clustergenerator-v1alpha1.yaml 8.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. ecrAuthorizationTokenSpec:
  30. auth:
  31. jwt:
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. secretRef:
  37. accessKeyIDSecretRef:
  38. key: string
  39. name: string
  40. namespace: string
  41. secretAccessKeySecretRef:
  42. key: string
  43. name: string
  44. namespace: string
  45. sessionTokenSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. region: string
  50. role: string
  51. scope: string
  52. fakeSpec:
  53. controller: string
  54. data: {}
  55. gcrAccessTokenSpec:
  56. auth:
  57. secretRef:
  58. secretAccessKeySecretRef:
  59. key: string
  60. name: string
  61. namespace: string
  62. workloadIdentity:
  63. clusterLocation: string
  64. clusterName: string
  65. clusterProjectID: string
  66. serviceAccountRef:
  67. audiences: [] # minItems 0 of type string
  68. name: string
  69. namespace: string
  70. workloadIdentityFederation:
  71. audience: string
  72. awsSecurityCredentials:
  73. awsCredentialsSecretRef:
  74. name: string
  75. namespace: string
  76. region: "ap-south-1"
  77. credConfig:
  78. key: string
  79. name: string
  80. namespace: string
  81. externalTokenEndpoint: string
  82. serviceAccountRef:
  83. audiences: [] # minItems 0 of type string
  84. name: string
  85. namespace: string
  86. projectID: string
  87. githubAccessTokenSpec:
  88. appID: string
  89. auth:
  90. privateKey:
  91. secretRef:
  92. key: string
  93. name: string
  94. namespace: string
  95. installID: string
  96. permissions: {}
  97. repositories: [] # minItems 0 of type string
  98. url: string
  99. grafanaSpec:
  100. auth:
  101. basic:
  102. password:
  103. key: string
  104. name: string
  105. username: string
  106. token:
  107. key: string
  108. name: string
  109. serviceAccount:
  110. name: string
  111. role: string
  112. url: string
  113. mfaSpec:
  114. algorithm: string
  115. length: 1
  116. secret:
  117. key: string
  118. name: string
  119. namespace: string
  120. timePeriod: 1
  121. when: 2024-10-11T12:48:44Z
  122. passwordSpec:
  123. allowRepeat: false
  124. digits: 1
  125. length: 24
  126. noUpper: false
  127. symbolCharacters: string
  128. symbols: 1
  129. quayAccessTokenSpec:
  130. robotAccount: string
  131. serviceAccountRef:
  132. audiences: [] # minItems 0 of type string
  133. name: string
  134. namespace: string
  135. url: string
  136. sshKeySpec:
  137. comment: string
  138. keySize: 256
  139. keyType: "rsa"
  140. stsSessionTokenSpec:
  141. auth:
  142. jwt:
  143. serviceAccountRef:
  144. audiences: [] # minItems 0 of type string
  145. name: string
  146. namespace: string
  147. secretRef:
  148. accessKeyIDSecretRef:
  149. key: string
  150. name: string
  151. namespace: string
  152. secretAccessKeySecretRef:
  153. key: string
  154. name: string
  155. namespace: string
  156. sessionTokenSecretRef:
  157. key: string
  158. name: string
  159. namespace: string
  160. region: string
  161. requestParameters:
  162. serialNumber: string
  163. sessionDuration: 1
  164. tokenCode: string
  165. role: string
  166. uuidSpec: {}
  167. vaultDynamicSecretSpec:
  168. allowEmptyResponse: false
  169. controller: string
  170. method: string
  171. parameters:
  172. path: string
  173. provider:
  174. auth:
  175. appRole:
  176. path: "approle"
  177. roleId: string
  178. roleRef:
  179. key: string
  180. name: string
  181. namespace: string
  182. secretRef:
  183. key: string
  184. name: string
  185. namespace: string
  186. cert:
  187. clientCert:
  188. key: string
  189. name: string
  190. namespace: string
  191. secretRef:
  192. key: string
  193. name: string
  194. namespace: string
  195. iam:
  196. externalID: string
  197. jwt:
  198. serviceAccountRef:
  199. audiences: [] # minItems 0 of type string
  200. name: string
  201. namespace: string
  202. path: string
  203. region: string
  204. role: string
  205. secretRef:
  206. accessKeyIDSecretRef:
  207. key: string
  208. name: string
  209. namespace: string
  210. secretAccessKeySecretRef:
  211. key: string
  212. name: string
  213. namespace: string
  214. sessionTokenSecretRef:
  215. key: string
  216. name: string
  217. namespace: string
  218. vaultAwsIamServerID: string
  219. vaultRole: string
  220. jwt:
  221. kubernetesServiceAccountToken:
  222. audiences: [] # minItems 0 of type string
  223. expirationSeconds: 1
  224. serviceAccountRef:
  225. audiences: [] # minItems 0 of type string
  226. name: string
  227. namespace: string
  228. path: "jwt"
  229. role: string
  230. secretRef:
  231. key: string
  232. name: string
  233. namespace: string
  234. kubernetes:
  235. mountPath: "kubernetes"
  236. role: string
  237. secretRef:
  238. key: string
  239. name: string
  240. namespace: string
  241. serviceAccountRef:
  242. audiences: [] # minItems 0 of type string
  243. name: string
  244. namespace: string
  245. ldap:
  246. path: "ldap"
  247. secretRef:
  248. key: string
  249. name: string
  250. namespace: string
  251. username: string
  252. namespace: string
  253. tokenSecretRef:
  254. key: string
  255. name: string
  256. namespace: string
  257. userPass:
  258. path: "userpass"
  259. secretRef:
  260. key: string
  261. name: string
  262. namespace: string
  263. username: string
  264. caBundle: c3RyaW5n
  265. caProvider:
  266. key: string
  267. name: string
  268. namespace: string
  269. type: "Secret" # "Secret", "ConfigMap"
  270. checkAndSet:
  271. required: true
  272. forwardInconsistent: true
  273. headers: {}
  274. namespace: string
  275. path: string
  276. readYourWrites: true
  277. server: string
  278. tls:
  279. certSecretRef:
  280. key: string
  281. name: string
  282. namespace: string
  283. keySecretRef:
  284. key: string
  285. name: string
  286. namespace: string
  287. version: "v2"
  288. resultType: "Data"
  289. retrySettings:
  290. maxRetries: 1
  291. retryInterval: string
  292. webhookSpec:
  293. auth:
  294. ntlm:
  295. passwordSecret:
  296. key: string
  297. name: string
  298. namespace: string
  299. usernameSecret:
  300. key: string
  301. name: string
  302. namespace: string
  303. body: string
  304. caBundle: c3RyaW5n
  305. caProvider:
  306. key: string
  307. name: string
  308. namespace: string
  309. type: "Secret" # "Secret", "ConfigMap"
  310. headers: {}
  311. method: string
  312. result:
  313. jsonPath: string
  314. secrets:
  315. - name: string
  316. secretRef:
  317. key: string
  318. name: string
  319. timeout: string
  320. url: string
  321. kind: "ACRAccessToken" # "ACRAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"