index.html 72 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639
  1. <!doctype html>
  2. <html lang="en" class="no-js">
  3. <head>
  4. <meta charset="utf-8">
  5. <meta name="viewport" content="width=device-width,initial-scale=1">
  6. <link rel="prev" href="../azure-key-vault/">
  7. <link rel="next" href="../bitwarden-secrets-manager/">
  8. <link rel="icon" href="../../pictures/eso-round-logo.svg">
  9. <meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.5.48">
  10. <title>BeyondTrust - External Secrets Operator</title>
  11. <link rel="stylesheet" href="../../assets/stylesheets/main.6f8fc17f.min.css">
  12. <link rel="stylesheet" href="../../assets/stylesheets/palette.06af60db.min.css">
  13. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  14. <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,700,700i%7CRoboto+Mono:400,400i,700,700i&display=fallback">
  15. <style>:root{--md-text-font:"Roboto";--md-code-font:"Roboto Mono"}</style>
  16. <script>__md_scope=new URL("../..",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
  17. <script id="__analytics">function __md_analytics(){function e(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[],e("js",new Date),e("config","G-QP38TD8K7V"),document.addEventListener("DOMContentLoaded",(function(){document.forms.search&&document.forms.search.query.addEventListener("blur",(function(){this.value&&e("event","search",{search_term:this.value})}));document$.subscribe((function(){var t=document.forms.feedback;if(void 0!==t)for(var a of t.querySelectorAll("[type=submit]"))a.addEventListener("click",(function(a){a.preventDefault();var n=document.location.pathname,d=this.getAttribute("data-md-value");e("event","feedback",{page:n,data:d}),t.firstElementChild.disabled=!0;var r=t.querySelector(".md-feedback__note [data-md-value='"+d+"']");r&&(r.hidden=!1)})),t.hidden=!1})),location$.subscribe((function(t){e("config","G-QP38TD8K7V",{page_path:t.pathname})}))}));var t=document.createElement("script");t.async=!0,t.src="https://www.googletagmanager.com/gtag/js?id=G-QP38TD8K7V",document.getElementById("__analytics").insertAdjacentElement("afterEnd",t)}</script>
  18. <script>"undefined"!=typeof __md_analytics&&__md_analytics()</script>
  19. </head>
  20. <body dir="ltr" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo">
  21. <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
  22. <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
  23. <label class="md-overlay" for="__drawer"></label>
  24. <div data-md-component="skip">
  25. <a href="#beyondtrust-password-safe" class="md-skip">
  26. Skip to content
  27. </a>
  28. </div>
  29. <div data-md-component="announce">
  30. </div>
  31. <div data-md-color-scheme="default" data-md-component="outdated" hidden>
  32. <aside class="md-banner md-banner--warning">
  33. <div class="md-banner__inner md-grid md-typeset">
  34. You're not viewing the latest version.
  35. <a href="../../..">
  36. <strong>Click here to go to latest.</strong>
  37. </a>
  38. </div>
  39. <script>var el=document.querySelector("[data-md-component=outdated]"),outdated=__md_get("__outdated",sessionStorage);!0===outdated&&el&&(el.hidden=!1)</script>
  40. </aside>
  41. </div>
  42. <header class="md-header" data-md-component="header">
  43. <nav class="md-header__inner md-grid" aria-label="Header">
  44. <a href="../.." title="External Secrets Operator" class="md-header__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  45. <img src="../../pictures/eso-round-logo.svg" alt="logo">
  46. </a>
  47. <label class="md-header__button md-icon" for="__drawer">
  48. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"/></svg>
  49. </label>
  50. <div class="md-header__title" data-md-component="header-title">
  51. <div class="md-header__ellipsis">
  52. <div class="md-header__topic">
  53. <span class="md-ellipsis">
  54. External Secrets Operator
  55. </span>
  56. </div>
  57. <div class="md-header__topic" data-md-component="header-topic">
  58. <span class="md-ellipsis">
  59. BeyondTrust
  60. </span>
  61. </div>
  62. </div>
  63. </div>
  64. <form class="md-header__option" data-md-component="palette">
  65. <input class="md-option" data-md-color-media="(prefers-color-scheme: light)" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo" aria-label="Switch to dark mode" type="radio" name="__palette" id="__palette_0">
  66. <label class="md-header__button md-icon" title="Switch to dark mode" for="__palette_1" hidden>
  67. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a4 4 0 0 0-4 4 4 4 0 0 0 4 4 4 4 0 0 0 4-4 4 4 0 0 0-4-4m0 10a6 6 0 0 1-6-6 6 6 0 0 1 6-6 6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
  68. </label>
  69. <input class="md-option" data-md-color-media="(prefers-color-scheme: dark)" data-md-color-scheme="slate" data-md-color-primary="indigo" data-md-color-accent="indigo" aria-label="Switch to light mode" type="radio" name="__palette" id="__palette_1">
  70. <label class="md-header__button md-icon" title="Switch to light mode" for="__palette_0" hidden>
  71. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 18c-.89 0-1.74-.2-2.5-.55C11.56 16.5 13 14.42 13 12s-1.44-4.5-3.5-5.45C10.26 6.2 11.11 6 12 6a6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
  72. </label>
  73. </form>
  74. <script>var palette=__md_get("__palette");if(palette&&palette.color){if("(prefers-color-scheme)"===palette.color.media){var media=matchMedia("(prefers-color-scheme: light)"),input=document.querySelector(media.matches?"[data-md-color-media='(prefers-color-scheme: light)']":"[data-md-color-media='(prefers-color-scheme: dark)']");palette.color.media=input.getAttribute("data-md-color-media"),palette.color.scheme=input.getAttribute("data-md-color-scheme"),palette.color.primary=input.getAttribute("data-md-color-primary"),palette.color.accent=input.getAttribute("data-md-color-accent")}for(var[key,value]of Object.entries(palette.color))document.body.setAttribute("data-md-color-"+key,value)}</script>
  75. <label class="md-header__button md-icon" for="__search">
  76. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
  77. </label>
  78. <div class="md-search" data-md-component="search" role="dialog">
  79. <label class="md-search__overlay" for="__search"></label>
  80. <div class="md-search__inner" role="search">
  81. <form class="md-search__form" name="search">
  82. <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
  83. <label class="md-search__icon md-icon" for="__search">
  84. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
  85. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"/></svg>
  86. </label>
