index.html 247 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238323932403241324232433244324532463247324832493250325132523253325432553256325732583259326032613262326332643265326632673268326932703271327232733274327532763277327832793280328132823283328432853286328732883289329032913292329332943295329632973298329933003301330233033304330533063307330833093310331133123313331433153316331733183319332033213322332333243325332633273328332933303331333233333334333533363337333833393340334133423343334433453346334733483349335033513352335333543355335633573358335933603361336233633364336533663367336833693370337133723373337433753376337733783379338033813382338333843385338633873388338933903391339233933394339533963397339833993400340134023403340434053406340734083409341034113412341334143415341634173418341934203421342234233424342534263427342834293430343134323433343434353436343734383439344034413442344334443445344634473448344934503451345234533454345534563457345834593460346134623463346434653466346734683469347034713472347334743475347634773478347934803481348234833484348534863487348834893490349134923493349434953496349734983499350035013502350335043505350635073508350935103511351235133514351535163517351835193520352135223523352435253526352735283529353035313532353335343535353635373538353935403541354235433544354535463547354835493550355135523553355435553556355735583559356035613562356335643565356635673568356935703571357235733574357535763577357835793580358135823583358435853586358735883589359035913592359335943595359635973598359936003601360236033604360536063607360836093610361136123613361436153616361736183619362036213622362336243625362636273628362936303631363236333634363536363637363836393640364136423643364436453646364736483649365036513652365336543655365636573658365936603661366236633664366536663667366836693670367136723673367436753676367736783679368036813682368336843685368636873688368936903691369236933694369536963697369836993700370137023703370437053706370737083709371037113712371337143715371637173718371937203721372237233724372537263727372837293730373137323733373437353736373737383739374037413742374337443745374637473748374937503751375237533754375537563757375837593760376137623763376437653766376737683769377037713772377337743775377637773778377937803781378237833784378537863787378837893790379137923793379437953796379737983799380038013802380338043805380638073808380938103811381238133814381538163817381838193820382138223823382438253826382738283829383038313832383338343835383638373838383938403841384238433844384538463847384838493850385138523853385438553856385738583859386038613862386338643865386638673868386938703871387238733874387538763877387838793880388138823883388438853886388738883889389038913892389338943895389638973898389939003901390239033904390539063907390839093910391139123913391439153916391739183919392039213922392339243925392639273928392939303931393239333934393539363937393839393940394139423943394439453946394739483949395039513952395339543955395639573958395939603961396239633964396539663967396839693970397139723973397439753976397739783979398039813982398339843985398639873988398939903991399239933994399539963997399839994000400140024003400440054006400740084009401040114012401340144015401640174018401940204021402240234024402540264027402840294030403140324033403440354036403740384039404040414042404340444045404640474048404940504051405240534054405540564057405840594060406140624063406440654066406740684069407040714072407340744075407640774078407940804081408240834084408540864087408840894090409140924093409440954096409740984099410041014102410341044105410641074108410941104111411241134114411541164117411841194120412141224123412441254126412741284129413041314132413341344135413641374138413941404141414241434144414541464147414841494150415141524153415441554156415741584159416041614162416341644165416641674168416941704171417241734174417541764177417841794180418141824183418441854186418741884189419041914192419341944195419641974198419942004201420242034204420542064207420842094210421142124213421442154216421742184219422042214222422342244225422642274228422942304231423242334234423542364237423842394240424142424243424442454246424742484249425042514252425342544255425642574258425942604261426242634264426542664267426842694270427142724273427442754276427742784279428042814282428342844285428642874288428942904291429242934294429542964297429842994300430143024303430443054306430743084309431043114312431343144315431643174318431943204321432243234324432543264327432843294330433143324333433443354336433743384339434043414342434343444345434643474348434943504351435243534354435543564357435843594360436143624363436443654366436743684369437043714372437343744375437643774378437943804381438243834384438543864387438843894390439143924393439443954396439743984399440044014402440344044405440644074408440944104411441244134414441544164417441844194420442144