clusterexternalsecret-v1.yaml 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120
  1. apiVersion: external-secrets.io/v1
  2. kind: ClusterExternalSecret
  3. metadata: {}
  4. spec:
  5. externalSecretMetadata:
  6. annotations: {}
  7. labels: {}
  8. externalSecretName: string
  9. externalSecretSpec:
  10. data:
  11. - remoteRef:
  12. conversionStrategy: "Default"
  13. decodingStrategy: "None"
  14. key: string
  15. metadataPolicy: "None"
  16. property: string
  17. version: string
  18. secretKey: string
  19. sourceRef:
  20. generatorRef:
  21. apiVersion: external-secrets.io/v1
  22. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  23. name: string
  24. storeRef:
  25. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  26. name: string
  27. dataFrom:
  28. - extract:
  29. conversionStrategy: "Default"
  30. decodingStrategy: "None"
  31. key: string
  32. metadataPolicy: "None"
  33. property: string
  34. version: string
  35. find:
  36. conversionStrategy: "Default"
  37. decodingStrategy: "None"
  38. name:
  39. regexp: string
  40. path: string
  41. tags: {}
  42. rewrite:
  43. - merge:
  44. conflictPolicy: "Error"
  45. into: ""
  46. priority: [] # minItems 0 of type string
  47. priorityPolicy: "Strict"
  48. strategy: "Extract"
  49. regexp:
  50. source: string
  51. target: string
  52. transform:
  53. template: string
  54. sourceRef:
  55. generatorRef:
  56. apiVersion: external-secrets.io/v1
  57. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  58. name: string
  59. storeRef:
  60. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  61. name: string
  62. refreshInterval: "1h0m0s"
  63. refreshPolicy: "CreatedOnce" # "CreatedOnce", "Periodic", "OnChange"
  64. secretStoreRef:
  65. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  66. name: string
  67. target:
  68. creationPolicy: "Owner"
  69. deletionPolicy: "Retain"
  70. immutable: true
  71. manifest:
  72. apiVersion: external-secrets.io/v1
  73. kind: string
  74. name: string
  75. template:
  76. data: {}
  77. engineVersion: "v2"
  78. mergePolicy: "Replace"
  79. metadata:
  80. annotations: {}
  81. finalizers: [] # minItems 0 of type string
  82. labels: {}
  83. templateFrom:
  84. - configMap:
  85. items:
  86. - key: string
  87. templateAs: "Values"
  88. name: string
  89. literal: string
  90. secret:
  91. items:
  92. - key: string
  93. templateAs: "Values"
  94. name: string
  95. target: "Data"
  96. type: string
  97. namespaceSelector:
  98. matchExpressions:
  99. - key: string
  100. operator: string
  101. values: [] # minItems 0 of type string
  102. matchLabels: {}
  103. namespaceSelectors:
  104. - matchExpressions:
  105. - key: string
  106. operator: string
  107. values: [] # minItems 0 of type string
  108. matchLabels: {}
  109. namespaces: [] # minItems 0 of type string
  110. refreshTime: string
  111. status:
  112. conditions:
  113. - message: string
  114. status: string
  115. type: string
  116. externalSecretName: string
  117. failedNamespaces:
  118. - namespace: string
  119. reason: string
  120. provisionedNamespaces: [] # minItems 0 of type string