  87. <nav class="md-search__options" aria-label="Search">
  88. <button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1">
  89. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>
  90. </button>
  91. </nav>
  92. </form>
  93. <div class="md-search__output">
  94. <div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix>
  95. <div class="md-search-result" data-md-component="search-result">
  96. <div class="md-search-result__meta">
  97. Initializing search
  98. </div>
  99. <ol class="md-search-result__list" role="presentation"></ol>
  100. </div>
  101. </div>
  102. </div>
  103. </div>
  104. </div>
  105. <div class="md-header__source">
  106. <a href="https://github.com/external-secrets/external-secrets" title="Go to repository" class="md-source" data-md-component="source">
  107. <div class="md-source__icon md-icon">
  108. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.7.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"/></svg>
  109. </div>
  110. <div class="md-source__repository">
  111. External Secrets Operator
  112. </div>
  113. </a>
  114. </div>
  115. </nav>
  116. </header>
  117. <div class="md-container" data-md-component="container">
  118. <nav class="md-tabs" aria-label="Tabs" data-md-component="tabs">
  119. <div class="md-grid">
  120. <ul class="md-tabs__list">
  121. <li class="md-tabs__item">
  122. <a href="../.." class="md-tabs__link">
  123. Introduction
  124. </a>
  125. </li>
  126. <li class="md-tabs__item">
  127. <a href="../../api/components/" class="md-tabs__link">
  128. API
  129. </a>
  130. </li>
  131. <li class="md-tabs__item">
  132. <a href="../../guides/introduction/" class="md-tabs__link">
  133. Guides
  134. </a>
  135. </li>
  136. <li class="md-tabs__item md-tabs__item--active">
  137. <a href="../aws-secrets-manager/" class="md-tabs__link">
  138. Provider
  139. </a>
  140. </li>
  141. <li class="md-tabs__item">
  142. <a href="../../examples/gitops-using-fluxcd/" class="md-tabs__link">
  143. Examples
  144. </a>
  145. </li>
  146. <li class="md-tabs__item">
  147. <a href="../../contributing/devguide/" class="md-tabs__link">
  148. Community
  149. </a>
  150. </li>
  151. </ul>
  152. </div>
  153. </nav>
  154. <main class="md-main" data-md-component="main">
  155. <div class="md-main__inner md-grid">
  156. <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
  157. <div class="md-sidebar__scrollwrap">
  158. <div class="md-sidebar__inner">
  159. <nav class="md-nav md-nav--primary md-nav--lifted" aria-label="Navigation" data-md-level="0">
  160. <label class="md-nav__title" for="__drawer">
  161. <a href="../.." title="External Secrets Operator" class="md-nav__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  162. <img src="../../pictures/eso-round-logo.svg" alt="logo">
  163. </a>
  164. External Secrets Operator
  165. </label>
  166. <div class="md-nav__source">
  167. <a href="https://github.com/external-secrets/external-secrets" title="Go to repository" class="md-source" data-md-component="source">
  168. <div class="md-source__icon md-icon">
  169. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.7.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"/></svg>
  170. </div>
  171. <div class="md-source__repository">
  172. External Secrets Operator
  173. </div>
  174. </a>
  175. </div>
  176. <ul class="md-nav__list" data-md-scrollfix>
  177. <li class="md-nav__item md-nav__item--nested">
  178. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_1" >
  179. <div class="md-nav__link md-nav__container">
  180. <a href="../.." class="md-nav__link ">
  181. <span class="md-ellipsis">
  182. Introduction
  183. </span>
  184. </a>
  185. <label class="md-nav__link " for="__nav_1" id="__nav_1_label" tabindex="0">
  186. <span class="md-nav__icon md-icon"></span>
  187. </label>
  188. </div>
  189. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_1_label" aria-expanded="false">
  190. <label class="md-nav__title" for="__nav_1">
  191. <span class="md-nav__icon md-icon"></span>
  192. Introduction
  193. </label>
  194. <ul class="md-nav__list" data-md-scrollfix>
  195. <li class="md-nav__item">
  196. <a href="../../introduction/overview/" class="md-nav__link">
  197. <span class="md-ellipsis">
  198. Overview
  199. </span>
  200. </a>
  201. </li>
  202. <li class="md-nav__item">
  203. <a href="../../introduction/getting-started/" class="md-nav__link">
  204. <span class="md-ellipsis">
  205. Getting started
  206. </span>
  207. </a>
  208. </li>
  209. <li class="md-nav__item">
  210. <a href="../../introduction/faq/" class="md-nav__link">
  211. <span class="md-ellipsis">
  212. FAQ
  213. </span>
  214. </a>
  215. </li>
  216. <li class="md-nav__item">
  217. <a href="../../introduction/stability-support/" class="md-nav__link">
  218. <span class="md-ellipsis">
  219. Stability and Support
  220. </span>
  221. </a>
  222. </li>
  223. <li class="md-nav__item">
  224. <a href="../../introduction/deprecation-policy/" class="md-nav__link">
  225. <span class="md-ellipsis">
  226. Deprecation Policy
  227. </span>
  228. </a>
  229. </li>
  230. </ul>
  231. </nav>
  232. </li>
  233. <li class="md-nav__item md-nav__item--nested">
  234. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2" >
  235. <label class="md-nav__link" for="__nav_2" id="__nav_2_label" tabindex="0">
  236. <span class="md-ellipsis">
  237. API
  238. </span>
  239. <span class="md-nav__icon md-icon"></span>
  240. </label>
  241. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_2_label" aria-expanded="false">
  242. <label class="md-nav__title" for="__nav_2">
  243. <span class="md-nav__icon md-icon"></span>
  244. API
  245. </label>
  246. <ul class="md-nav__list" data-md-scrollfix>
  247. <li class="md-nav__item">
  248. <a href="../../api/components/" class="md-nav__link">
  249. <span class="md-ellipsis">
  250. Components
  251. </span>
  252. </a>
  253. </li>
  254. <li class="md-nav__item md-nav__item--nested">
  255. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2_2" >
  256. <label class="md-nav__link" for="__nav_2_2" id="__nav_2_2_label" tabindex="0">
  257. <span class="md-ellipsis">
  258. Core Resources
  259. </span>
  260. <span class="md-nav__icon md-icon"></span>
  261. </label>
  262. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_2_label" aria-expanded="false">
  263. <label class="md-nav__title" for="__nav_2_2">
  264. <span class="md-nav__icon md-icon"></span>
  265. Core Resources
  266. </label>
  267. <ul class="md-nav__list" data-md-scrollfix>
  268. <li class="md-nav__item">