224423442444254426442744284429443044314432443344344435443644374438443944404441444244434444444544464447444844494450445144524453445444554456445744584459446044614462446344644465446644674468446944704471447244734474447544764477447844794480448144824483448444854486448744884489449044914492449344944495449644974498449945004501450245034504450545064507450845094510451145124513451445154516451745184519452045214522452345244525452645274528452945304531453245334534453545364537453845394540454145424543454445454546454745484549455045514552455345544555455645574558455945604561456245634564456545664567456845694570457145724573457445754576457745784579458045814582458345844585458645874588458945904591459245934594459545964597459845994600460146024603460446054606460746084609461046114612461346144615461646174618461946204621462246234624462546264627462846294630463146324633463446354636463746384639464046414642464346444645464646474648464946504651465246534654465546564657465846594660466146624663466446654666466746684669467046714672467346744675467646774678467946804681468246834684468546864687468846894690469146924693469446954696469746984699470047014702470347044705470647074708470947104711471247134714471547164717471847194720472147224723472447254726472747284729473047314732473347344735473647374738473947404741474247434744474547464747474847494750475147524753475447554756475747584759476047614762476347644765476647674768476947704771477247734774477547764777477847794780478147824783478447854786478747884789479047914792479347944795479647974798479948004801480248034804480548064807480848094810481148124813481448154816481748184819482048214822482348244825482648274828482948304831483248334834483548364837483848394840484148424843484448454846484748484849485048514852485348544855485648574858485948604861486248634864486548664867486848694870487148724873487448754876487748784879488048814882488348844885488648874888488948904891489248934894489548964897489848994900490149024903490449054906490749084909491049114912491349144915491649174918491949204921492249234924492549264927492849294930493149324933493449354936493749384939494049414942494349444945494649474948494949504951495249534954495549564957495849594960496149624963496449654966496749684969497049714972497349744975497649774978497949804981498249834984498549864987498849894990499149924993499449954996499749984999500050015002500350045005500650075008500950105011501250135014501550165017501850195020502150225023502450255026502750285029503050315032503350345035503650375038503950405041504250435044504550465047504850495050505150525053505450555056505750585059506050615062506350645065506650675068506950705071507250735074507550765077507850795080508150825083508450855086508750885089509050915092509350945095509650975098509951005101510251035104510551065107510851095110511151125113511451155116511751185119512051215122512351245125512651275128512951305131513251335134513551365137513851395140514151425143514451455146514751485149515051515152515351545155515651575158515951605161516251635164516551665167516851695170517151725173517451755176517751785179518051815182518351845185518651875188518951905191519251935194519551965197519851995200520152025203520452055206520752085209521052115212521352145215521652175218521952205221522252235224522552265227522852295230523152325233523452355236523752385239524052415242524352445245524652475248524952505251525252535254525552565257525852595260526152625263526452655266526752685269527052715272527352745275527652775278527952805281528252835284528552865287528852895290529152925293529452955296529752985299530053015302530353045305530653075308530953105311531253135314531553165317531853195320532153225323532453255326532753285329533053315332533353345335533653375338533953405341534253435344534553465347534853495350535153525353535453555356535753585359536053615362536353645365536653675368536953705371537253735374537553765377537853795380538153825383538453855386538753885389539053915392539353945395539653975398539954005401540254035404540554065407540854095410541154125413541454155416541754185419542054215422542354245425542654275428542954305431543254335434543554365437543854395440544154425443544454455446544754485449545054515452545354545455545654575458545954605461546254635464546554665467546854695470547154725473547454755476547754785479548054815482548354845485548654875488548954905491549254935494549554965497549854995500550155025503550455055506550755085509551055115512551355145515551655175518551955205521552255235524552555265527552855295530553155325533553455355536553755385539554055415542554355445545554655475548554955505551555255535554555555565557555855595560556155625563556455655566556755685569557055715572557355745575557655775578557955805581558255835584558555865587558855895590559155925593559455955596559755985599560056015602560356045605560656075608560956105611561256135614561556165617561856195620562156225623