items:
  88. - key: string
  89. templateAs: "Values"
  90. name: string
  91. target: "Data"
  92. type: string
  93. namespaceSelector:
  94. matchExpressions:
  95. - key: string
  96. operator: string
  97. values: [] # minItems 0 of type string
  98. matchLabels: {}
  99. namespaceSelectors:
  100. - matchExpressions:
  101. - key: string
  102. operator: string
  103. values: [] # minItems 0 of type string
  104. matchLabels: {}
  105. namespaces: [] # minItems 0 of type string
  106. refreshTime: string
  107. status:
  108. conditions:
  109. - message: string
  110. status: string
  111. type: string
  112. externalSecretName: string
  113. failedNamespaces:
  114. - namespace: string
  115. reason: string
  116. provisionedNamespaces: [] # minItems 0 of type string