  269. <a href="../../api/externalsecret/" class="md-nav__link">
  270. <span class="md-ellipsis">
  271. ExternalSecret
  272. </span>
  273. </a>
  274. </li>
  275. <li class="md-nav__item">
  276. <a href="../../api/secretstore/" class="md-nav__link">
  277. <span class="md-ellipsis">
  278. SecretStore
  279. </span>
  280. </a>
  281. </li>
  282. <li class="md-nav__item">
  283. <a href="../../api/clustersecretstore/" class="md-nav__link">
  284. <span class="md-ellipsis">
  285. ClusterSecretStore
  286. </span>
  287. </a>
  288. </li>
  289. <li class="md-nav__item">
  290. <a href="../../api/clusterexternalsecret/" class="md-nav__link">
  291. <span class="md-ellipsis">
  292. ClusterExternalSecret
  293. </span>
  294. </a>
  295. </li>
  296. <li class="md-nav__item">
  297. <a href="../../api/pushsecret/" class="md-nav__link">
  298. <span class="md-ellipsis">
  299. PushSecret
  300. </span>
  301. </a>
  302. </li>
  303. </ul>
  304. </nav>
  305. </li>
  306. <li class="md-nav__item md-nav__item--nested">
  307. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2_3" >
  308. <div class="md-nav__link md-nav__container">
  309. <a href="../../api/generator/" class="md-nav__link ">
  310. <span class="md-ellipsis">
  311. Generators
  312. </span>
  313. </a>
  314. <label class="md-nav__link " for="__nav_2_3" id="__nav_2_3_label" tabindex="0">
  315. <span class="md-nav__icon md-icon"></span>
  316. </label>
  317. </div>
  318. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_3_label" aria-expanded="false">
  319. <label class="md-nav__title" for="__nav_2_3">
  320. <span class="md-nav__icon md-icon"></span>
  321. Generators
  322. </label>
  323. <ul class="md-nav__list" data-md-scrollfix>
  324. <li class="md-nav__item">
  325. <a href="../../api/generator/acr/" class="md-nav__link">
  326. <span class="md-ellipsis">
  327. Azure Container Registry
  328. </span>
  329. </a>
  330. </li>
  331. <li class="md-nav__item">
  332. <a href="../../api/generator/ecr/" class="md-nav__link">
  333. <span class="md-ellipsis">
  334. AWS Elastic Container Registry
  335. </span>
  336. </a>
  337. </li>
  338. <li class="md-nav__item">
  339. <a href="../../api/generator/sts/" class="md-nav__link">
  340. <span class="md-ellipsis">
  341. AWS STS Session Token
  342. </span>
  343. </a>
  344. </li>
  345. <li class="md-nav__item">
  346. <a href="../../api/generator/cluster/" class="md-nav__link">
  347. <span class="md-ellipsis">
  348. Cluster Generator
  349. </span>
  350. </a>
  351. </li>
  352. <li class="md-nav__item">
  353. <a href="../../api/generator/gcr/" class="md-nav__link">
  354. <span class="md-ellipsis">
  355. Google Container Registry
  356. </span>
  357. </a>
  358. </li>
  359. <li class="md-nav__item">
  360. <a href="../../api/generator/vault/" class="md-nav__link">
  361. <span class="md-ellipsis">
  362. Vault Dynamic Secret
  363. </span>
  364. </a>
  365. </li>
  366. <li class="md-nav__item">
  367. <a href="../../api/generator/password/" class="md-nav__link">
  368. <span class="md-ellipsis">
  369. Password
  370. </span>
  371. </a>
  372. </li>
  373. <li class="md-nav__item">
  374. <a href="../../api/generator/fake/" class="md-nav__link">
  375. <span class="md-ellipsis">
  376. Fake
  377. </span>
  378. </a>
  379. </li>
  380. <li class="md-nav__item">
  381. <a href="../../api/generator/webhook/" class="md-nav__link">
  382. <span class="md-ellipsis">
  383. Webhook
  384. </span>
  385. </a>
  386. </li>
  387. <li class="md-nav__item">
  388. <a href="../../api/generator/github/" class="md-nav__link">
  389. <span class="md-ellipsis">
  390. Github
  391. </span>
  392. </a>
  393. </li>
  394. <li class="md-nav__item">
  395. <a href="../../api/generator/uuid/" class="md-nav__link">
  396. <span class="md-ellipsis">
  397. UUID
  398. </span>
  399. </a>
  400. </li>
  401. </ul>
  402. </nav>
  403. </li>
  404. <li class="md-nav__item md-nav__item--nested">
  405. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2_4" >
  406. <label class="md-nav__link" for="__nav_2_4" id="__nav_2_4_label" tabindex="0">
  407. <span class="md-ellipsis">
  408. Reference Docs
  409. </span>
  410. <span class="md-nav__icon md-icon"></span>
  411. </label>
  412. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_4_label" aria-expanded="false">
  413. <label class="md-nav__title" for="__nav_2_4">
  414. <span class="md-nav__icon md-icon"></span>
  415. Reference Docs
  416. </label>
  417. <ul class="md-nav__list" data-md-scrollfix>
  418. <li class="md-nav__item">
  419. <a href="../../api/spec/" class="md-nav__link">
  420. <span class="md-ellipsis">
  421. API specification
  422. </span>
  423. </a>
  424. </li>
  425. <li class="md-nav__item">
  426. <a href="../../api/controller-options/" class="md-nav__link">
  427. <span class="md-ellipsis">
  428. Controller Options
  429. </span>
  430. </a>
  431. </li>
  432. <li class="md-nav__item">
  433. <a href="../../api/metrics/" class="md-nav__link">
  434. <span class="md-ellipsis">
  435. Metrics
  436. </span>
  437. </a>
  438. </li>
  439. </ul>
  440. </nav>
  441. </li>
  442. </ul>
  443. </nav>
  444. </li>
  445. <li class="md-nav__item md-nav__item--nested">
  446. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3" >
  447. <label class="md-nav__link" for="__nav_3" id="__nav_3_label" tabindex="0">
  448. <span class="md-ellipsis">
  449. Guides
  450. </span>
  451. <span class="md-nav__icon md-icon"></span>
  452. </label>
  453. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_3_label" aria-expanded="false">
  454. <label class="md-nav__title" for="__nav_3">
  455. <span class="md-nav__icon md-icon"></span>
  456. Guides
  457. </label>
  458. <ul class="md-nav__list" data-md-scrollfix>
  459. <li class="md-nav__item">
  460. <a href="../../guides/introduction/" class="md-nav__link">
  461. <span class="md-ellipsis">
  462. Introduction
  463. </span>
  464. </a>
  465. </li>
  466. <li class="md-nav__item md-nav__item--nested">
  467. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_2" >
  468. <label class="md-nav__link" for="__nav_3_2" id="__nav_3_2_label" tabindex="0">
  469. <span class="md-ellipsis">
  470. External Secrets
  471. </span>
  472. <span class="md-nav__icon md-icon"></span>
  473. </label>
  474. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_3_2_label" aria-expanded="false">
  475. <label class="md-nav__title" for="__nav_3_2">
  476. <span class="md-nav__icon md-icon"></span>
  477. External Secrets
  478. </label>
  479. <ul class="md-nav__list" data-md-scrollfix>
  480. <li class="md-nav__item">