562456255626562756285629563056315632563356345635563656375638563956405641564256435644564556465647564856495650565156525653565456555656565756585659566056615662566356645665566656675668566956705671567256735674567556765677567856795680568156825683568456855686568756885689569056915692569356945695569656975698569957005701570257035704570557065707570857095710571157125713571457155716571757185719572057215722572357245725572657275728572957305731573257335734573557365737573857395740574157425743574457455746574757485749575057515752575357545755575657575758575957605761576257635764576557665767576857695770577157725773577457755776577757785779578057815782578357845785578657875788578957905791579257935794579557965797579857995800580158025803580458055806580758085809581058115812581358145815581658175818581958205821582258235824582558265827582858295830583158325833583458355836583758385839584058415842584358445845584658475848584958505851585258535854585558565857585858595860586158625863586458655866586758685869587058715872587358745875587658775878587958805881588258835884588558865887588858895890589158925893589458955896589758985899590059015902590359045905590659075908590959105911591259135914591559165917591859195920592159225923592459255926592759285929593059315932593359345935593659375938593959405941594259435944594559465947594859495950595159525953595459555956595759585959596059615962596359645965596659675968596959705971597259735974597559765977597859795980598159825983598459855986598759885989599059915992599359945995599659975998599960006001600260036004600560066007600860096010601160126013601460156016601760186019602060216022602360246025602660276028602960306031603260336034603560366037603860396040604160426043604460456046604760486049605060516052605360546055605660576058605960606061606260636064606560666067606860696070607160726073607460756076607760786079608060816082608360846085608660876088608960906091609260936094609560966097609860996100610161026103610461056106610761086109611061116112611361146115611661176118611961206121612261236124612561266127612861296130613161326133613461356136613761386139614061416142614361446145614661476148614961506151615261536154615561566157615861596160616161626163616461656166616761686169617061716172617361746175617661776178617961806181618261836184618561866187618861896190619161926193619461956196619761986199620062016202620362046205620662076208620962106211621262136214621562166217621862196220622162226223622462256226622762286229623062316232623362346235623662376238623962406241624262436244624562466247624862496250625162526253625462556256625762586259626062616262626362646265626662676268626962706271627262736274627562766277627862796280628162826283628462856286628762886289629062916292629362946295629662976298629963006301630263036304630563066307630863096310631163126313631463156316631763186319632063216322632363246325632663276328632963306331633263336334633563366337633863396340634163426343634463456346634763486349635063516352635363546355635663576358635963606361636263636364636563666367636863696370637163726373637463756376637763786379638063816382638363846385638663876388638963906391639263936394639563966397639863996400640164026403640464056406640764086409641064116412641364146415641664176418641964206421642264236424642564266427642864296430643164326433643464356436643764386439644064416442644364446445644664476448644964506451645264536454645564566457645864596460646164626463646464656466646764686469647064716472647364746475647664776478647964806481648264836484648564866487648864896490649164926493649464956496649764986499650065016502650365046505650665076508650965106511651265136514651565166517651865196520652165226523652465256526652765286529653065316532653365346535653665376538653965406541654265436544654565466547654865496550655165526553655465556556655765586559656065616562656365646565656665676568656965706571657265736574657565766577657865796580658165826583658465856586658765886589659065916592659365946595659665976598659966006601660266036604660566066607660866096610661166126613661466156616661766186619662066216622662366246625662666276628662966306631663266336634663566366637663866396640664166426643664466456646664766486649665066516652665366546655665666576658665966606661666266636664666566666667666866696670667166726673667466756676667766786679668066816682668366846685668666876688668966906691669266936694669566966697669866996700670167026703670467056706670767086709671067116712671367146715671667176718671967206721672267236724672567266727672867296730673167326733673467356736673767386739674067416742674367446745674667476748674967506751675267536754675567566757675867596760676167626763676467656766676767686769677067716772677367746775677667776778677967806781678267836784678567866787678867896790679167926793679467956796679767986799680068016802680368046805680668076808680968106811681268136814681568166817681868196820682168226823682