external-secrets.io_externalsecrets.yaml 6.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169
  1. ---
  2. apiVersion: apiextensions.k8s.io/v1
  3. kind: CustomResourceDefinition
  4. metadata:
  5. annotations:
  6. controller-gen.kubebuilder.io/version: v0.4.1
  7. creationTimestamp: null
  8. name: externalsecrets.external-secrets.io
  9. spec:
  10. group: external-secrets.io
  11. names:
  12. kind: ExternalSecret
  13. listKind: ExternalSecretList
  14. plural: externalsecrets
  15. singular: externalsecret
  16. scope: Namespaced
  17. versions:
  18. - name: v1alpha1
  19. schema:
  20. openAPIV3Schema:
  21. description: ExternalSecret is the Schema for the externalsecrets API
  22. properties:
  23. apiVersion:
  24. description: 'APIVersion defines the versioned schema of this representation
  25. of an object. Servers should convert recognized schemas to the latest
  26. internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  27. type: string
  28. kind:
  29. description: 'Kind is a string value representing the REST resource this
  30. object represents. Servers may infer this from the endpoint the client
  31. submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  32. type: string
  33. metadata:
  34. type: object
  35. spec:
  36. description: ExternalSecretSpec defines the desired state of ExternalSecret
  37. properties:
  38. data:
  39. description: Data defines the connection between the Kubernetes Secret
  40. keys and the Provider data
  41. items:
  42. description: ExternalSecretData defines the connection between the
  43. Kubernetes Secret key (spec.data.<key>) and the Provider data
  44. properties:
  45. remoteRef:
  46. description: ExternalSecretDataRemoteRef defines Provider data
  47. location
  48. properties:
  49. key:
  50. description: Key is the key used in the Provider, mandatory
  51. type: string
  52. property:
  53. description: Used to select a specific property of the Provider
  54. value (if a map), if supported
  55. type: string
  56. version:
  57. description: Used to select a specific version of the Provider
  58. value, if supported
  59. type: string
  60. required:
  61. - key
  62. type: object
  63. secretKey:
  64. type: string
  65. required:
  66. - remoteRef
  67. - secretKey
  68. type: object
  69. type: array
  70. dataFrom:
  71. description: DataFrom is used to fetch all properties from a specific
  72. Provider data If multiple entries are specified, the Secret keys
  73. are merged in the specified order
  74. items:
  75. description: ExternalSecretDataRemoteRef defines Provider data location
  76. properties:
  77. key:
  78. description: Key is the key used in the Provider, mandatory
  79. type: string
  80. property:
  81. description: Used to select a specific property of the Provider
  82. value (if a map), if supported
  83. type: string
  84. version:
  85. description: Used to select a specific version of the Provider
  86. value, if supported
  87. type: string
  88. required:
  89. - key
  90. type: object
  91. type: array
  92. refreshInterval:
  93. description: 'RefreshInterval is the amount of time before the values
  94. reading again from the SecretStore provider Valid time units are
  95. "ns", "us" (or "µs"), "ms", "s", "m", "h" (from time.ParseDuration)
  96. May be set to zero to fetch and create it once TODO: Default to
  97. some value?'
  98. type: string
  99. secretStoreRef:
  100. description: SecretStoreRef defines which SecretStore to fetch the
  101. ExternalSecret data
  102. properties:
  103. kind:
  104. description: Kind of the SecretStore resource (SecretStore or
  105. ClusterSecretStore) Defaults to `SecretStore`
  106. type: string
  107. name:
  108. description: Name of the SecretStore resource
  109. type: string
  110. required:
  111. - name
  112. type: object
  113. target:
  114. description: ExternalSecretTarget defines the Kubernetes Secret to
  115. be created There can be only one target per ExternalSecret
  116. properties:
  117. creationPolicy:
  118. description: CreationPolicy defines rules on how to create the
  119. resulting Secret Defaults to 'Owner'
  120. type: string
  121. name:
  122. description: Name defines the name of the Secret resource to be
  123. managed This field is immutable Defaults to the .metadata.name
  124. of the ExternalSecret resource
  125. type: string
  126. type: object
  127. required:
  128. - secretStoreRef
  129. - target
  130. type: object
  131. status:
  132. properties:
  133. conditions:
  134. items:
  135. properties:
  136. lastSyncTime:
  137. format: date-time
  138. type: string
  139. lastTransitionTime:
  140. format: date-time
  141. type: string
  142. message:
  143. type: string
  144. reason:
  145. type: string
  146. status:
  147. type: string
  148. type:
  149. type: string
  150. required:
  151. - status
  152. - type
  153. type: object
  154. type: array
  155. phase:
  156. description: ExternalSecretStatusPhase represents the current phase
  157. of the Secret sync
  158. type: string
  159. type: object
  160. type: object
  161. served: true
  162. storage: true
  163. status:
  164. acceptedNames:
  165. kind: ""
  166. plural: ""
  167. conditions: []
  168. storedVersions: []