  481. <a href="../../guides/all-keys-one-secret/" class="md-nav__link">
  482. <span class="md-ellipsis">
  483. Extract structured data
  484. </span>
  485. </a>
  486. </li>
  487. <li class="md-nav__item">
  488. <a href="../../guides/getallsecrets/" class="md-nav__link">
  489. <span class="md-ellipsis">
  490. Find Secrets by Name or Metadata
  491. </span>
  492. </a>
  493. </li>
  494. <li class="md-nav__item">
  495. <a href="../../guides/datafrom-rewrite/" class="md-nav__link">
  496. <span class="md-ellipsis">
  497. Rewriting Keys
  498. </span>
  499. </a>
  500. </li>
  501. <li class="md-nav__item md-nav__item--nested">
  502. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_2_4" >
  503. <label class="md-nav__link" for="__nav_3_2_4" id="__nav_3_2_4_label" tabindex="0">
  504. <span class="md-ellipsis">
  505. Advanced Templating
  506. </span>
  507. <span class="md-nav__icon md-icon"></span>
  508. </label>
  509. <nav class="md-nav" data-md-level="3" aria-labelledby="__nav_3_2_4_label" aria-expanded="false">
  510. <label class="md-nav__title" for="__nav_3_2_4">
  511. <span class="md-nav__icon md-icon"></span>
  512. Advanced Templating
  513. </label>
  514. <ul class="md-nav__list" data-md-scrollfix>
  515. <li class="md-nav__item">
  516. <a href="../../guides/templating/" class="md-nav__link">
  517. <span class="md-ellipsis">
  518. v2
  519. </span>
  520. </a>
  521. </li>
  522. <li class="md-nav__item">
  523. <a href="../../guides/templating-v1/" class="md-nav__link">
  524. <span class="md-ellipsis">
  525. v1
  526. </span>
  527. </a>
  528. </li>
  529. </ul>
  530. </nav>
  531. </li>
  532. <li class="md-nav__item">
  533. <a href="../../guides/common-k8s-secret-types/" class="md-nav__link">
  534. <span class="md-ellipsis">
  535. Kubernetes Secret Types
  536. </span>
  537. </a>
  538. </li>
  539. <li class="md-nav__item">
  540. <a href="../../guides/ownership-deletion-policy/" class="md-nav__link">
  541. <span class="md-ellipsis">
  542. Lifecycle: ownership & deletion
  543. </span>
  544. </a>
  545. </li>
  546. <li class="md-nav__item">
  547. <a href="../../guides/decoding-strategy/" class="md-nav__link">
  548. <span class="md-ellipsis">
  549. Decoding Strategies
  550. </span>
  551. </a>
  552. </li>
  553. <li class="md-nav__item">
  554. <a href="../../guides/controller-class/" class="md-nav__link">
  555. <span class="md-ellipsis">
  556. Controller Classes
  557. </span>
  558. </a>
  559. </li>
  560. </ul>
  561. </nav>
  562. </li>
  563. <li class="md-nav__item">
  564. <a href="../../guides/generator/" class="md-nav__link">
  565. <span class="md-ellipsis">
  566. Generators
  567. </span>
  568. </a>
  569. </li>
  570. <li class="md-nav__item">
  571. <a href="../../guides/pushsecrets/" class="md-nav__link">
  572. <span class="md-ellipsis">
  573. Push Secrets
  574. </span>
  575. </a>
  576. </li>
  577. <li class="md-nav__item md-nav__item--nested">
  578. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_5" >
  579. <label class="md-nav__link" for="__nav_3_5" id="__nav_3_5_label" tabindex="0">
  580. <span class="md-ellipsis">
  581. Operations
  582. </span>
  583. <span class="md-nav__icon md-icon"></span>
  584. </label>
  585. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_3_5_label" aria-expanded="false">
  586. <label class="md-nav__title" for="__nav_3_5">
  587. <span class="md-nav__icon md-icon"></span>
  588. Operations
  589. </label>
  590. <ul class="md-nav__list" data-md-scrollfix>
  591. <li class="md-nav__item">
  592. <a href="../../guides/multi-tenancy/" class="md-nav__link">
  593. <span class="md-ellipsis">
  594. Multi Tenancy
  595. </span>
  596. </a>
  597. </li>
  598. <li class="md-nav__item">
  599. <a href="../../guides/security-best-practices/" class="md-nav__link">
  600. <span class="md-ellipsis">
  601. Security Best Practices
  602. </span>
  603. </a>
  604. </li>
  605. <li class="md-nav__item">
  606. <a href="../../guides/threat-model/" class="md-nav__link">
  607. <span class="md-ellipsis">
  608. Threat Model
  609. </span>
  610. </a>
  611. </li>
  612. <li class="md-nav__item">
  613. <a href="../../guides/v1beta1/" class="md-nav__link">
  614. <span class="md-ellipsis">
  615. Upgrading to v1beta1
  616. </span>
  617. </a>
  618. </li>
  619. <li class="md-nav__item">
  620. <a href="../../guides/using-latest-image/" class="md-nav__link">
  621. <span class="md-ellipsis">
  622. Using Latest Image
  623. </span>
  624. </a>
  625. </li>
  626. <li class="md-nav__item">
  627. <a href="../../guides/disable-cluster-features/" class="md-nav__link">
  628. <span class="md-ellipsis">
  629. Disable Cluster Features
  630. </span>
  631. </a>
  632. </li>
  633. </ul>
  634. </nav>
  635. </li>
  636. </ul>
  637. </nav>
  638. </li>
  639. <li class="md-nav__item md-nav__item--active md-nav__item--section md-nav__item--nested">
  640. <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_4" checked>
  641. <label class="md-nav__link" for="__nav_4" id="__nav_4_label" tabindex="">
  642. <span class="md-ellipsis">
  643. Provider
  644. </span>
  645. <span class="md-nav__icon md-icon"></span>
  646. </label>
  647. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_4_label" aria-expanded="true">
  648. <label class="md-nav__title" for="__nav_4">
  649. <span class="md-nav__icon md-icon"></span>
  650. Provider
  651. </label>
  652. <ul class="md-nav__list" data-md-scrollfix>
  653. <li class="md-nav__item">
  654. <a href="../aws-secrets-manager/" class="md-nav__link">
  655. <span class="md-ellipsis">
  656. AWS Secrets Manager
  657. </span>
  658. </a>
  659. </li>
  660. <li class="md-nav__item">
  661. <a href="../aws-parameter-store/" class="md-nav__link">
  662. <span class="md-ellipsis">
  663. AWS Parameter Store
  664. </span>
  665. </a>
  666. </li>
  667. <li class="md-nav__item">
  668. <a href="../azure-key-vault/" class="md-nav__link">
  669. <span class="md-ellipsis">
  670. Azure Key Vault
  671. </span>
  672. </a>
  673. </li>
  674. <li class="md-nav__item md-nav__item--active">
  675. <input class="md-nav__toggle md-toggle" type="checkbox" id="__toc">
  676. <label class="md-nav__link md-nav__link--active" for="__toc">
  677. <span class="md-ellipsis">
  678. BeyondTrust
  679. </span>
  680. <span class="md-nav__icon md-icon"></span>
  681. </label>
  682. <a href="./" class="md-nav__link md-nav__link--active">
  683. <span class="md-ellipsis">
  684. BeyondTrust
  685. </span>
  686. </a>
  687. <nav class="md-nav md-nav--secondary" aria-label="Table of contents">