468256826682768286829683068316832683368346835683668376838683968406841684268436844684568466847684868496850685168526853685468556856685768586859686068616862686368646865686668676868686968706871687268736874687568766877687868796880688168826883688468856886688768886889689068916892689368946895689668976898689969006901690269036904690569066907690869096910691169126913691469156916691769186919692069216922692369246925692669276928692969306931693269336934693569366937693869396940694169426943694469456946694769486949695069516952695369546955695669576958695969606961696269636964696569666967696869696970697169726973697469756976697769786979698069816982698369846985698669876988698969906991699269936994699569966997699869997000700170027003700470057006700770087009701070117012701370147015701670177018701970207021702270237024702570267027702870297030703170327033703470357036703770387039704070417042704370447045704670477048704970507051705270537054705570567057705870597060706170627063706470657066706770687069707070717072707370747075707670777078707970807081708270837084708570867087708870897090709170927093709470957096709770987099710071017102710371047105710671077108710971107111711271137114711571167117711871197120712171227123712471257126712771287129713071317132713371347135713671377138713971407141714271437144714571467147714871497150715171527153715471557156715771587159716071617162716371647165716671677168716971707171717271737174717571767177717871797180718171827183718471857186718771887189719071917192719371947195719671977198719972007201720272037204720572067207720872097210721172127213721472157216721772187219722072217222722372247225722672277228722972307231723272337234723572367237723872397240724172427243724472457246724772487249725072517252725372547255725672577258725972607261726272637264726572667267726872697270727172727273727472757276727772787279728072817282728372847285728672877288728972907291729272937294729572967297729872997300730173027303730473057306730773087309731073117312731373147315731673177318731973207321732273237324732573267327732873297330733173327333733473357336733773387339734073417342734373447345734673477348734973507351735273537354735573567357735873597360736173627363736473657366736773687369737073717372737373747375737673777378737973807381738273837384738573867387738873897390739173927393739473957396739773987399740074017402740374047405740674077408740974107411741274137414741574167417741874197420742174227423742474257426742774287429743074317432743374347435743674377438743974407441744274437444744574467447744874497450745174527453745474557456745774587459746074617462746374647465746674677468746974707471747274737474747574767477747874797480748174827483748474857486748774887489749074917492749374947495749674977498749975007501750275037504750575067507750875097510751175127513751475157516751775187519752075217522752375247525752675277528752975307531753275337534753575367537753875397540754175427543754475457546754775487549755075517552755375547555755675577558755975607561756275637564756575667567756875697570757175727573757475757576757775787579758075817582758375847585758675877588758975907591759275937594759575967597759875997600760176027603760476057606760776087609761076117612761376147615761676177618761976207621762276237624762576267627762876297630763176327633763476357636763776387639764076417642764376447645764676477648764976507651765276537654765576567657765876597660766176627663766476657666766776687669767076717672767376747675767676777678767976807681768276837684768576867687768876897690769176927693769476957696769776987699770077017702770377047705770677077708770977107711771277137714771577167717771877197720772177227723772477257726772777287729773077317732773377347735773677377738773977407741774277437744774577467747774877497750775177527753775477557756775777587759776077617762776377647765776677677768776977707771777277737774777577767777777877797780778177827783778477857786778777887789779077917792779377947795779677977798779978007801780278037804780578067807780878097810781178127813781478157816781778187819782078217822782378247825782678277828782978307831783278337834783578367837783878397840784178427843784478457846784778487849785078517852785378547855785678577858785978607861786278637864786578667867786878697870787178727873787478757876787778787879788078817882788378847885788678877888788978907891789278937894789578967897789878997900790179027903790479057906790779087909791079117912791379147915791679177918791979207921792279237924792579267927792879297930793179327933793479357936793779387939794079417942794379447945794679477948794979507951795279537954795579567957795879597960796179627963796479657966796779687969797079717972797379747975797679777978797979807981798279837984798579867987798879897990799179927993799479957996799779987999800080018002800380048005800680078008800980108011801280138014801580168017801880198020802180228023802480