externalsecret-v1.yaml 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111
  1. apiVersion: external-secrets.io/v1
  2. kind: ExternalSecret
  3. metadata: {}
  4. spec:
  5. data:
  6. - remoteRef:
  7. conversionStrategy: "Default" # "Default", "Unicode"
  8. decodingStrategy: "Auto" # "Auto", "Base64", "Base64URL", "None"
  9. key: string
  10. metadataPolicy: "None" # "None", "Fetch"
  11. nullBytePolicy: "Ignore" # "Ignore", "Fail"
  12. property: string
  13. version: string
  14. secretKey: string
  15. sourceRef:
  16. generatorRef:
  17. apiVersion: external-secrets.io/v1
  18. kind: "ACRAccessToken" # "ACRAccessToken", "BeyondtrustWorkloadCredentialsDynamicSecret", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "GitlabDeployToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  19. name: string
  20. storeRef:
  21. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  22. name: string
  23. dataFrom:
  24. - extract:
  25. conversionStrategy: "Default" # "Default", "Unicode"
  26. decodingStrategy: "Auto" # "Auto", "Base64", "Base64URL", "None"
  27. key: string
  28. metadataPolicy: "None" # "None", "Fetch"
  29. nullBytePolicy: "Ignore" # "Ignore", "Fail"
  30. property: string
  31. version: string
  32. find:
  33. conversionStrategy: "Default" # "Default", "Unicode"
  34. decodingStrategy: "Auto" # "Auto", "Base64", "Base64URL", "None"
  35. name:
  36. regexp: string
  37. nullBytePolicy: "Ignore" # "Ignore", "Fail"
  38. path: string
  39. tags: {}
  40. rewrite:
  41. - merge:
  42. conflictPolicy: "Error"
  43. into: ""
  44. priority: [] # minItems 0 of type string
  45. priorityPolicy: "Strict"
  46. strategy: "Extract"
  47. regexp:
  48. source: string
  49. target: string
  50. transform:
  51. template: string
  52. sourceRef:
  53. generatorRef:
  54. apiVersion: external-secrets.io/v1
  55. kind: "ACRAccessToken" # "ACRAccessToken", "BeyondtrustWorkloadCredentialsDynamicSecret", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "GitlabDeployToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  56. name: string
  57. storeRef:
  58. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  59. name: string
  60. refreshInterval: "1h0m0s"
  61. refreshPolicy: "CreatedOnce" # "CreatedOnce", "Periodic", "OnChange"
  62. secretStoreRef:
  63. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  64. name: string
  65. syncWindows:
  66. kind: "allow" # "allow", "deny"
  67. windows:
  68. - duration: string
  69. schedule: string
  70. target:
  71. creationPolicy: "Owner"
  72. deletionPolicy: "Retain"
  73. immutable: true
  74. manifest:
  75. apiVersion: external-secrets.io/v1
  76. kind: string
  77. name: string
  78. template:
  79. data: {}
  80. engineVersion: "v2"
  81. mergePolicy: "Replace"
  82. metadata:
  83. annotations: {}
  84. finalizers: [] # minItems 0 of type string
  85. labels: {}
  86. templateFrom:
  87. - configMap:
  88. items:
  89. - key: string
  90. templateAs: "Values"
  91. name: string
  92. literal: string
  93. secret:
  94. items:
  95. - key: string
  96. templateAs: "Values"
  97. name: string
  98. target: "Data"
  99. valuesDecodingStrategy: "Auto" # "Auto", "Base64", "Base64URL", "None"
  100. type: string
  101. status:
  102. binding:
  103. name: ""
  104. conditions:
  105. - lastTransitionTime: 2024-10-11T12:48:44Z
  106. message: string
  107. reason: string
  108. status: string
  109. type: "Ready" # "Ready", "Deleted"
  110. refreshTime: 2024-10-11T12:48:44Z
  111. syncedResourceVersion: string