  688. <label class="md-nav__title" for="__toc">
  689. <span class="md-nav__icon md-icon"></span>
  690. Table of contents
  691. </label>
  692. <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
  693. <li class="md-nav__item">
  694. <a href="#beyondtrust-password-safe" class="md-nav__link">
  695. <span class="md-ellipsis">
  696. BeyondTrust Password Safe
  697. </span>
  698. </a>
  699. <nav class="md-nav" aria-label="BeyondTrust Password Safe">
  700. <ul class="md-nav__list">
  701. <li class="md-nav__item">
  702. <a href="#prerequisites" class="md-nav__link">
  703. <span class="md-ellipsis">
  704. Prerequisites
  705. </span>
  706. </a>
  707. </li>
  708. <li class="md-nav__item">
  709. <a href="#authentication" class="md-nav__link">
  710. <span class="md-ellipsis">
  711. Authentication
  712. </span>
  713. </a>
  714. </li>
  715. <li class="md-nav__item">
  716. <a href="#client-certificate" class="md-nav__link">
  717. <span class="md-ellipsis">
  718. Client Certificate
  719. </span>
  720. </a>
  721. </li>
  722. <li class="md-nav__item">
  723. <a href="#creating-a-secretstore" class="md-nav__link">
  724. <span class="md-ellipsis">
  725. Creating a SecretStore
  726. </span>
  727. </a>
  728. </li>
  729. <li class="md-nav__item">
  730. <a href="#creating-an-externalsecret" class="md-nav__link">
  731. <span class="md-ellipsis">
  732. Creating an ExternalSecret
  733. </span>
  734. </a>
  735. </li>
  736. <li class="md-nav__item">
  737. <a href="#get-the-k8s-secret" class="md-nav__link">
  738. <span class="md-ellipsis">
  739. Get the K8s secret
  740. </span>
  741. </a>
  742. </li>
  743. </ul>
  744. </nav>
  745. </li>
  746. </ul>
  747. </nav>
  748. </li>
  749. <li class="md-nav__item">
  750. <a href="../bitwarden-secrets-manager/" class="md-nav__link">
  751. <span class="md-ellipsis">
  752. Bitwarden Secrets Manager
  753. </span>
  754. </a>
  755. </li>
  756. <li class="md-nav__item">
  757. <a href="../chef/" class="md-nav__link">
  758. <span class="md-ellipsis">
  759. Chef
  760. </span>
  761. </a>
  762. </li>
  763. <li class="md-nav__item">
  764. <a href="../conjur/" class="md-nav__link">
  765. <span class="md-ellipsis">
  766. CyberArk Conjur
  767. </span>
  768. </a>
  769. </li>
  770. <li class="md-nav__item">
  771. <a href="../device42/" class="md-nav__link">
  772. <span class="md-ellipsis">
  773. Device42
  774. </span>
  775. </a>
  776. </li>
  777. <li class="md-nav__item">
  778. <a href="../google-secrets-manager/" class="md-nav__link">
  779. <span class="md-ellipsis">
  780. Google Cloud Secret Manager
  781. </span>
  782. </a>
  783. </li>
  784. <li class="md-nav__item">
  785. <a href="../hashicorp-vault/" class="md-nav__link">
  786. <span class="md-ellipsis">
  787. HashiCorp Vault
  788. </span>
  789. </a>
  790. </li>
  791. <li class="md-nav__item">
  792. <a href="../kubernetes/" class="md-nav__link">
  793. <span class="md-ellipsis">
  794. Kubernetes
  795. </span>
  796. </a>
  797. </li>
  798. <li class="md-nav__item">
  799. <a href="../ibm-secrets-manager/" class="md-nav__link">
  800. <span class="md-ellipsis">
  801. IBM Secrets Manager
  802. </span>
  803. </a>
  804. </li>
  805. <li class="md-nav__item">
  806. <a href="../akeyless/" class="md-nav__link">
  807. <span class="md-ellipsis">
  808. Akeyless
  809. </span>
  810. </a>
  811. </li>
  812. <li class="md-nav__item">
  813. <a href="../yandex-certificate-manager/" class="md-nav__link">
  814. <span class="md-ellipsis">
  815. Yandex Certificate Manager
  816. </span>
  817. </a>
  818. </li>
  819. <li class="md-nav__item">
  820. <a href="../yandex-lockbox/" class="md-nav__link">
  821. <span class="md-ellipsis">
  822. Yandex Lockbox
  823. </span>
  824. </a>
  825. </li>
  826. <li class="md-nav__item">
  827. <a href="../alibaba/" class="md-nav__link">
  828. <span class="md-ellipsis">
  829. Alibaba Cloud
  830. </span>
  831. </a>
  832. </li>
  833. <li class="md-nav__item">
  834. <a href="../gitlab-variables/" class="md-nav__link">
  835. <span class="md-ellipsis">
  836. GitLab Variables
  837. </span>
  838. </a>
  839. </li>
  840. <li class="md-nav__item">
  841. <a href="../oracle-vault/" class="md-nav__link">
  842. <span class="md-ellipsis">
  843. Oracle Vault
  844. </span>
  845. </a>
  846. </li>
  847. <li class="md-nav__item">
  848. <a href="../1password-automation/" class="md-nav__link">
  849. <span class="md-ellipsis">
  850. 1Password Secrets Automation
  851. </span>
  852. </a>
  853. </li>
  854. <li class="md-nav__item">
  855. <a href="../webhook/" class="md-nav__link">
  856. <span class="md-ellipsis">
  857. Webhook
  858. </span>
  859. </a>
  860. </li>
  861. <li class="md-nav__item">
  862. <a href="../fake/" class="md-nav__link">
  863. <span class="md-ellipsis">
  864. Fake
  865. </span>
  866. </a>
  867. </li>
  868. <li class="md-nav__item">
  869. <a href="../senhasegura-dsm/" class="md-nav__link">
  870. <span class="md-ellipsis">
  871. senhasegura DevOps Secrets Management (DSM)
  872. </span>
  873. </a>
  874. </li>
  875. <li class="md-nav__item">
  876. <a href="../doppler/" class="md-nav__link">
  877. <span class="md-ellipsis">
  878. Doppler
  879. </span>
  880. </a>
  881. </li>
  882. <li class="md-nav__item">
  883. <a href="../keeper-security/" class="md-nav__link">
  884. <span class="md-ellipsis">
  885. Keeper Security
  886. </span>
  887. </a>
  888. </li>
  889. <li class="md-nav__item">
  890. <a href="../cloak/" class="md-nav__link">
  891. <span class="md-ellipsis">
  892. Cloak End 2 End Encrypted Secrets
  893. </span>
  894. </a>
  895. </li>
  896. <li class="md-nav__item">
  897. <a href="../scaleway/" class="md-nav__link">
  898. <span class="md-ellipsis">
  899. Scaleway
  900. </span>
  901. </a>
  902. </li>
  903. <li class="md-nav__item">
  904. <a href="../delinea/" class="md-nav__link">
  905. <span class="md-ellipsis">
  906. Delinea
  907. </span>
  908. </a>
  909. </li>
  910. <li class="md-nav__item">
  911. <a href="../secretserver/" class="md-nav__link">
  912. <span class="md-ellipsis">
  913. Secret Server
  914. </span>
  915. </a>
  916. </li>
  917. <li class="md-nav__item">
  918. <a href="../passbolt/" class="md-nav__link">
  919. <span class="md-ellipsis">
  920. Passbolt
  921. </span>
  922. </a>
  923. </li>
  924. <li class="md-nav__item">
  925. <a href="../pulumi/" class="md-nav__link">
  926. <span class="md-ellipsis">
  927. Pulumi ESC
  928. </span>
  929. </a>
  930. </li>
  931. <li class="md-nav__item">
  932. <a href="../onboardbase/" class="md-nav__link">