258026802780288029803080318032803380348035803680378038803980408041804280438044804580468047804880498050805180528053805480558056805780588059806080618062806380648065806680678068806980708071807280738074807580768077807880798080808180828083808480858086808780888089809080918092809380948095809680978098809981008101810281038104810581068107810881098110811181128113811481158116811781188119812081218122812381248125812681278128812981308131813281338134813581368137813881398140814181428143814481458146814781488149815081518152815381548155815681578158815981608161816281638164816581668167816881698170817181728173817481758176817781788179818081818182818381848185818681878188818981908191819281938194819581968197819881998200820182028203820482058206820782088209821082118212821382148215821682178218821982208221822282238224822582268227822882298230823182328233823482358236823782388239824082418242824382448245824682478248824982508251825282538254825582568257825882598260826182628263826482658266826782688269827082718272827382748275827682778278827982808281828282838284828582868287828882898290829182928293829482958296829782988299830083018302830383048305830683078308830983108311831283138314831583168317831883198320832183228323832483258326832783288329833083318332833383348335833683378338833983408341834283438344834583468347834883498350835183528353835483558356835783588359836083618362836383648365836683678368836983708371837283738374837583768377837883798380838183828383838483858386838783888389839083918392839383948395839683978398839984008401840284038404840584068407840884098410841184128413841484158416841784188419842084218422842384248425842684278428842984308431843284338434843584368437843884398440844184428443844484458446844784488449845084518452845384548455845684578458845984608461846284638464846584668467846884698470847184728473847484758476847784788479848084818482848384848485848684878488848984908491849284938494849584968497849884998500850185028503850485058506850785088509851085118512851385148515851685178518851985208521852285238524852585268527852885298530853185328533853485358536853785388539854085418542854385448545854685478548854985508551855285538554855585568557855885598560856185628563856485658566856785688569857085718572857385748575857685778578857985808581858285838584858585868587858885898590859185928593859485958596859785988599860086018602860386048605860686078608860986108611861286138614861586168617861886198620862186228623862486258626862786288629863086318632863386348635863686378638863986408641864286438644864586468647864886498650865186528653865486558656865786588659866086618662866386648665866686678668866986708671867286738674867586768677867886798680868186828683868486858686868786888689869086918692869386948695869686978698869987008701870287038704870587068707870887098710871187128713871487158716871787188719872087218722872387248725872687278728872987308731873287338734873587368737873887398740874187428743874487458746874787488749875087518752875387548755875687578758875987608761876287638764876587668767876887698770877187728773877487758776877787788779878087818782878387848785878687878788878987908791879287938794879587968797879887998800880188028803880488058806880788088809881088118812881388148815881688178818881988208821882288238824882588268827882888298830883188328833883488358836883788388839884088418842884388448845884688478848884988508851885288538854885588568857885888598860886188628863886488658866886788688869887088718872887388748875887688778878887988808881888288838884888588868887888888898890889188928893889488958896889788988899890089018902890389048905890689078908890989108911891289138914891589168917891889198920892189228923892489258926892789288929893089318932893389348935893689378938893989408941894289438944894589468947894889498950895189528953895489558956895789588959896089618962896389648965896689678968896989708971897289738974897589768977897889798980898189828983898489858986898789888989899089918992899389948995899689978998899990009001900290039004900590069007900890099010901190129013901490159016901790189019902090219022902390249025902690279028902990309031903290339034903590369037903890399040904190429043904490459046904790489049905090519052905390549055905690579058905990609061906290639064906590669067906890699070907190729073907490759076907790789079908090819082908390849085908690879088908990909091909290939094909590969097909890999100910191029103910491059106910791089109911091119112911391149115911691179118911991209121912291239124912591269127912891299130913191329133913491359136913791389139914091419142914391449145914691479148914991509151915291539154915591569157915891599160916191629163916491659166916791689169917091719172917391749175917691779178917991809181918291839184918591869187918891899190919191929193919491959196919791989199920092019202920392049205920692079208920992109211921292139214921592169217921892199220922192229223922492259226