  933. <span class="md-ellipsis">
  934. Onboardbase
  935. </span>
  936. </a>
  937. </li>
  938. <li class="md-nav__item">
  939. <a href="../../provider-passworddepot/" class="md-nav__link">
  940. <span class="md-ellipsis">
  941. Password Depot
  942. </span>
  943. </a>
  944. </li>
  945. <li class="md-nav__item">
  946. <a href="../fortanix/" class="md-nav__link">
  947. <span class="md-ellipsis">
  948. Fortanix
  949. </span>
  950. </a>
  951. </li>
  952. <li class="md-nav__item">
  953. <a href="../infisical/" class="md-nav__link">
  954. <span class="md-ellipsis">
  955. Infisical
  956. </span>
  957. </a>
  958. </li>
  959. <li class="md-nav__item">
  960. <a href="../previder/" class="md-nav__link">
  961. <span class="md-ellipsis">
  962. Previder
  963. </span>
  964. </a>
  965. </li>
  966. </ul>
  967. </nav>
  968. </li>
  969. <li class="md-nav__item md-nav__item--nested">
  970. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_5" >
  971. <label class="md-nav__link" for="__nav_5" id="__nav_5_label" tabindex="0">
  972. <span class="md-ellipsis">
  973. Examples
  974. </span>
  975. <span class="md-nav__icon md-icon"></span>
  976. </label>
  977. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_5_label" aria-expanded="false">
  978. <label class="md-nav__title" for="__nav_5">
  979. <span class="md-nav__icon md-icon"></span>
  980. Examples
  981. </label>
  982. <ul class="md-nav__list" data-md-scrollfix>
  983. <li class="md-nav__item">
  984. <a href="../../examples/gitops-using-fluxcd/" class="md-nav__link">
  985. <span class="md-ellipsis">
  986. FluxCD
  987. </span>
  988. </a>
  989. </li>
  990. <li class="md-nav__item">
  991. <a href="../../examples/anchore-engine-credentials/" class="md-nav__link">
  992. <span class="md-ellipsis">
  993. Anchore Engine
  994. </span>
  995. </a>
  996. </li>
  997. <li class="md-nav__item">
  998. <a href="../../examples/jenkins-kubernetes-credentials/" class="md-nav__link">
  999. <span class="md-ellipsis">
  1000. Jenkins
  1001. </span>
  1002. </a>
  1003. </li>
  1004. <li class="md-nav__item">
  1005. <a href="../../examples/bitwarden/" class="md-nav__link">
  1006. <span class="md-ellipsis">
  1007. BitWarden
  1008. </span>
  1009. </a>
  1010. </li>
  1011. </ul>
  1012. </nav>
  1013. </li>
  1014. <li class="md-nav__item md-nav__item--nested">
  1015. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6" >
  1016. <label class="md-nav__link" for="__nav_6" id="__nav_6_label" tabindex="0">
  1017. <span class="md-ellipsis">
  1018. Community
  1019. </span>
  1020. <span class="md-nav__icon md-icon"></span>
  1021. </label>
  1022. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_6_label" aria-expanded="false">
  1023. <label class="md-nav__title" for="__nav_6">
  1024. <span class="md-nav__icon md-icon"></span>
  1025. Community
  1026. </label>
  1027. <ul class="md-nav__list" data-md-scrollfix>
  1028. <li class="md-nav__item md-nav__item--nested">
  1029. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6_1" >
  1030. <label class="md-nav__link" for="__nav_6_1" id="__nav_6_1_label" tabindex="0">
  1031. <span class="md-ellipsis">
  1032. Contributing
  1033. </span>
  1034. <span class="md-nav__icon md-icon"></span>
  1035. </label>
  1036. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_1_label" aria-expanded="false">
  1037. <label class="md-nav__title" for="__nav_6_1">
  1038. <span class="md-nav__icon md-icon"></span>
  1039. Contributing
  1040. </label>
  1041. <ul class="md-nav__list" data-md-scrollfix>
  1042. <li class="md-nav__item">
  1043. <a href="../../contributing/devguide/" class="md-nav__link">
  1044. <span class="md-ellipsis">
  1045. Developer guide
  1046. </span>
  1047. </a>
  1048. </li>
  1049. <li class="md-nav__item">
  1050. <a href="../../contributing/process/" class="md-nav__link">
  1051. <span class="md-ellipsis">
  1052. Contributing Process
  1053. </span>
  1054. </a>
  1055. </li>
  1056. <li class="md-nav__item">
  1057. <a href="../../contributing/release/" class="md-nav__link">
  1058. <span class="md-ellipsis">
  1059. Release Process
  1060. </span>
  1061. </a>
  1062. </li>
  1063. <li class="md-nav__item">
  1064. <a href="../../contributing/coc/" class="md-nav__link">
  1065. <span class="md-ellipsis">
  1066. Code of Conduct
  1067. </span>
  1068. </a>
  1069. </li>
  1070. <li class="md-nav__item">
  1071. <a href="../../contributing/roadmap/" class="md-nav__link">
  1072. <span class="md-ellipsis">
  1073. Roadmap
  1074. </span>
  1075. </a>
  1076. </li>
  1077. </ul>
  1078. </nav>
  1079. </li>
  1080. <li class="md-nav__item md-nav__item--nested">
  1081. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6_2" >
  1082. <label class="md-nav__link" for="__nav_6_2" id="__nav_6_2_label" tabindex="0">
  1083. <span class="md-ellipsis">
  1084. External Resources
  1085. </span>
  1086. <span class="md-nav__icon md-icon"></span>
  1087. </label>
  1088. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_2_label" aria-expanded="false">
  1089. <label class="md-nav__title" for="__nav_6_2">
  1090. <span class="md-nav__icon md-icon"></span>
  1091. External Resources
  1092. </label>
  1093. <ul class="md-nav__list" data-md-scrollfix>
  1094. <li class="md-nav__item">
  1095. <a href="../../eso-talks/" class="md-nav__link">
  1096. <span class="md-ellipsis">
  1097. Talks
  1098. </span>
  1099. </a>
  1100. </li>
  1101. <li class="md-nav__item">
  1102. <a href="../../eso-demos/" class="md-nav__link">
  1103. <span class="md-ellipsis">
  1104. Demos
  1105. </span>
  1106. </a>
  1107. </li>
  1108. <li class="md-nav__item">
  1109. <a href="../../eso-blogs/" class="md-nav__link">
  1110. <span class="md-ellipsis">
  1111. Blogs
  1112. </span>
  1113. </a>
  1114. </li>
  1115. <li class="md-nav__item">
  1116. <a href="../../eso-tools/" class="md-nav__link">
  1117. <span class="md-ellipsis">
  1118. Tools
  1119. </span>
  1120. </a>
  1121. </li>
  1122. </ul>
  1123. </nav>
  1124. </li>
  1125. </ul>
  1126. </nav>
  1127. </li>
  1128. </ul>
  1129. </nav>
  1130. </div>
  1131. </div>
  1132. </div>
  1133. <div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" >
  1134. <div class="md-sidebar__scrollwrap">
  1135. <div class="md-sidebar__inner">
  1136. <nav class="md-nav md-nav--secondary" aria-label="Table of contents">
  1137. <label class="md-nav__title" for="__toc">
  1138. <span class="md-nav__icon md-icon"></span>
  1139. Table of contents
  1140. </label>
  1141. <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
  1142. <li class="md-nav__item">
  1143. <a href="#beyondtrust-password-safe" class="md-nav__link">
  1144. <span class="md-ellipsis">
  1145. BeyondTrust Password Safe
  1146. </span>
  1147. </a>
  1148. <nav class="md-nav" aria-label="BeyondTrust Password Safe">
  1149. <ul class="md-nav__list">
  1150. <li class="md-nav__item">
  1151. <a href="#prerequisites" class="md-nav__link">
  1152. <span class="md-ellipsis">
  1153. Prerequisites
  1154. </span>
  1155. </a>
  1156. </li>
  1157. <li class="md-nav__item">
  1158. <a href="#authentication" class="md-nav__link">
  1159. <span class="md-ellipsis">
  1160. Authentication
  1161. </span>
  1162. </a>
  1163. </li>
  1164. <li class="md-nav__item">
  1165. <a href="#client-certificate" class="md-nav__link">
  1166. <span class="md-ellipsis">
  1167. Client Certificate
  1168. </span>
  1169. </a>
  1170. </li>
  1171. <li class="md-nav__item">
  1172. <a href="#creating-a-secretstore" class="md-nav__link">
  1173. <span class="md-ellipsis">
  1174. Creating a SecretStore
  1175. </span>
  1176. </a>
  1177. </li>
  1178. <li class="md-nav__item">
  1179. <a href="#creating-an-externalsecret" class="md-nav__link">
  1180. <span class="md-ellipsis">
  1181. Creating an ExternalSecret
  1182. </span>
  1183. </a>
  1184. </li>
  1185. <li class="md-nav__item">
  1186. <a href="#get-the-k8s-secret" class="md-nav__link">
  1187. <span class="md-ellipsis">
  1188. Get the K8s secret
  1189. </span>
  1190. </a>
  1191. </li>
  1192. </ul>
  1193. </nav>
  1194. </li>
  1195. </ul>
  1196. </nav>
  1197. </div>
  1198. </div>
  1199. </div>
  1200. <div class="md-content" data-md-component="content">
  1201. <article class="md-content__inner md-typeset">
  1202. <h1>BeyondTrust</h1>
  1203. <h2 id="beyondtrust-password-safe">BeyondTrust Password Safe</h2>
  1204. <p>External Secrets Operator integrates with <a href="https://www.beyondtrust.com/docs/beyondinsight-password-safe/">BeyondTrust Password Safe</a>.</p>
  1205. <p>Warning: The External Secrets Operator secure usage involves taking several measures. Please see <a href="https://external-secrets.io/latest/guides/security-best-practices/">Security Best Practices</a> for more information.</p>
  1206. <p>Warning: If the BT provider secret is deleted it will still exist in the Kubernetes secrets.</p>
  1207. <h3 id="prerequisites">Prerequisites</h3>
  1208. <p>The BT provider supports retrieval of a secret from BeyondInsight/Password Safe versions 23.1 or greater.</p>
  1209. <p>For this provider to retrieve a secret the Password Safe/Secrets Safe instance must be preconfigured with the secret in question and authorized to read it.</p>
  1210. <h3 id="authentication">Authentication</h3>
  1211. <p>BeyondTrust <a href="https://www.beyondtrust.com/docs/beyondinsight-password-safe/ps/admin/configure-api-registration.htm">OAuth Authentication</a>.</p>
  1212. <ol>
  1213. <li>Create an API access registration in BeyondInsight</li>
  1214. <li>Create or use an existing Secrets Safe Group</li>
  1215. <li>Create or use an existing Application User</li>
  1216. <li>Add API registration to the Application user</li>
  1217. <li>Add the user to the group</li>
  1218. <li>Add the Secrets Safe Feature to the group</li>
  1219. </ol>
  1220. <blockquote>
  1221. <p>NOTE: The ClientID and ClientSecret must be stored in a Kubernetes secret in order for the SecretStore to read the configuration.</p>
  1222. </blockquote>
  1223. <p>If you're using client credentials authentication:
  1224. <div class="highlight"><pre><span></span><code>kubectl<span class="w"> </span>create<span class="w"> </span>secret<span class="w"> </span>generic<span class="w"> </span>bt-secret<span class="w"> </span>--from-literal<span class="w"> </span><span class="nv">ClientSecret</span><span class="o">=</span><span class="s2">&quot;&lt;your secret&gt;&quot;</span>
  1225. kubectl<span class="w"> </span>create<span class="w"> </span>secret<span class="w"> </span>generic<span class="w"> </span>bt-id<span class="w"> </span>--from-literal<span class="w"> </span><span class="nv">ClientId</span><span class="o">=</span><span class="s2">&quot;&lt;your ID&gt;&quot;</span>
  1226. </code></pre></div></p>
  1227. <p>If you're using API Key authentication:
  1228. <div class="highlight"><pre><span></span><code>kubectl<span class="w"> </span>create<span class="w"> </span>secret<span class="w"> </span>generic<span class="w"> </span>bt-apikey<span class="w"> </span>--from-literal<span class="w"> </span><span class="nv">ApiKey</span><span class="o">=</span><span class="s2">&quot;&lt;your apikey&gt;&quot;</span>
  1229. </code></pre></div></p>
  1230. <h3 id="client-certificate">Client Certificate</h3>
  1231. <p>If using <code>retrievalType: MANAGED_ACCOUNT</code>, you will also need to download the pfx certificate from Secrets Safe, extract that certificate and create two Kubernetes secrets.</p>
  1232. <div class="highlight"><pre><span></span><code>openssl<span class="w"> </span>pkcs12<span class="w"> </span>-in<span class="w"> </span>client_certificate.pfx<span class="w"> </span>-nocerts<span class="w"> </span>-out<span class="w"> </span>ps_key.pem<span class="w"> </span>-nodes
  1233. openssl<span class="w"> </span>pkcs12<span class="w"> </span>-in<span class="w"> </span>client_certificate.pfx<span class="w"> </span>-clcerts<span class="w"> </span>-nokeys<span class="w"> </span>-out<span class="w"> </span>ps_cert.pem
  1234. <span class="c1"># Copy the text from the ps_key.pem to a file.</span>
  1235. -----BEGIN<span class="w"> </span>PRIVATE<span class="w"> </span>KEY-----
  1236. ...
  1237. -----END<span class="w"> </span>PRIVATE<span class="w"> </span>KEY-----
  1238. <span class="c1"># Copy the text from the ps_cert.pem to a file.</span>
  1239. -----BEGIN<span class="w"> </span>CERTIFICATE-----
  1240. ...
  1241. -----END<span class="w"> </span>CERTIFICATE-----
  1242. kubectl<span class="w"> </span>create<span class="w"> </span>secret<span class="w"> </span>generic<span class="w"> </span>bt-certificate<span class="w"> </span>--from-file<span class="o">=</span><span class="nv">ClientCertificate</span><span class="o">=</span>./ps_cert.pem
  1243. kubectl<span class="w"> </span>create<span class="w"> </span>secret<span class="w"> </span>generic<span class="w"> </span>bt-certificatekey<span class="w"> </span>--from-file<span class="o">=</span><span class="nv">ClientCertificateKey</span><span class="o">=</span>./ps_key.pem
  1244. </code></pre></div>
  1245. <h3 id="creating-a-secretstore">Creating a SecretStore</h3>
  1246. <p>You can follow the below example to create a <code>SecretStore</code> resource.
  1247. You can also use a <code>ClusterSecretStore</code> allowing you to reference secrets from all namespaces. <a href="https://external-secrets.io/latest/api/clustersecretstore/">ClusterSecretStore</a></p>
  1248. <div class="highlight"><pre><span></span><code>kubectl<span class="w"> </span>apply<span class="w"> </span>-f<span class="w"> </span>secret-store.yml
  1249. </code></pre></div>
  1250. <div class="highlight"><pre><span></span><code><span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">external-secrets.io/v1beta1</span>
  1251. <span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">SecretStore</span>
  1252. <span class="nt">metadata</span><span class="p">:</span>
  1253. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">secretstore-beyondtrust</span>
  1254. <span class="nt">spec</span><span class="p">:</span>
  1255. <span class="w"> </span><span class="nt">provider</span><span class="p">:</span>
  1256. <span class="w"> </span><span class="nt">beyondtrust</span><span class="p">:</span>
  1257. <span class="w"> </span><span class="nt">server</span><span class="p">:</span>
  1258. <span class="w"> </span><span class="nt">apiUrl</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://example.com:443/BeyondTrust/api/public/v3/</span>
  1259. <span class="w"> </span><span class="nt">retrievalType</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">MANAGED_ACCOUNT</span><span class="w"> </span><span class="c1"># or SECRET</span>
  1260. <span class="w"> </span><span class="nt">verifyCA</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
  1261. <span class="w"> </span><span class="nt">clientTimeOutSeconds</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">45</span>
  1262. <span class="w"> </span><span class="nt">auth</span><span class="p">:</span><span class="w"> </span>
  1263. <span class="w"> </span><span class="nt">certificate</span><span class="p">:</span><span class="w"> </span><span class="c1"># omit certificates if retrievalType is SECRET</span>
  1264. <span class="w"> </span><span class="nt">secretRef</span><span class="p">:</span>
  1265. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">bt-certificate</span>
  1266. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ClientCertificate</span>
  1267. <span class="w"> </span><span class="nt">certificateKey</span><span class="p">:</span>
  1268. <span class="w"> </span><span class="nt">secretRef</span><span class="p">:</span>
  1269. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">bt-certificatekey</span>
  1270. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ClientCertificateKey</span>
  1271. <span class="w"> </span><span class="nt">clientSecret</span><span class="p">:</span><span class="w"> </span><span class="c1"># define this section if using client credentials authentication</span>
  1272. <span class="w"> </span><span class="nt">secretRef</span><span class="p">:</span>
  1273. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">bt-secret</span>
  1274. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ClientSecret</span>
  1275. <span class="w"> </span><span class="nt">clientId</span><span class="p">:</span><span class="w"> </span><span class="c1"># define this section if using client credentials authentication</span>
  1276. <span class="w"> </span><span class="nt">secretRef</span><span class="p">:</span>
  1277. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">bt-id</span>
  1278. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ClientId</span>
  1279. <span class="w"> </span><span class="nt">apiKey</span><span class="p">:</span><span class="w"> </span><span class="c1"># define this section if using Api Key authentication</span>
  1280. <span class="w"> </span><span class="nt">secretRef</span><span class="p">:</span>
  1281. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">bt-apikey</span>
  1282. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ApiKey</span>
  1283. </code></pre></div>
  1284. <h3 id="creating-an-externalsecret">Creating an ExternalSecret</h3>
  1285. <p>You can follow the below example to create a <code>ExternalSecret</code> resource. Secrets can be referenced by path.
  1286. You can also use a <code>ClusterExternalSecret</code> allowing you to reference secrets from all namespaces.</p>
  1287. <div class="highlight"><pre><span></span><code>kubectl<span class="w"> </span>apply<span class="w"> </span>-f<span class="w"> </span>external-secret.yml
  1288. </code></pre></div>
  1289. <div class="highlight"><pre><span></span><code><span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">external-secrets.io/v1beta1</span>
  1290. <span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ExternalSecret</span>
  1291. <span class="nt">metadata</span><span class="p">:</span>
  1292. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">beyondtrust-external-secret</span>
  1293. <span class="nt">spec</span><span class="p">:</span>
  1294. <span class="w"> </span><span class="nt">refreshInterval</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1h</span>
  1295. <span class="w"> </span><span class="nt">secretStoreRef</span><span class="p">:</span>
  1296. <span class="w"> </span><span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">SecretStore</span>
  1297. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">secretstore-beyondtrust</span>
  1298. <span class="w"> </span><span class="nt">target</span><span class="p">:</span>
  1299. <span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-beyondtrust-secret</span><span class="w"> </span><span class="c1"># name of secret to create in k8s secrets (etcd)</span>
  1300. <span class="w"> </span><span class="nt">creationPolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Owner</span>
  1301. <span class="w"> </span><span class="nt">data</span><span class="p">:</span>
  1302. <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">secretKey</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">secretKey</span>
  1303. <span class="w"> </span><span class="nt">remoteRef</span><span class="p">:</span>
  1304. <span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">system01/managed_account01</span>
  1305. </code></pre></div>
  1306. <h3 id="get-the-k8s-secret">Get the K8s secret</h3>
  1307. <div class="highlight"><pre><span></span><code><span class="c1"># WARNING: this command will reveal the stored secret in plain text</span>
  1308. kubectl<span class="w"> </span>get<span class="w"> </span>secret<span class="w"> </span>my-beyondtrust-secret<span class="w"> </span>-o<span class="w"> </span><span class="nv">jsonpath</span><span class="o">=</span><span class="s2">&quot;{.data.secretKey}&quot;</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>base64<span class="w"> </span>--decode<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="nb">echo</span>
  1309. </code></pre></div>
  1310. </article>
  1311. </div>
  1312. <script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
  1313. </div>
  1314. </main>
  1315. <img referrerpolicy="no-referrer-when-downgrade" src="https://static.scarf.sh/a.png?x-pxid=6658a9eb-067d-49f1-94f2-b8b00f21451e" />
  1316. <footer class="md-footer">
  1317. <div class="md-footer-meta md-typeset">
  1318. <div class="md-footer-meta__inner md-grid">
  1319. <div class="md-copyright">
  1320. <div class="md-copyright__highlight">
  1321. &copy; 2024 The external-secrets Authors.<br/>
  1322. &copy; 2024 The Linux Foundation. All rights reserved.<br/><br/>
  1323. The Linux Foundation has registered trademarks and uses trademarks.<br/>
  1324. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage/">Trademark Usage page</a>.
  1325. </div>
  1326. Made with
  1327. <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
  1328. Material for MkDocs
  1329. </a>
  1330. </div>
  1331. </div>
  1332. </div>
  1333. </footer>
  1334. </div>
  1335. <div class="md-dialog" data-md-component="dialog">
  1336. <div class="md-dialog__inner md-typeset"></div>
  1337. </div>
  1338. <script id="__config" type="application/json">{"base": "../..", "features": ["navigation.tabs", "navigation.indexes", "navigation.expand"], "search": "../../assets/javascripts/workers/search.6ce7567c.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"provider": "mike"}}</script>
  1339. <script src="../../assets/javascripts/bundle.83f73b43.min.js"></script>
  1340. </body>
  1341. </html>