922792289229923092319232923392349235923692379238923992409241924292439244924592469247924892499250925192529253925492559256925792589259926092619262926392649265926692679268926992709271927292739274927592769277927892799280928192829283928492859286928792889289929092919292929392949295929692979298929993009301930293039304930593069307930893099310931193129313931493159316931793189319932093219322932393249325932693279328932993309331933293339334933593369337933893399340934193429343934493459346934793489349935093519352935393549355935693579358935993609361936293639364936593669367936893699370937193729373937493759376937793789379938093819382938393849385938693879388938993909391939293939394939593969397939893999400940194029403940494059406940794089409941094119412941394149415941694179418941994209421942294239424942594269427942894299430943194329433943494359436943794389439944094419442944394449445944694479448944994509451945294539454945594569457945894599460946194629463946494659466946794689469947094719472947394749475947694779478947994809481948294839484948594869487948894899490949194929493949494959496949794989499950095019502950395049505950695079508950995109511951295139514951595169517951895199520952195229523952495259526952795289529953095319532953395349535953695379538953995409541954295439544954595469547954895499550955195529553955495559556955795589559956095619562956395649565956695679568956995709571957295739574957595769577957895799580958195829583958495859586958795889589959095919592959395949595959695979598959996009601960296039604960596069607960896099610961196129613961496159616961796189619962096219622962396249625962696279628962996309631963296339634963596369637963896399640964196429643964496459646964796489649965096519652965396549655965696579658965996609661966296639664966596669667966896699670967196729673967496759676967796789679968096819682968396849685968696879688968996909691969296939694969596969697969896999700970197029703970497059706970797089709971097119712971397149715971697179718971997209721972297239724972597269727972897299730973197329733973497359736973797389739974097419742974397449745974697479748974997509751975297539754975597569757975897599760976197629763976497659766976797689769977097719772977397749775977697779778977997809781978297839784978597869787978897899790979197929793979497959796979797989799980098019802980398049805980698079808980998109811981298139814981598169817981898199820982198229823982498259826982798289829983098319832983398349835983698379838983998409841984298439844984598469847984898499850985198529853985498559856985798589859986098619862986398649865986698679868986998709871987298739874987598769877987898799880988198829883988498859886988798889889989098919892989398949895989698979898989999009901990299039904990599069907990899099910991199129913991499159916991799189919992099219922992399249925992699279928992999309931993299339934993599369937993899399940994199429943994499459946994799489949995099519952995399549955995699579958995999609961996299639964996599669967996899699970997199729973997499759976997799789979998099819982998399849985998699879988998999909991999299939994999599969997999899991000010001100021000310004100051000610007100081000910010100111001210013100141001510016100171001810019100201002110022100231002410025100261002710028100291003010031100321003310034100351003610037100381003910040100411004210043100441004510046100471004810049100501005110052100531005410055100561005710058100591006010061100621006310064100651006610067100681006910070100711007210073100741007510076100771007810079100801008110082100831008410085100861008710088100891009010091100921009310094100951009610097100981009910100101011010210103101041010510106101071010810109101101011110112101131011410115101161011710118101191012010121101221012310124101251012610127101281012910130101311013210133101341013510136101371013810139101401014110142101431014410145101461014710148101491015010151101521015310154101551015610157101581015910160101611016210163101641016510166101671016810169101701017110172101731017410175101761017710178101791018010181101821018310184101851018610187101881018910190101911019210193101941019510196101971019810199102001020110202102031020410205102061020710208102091021010211102121021310214102151021610217102181021910220102211022210223102241022510226102271022810229102301023110232102331023410235102361023710238102391024010241102421024310244102451024610247102481024910250102511025210253102541025510256102571025810259102601026110262102631026410265102661026710268102691027010271102721027310274102751027610277102781027910280102811028210283102841028510286102871028810289102901029110292102931029410295102961029710298102991030010301103021030310304103051030610307103081030910310103111031210313103141031510316103171031810319103201032110322103231032410325103261032710328103291033010331103321033310334103351033610337103381033910340103411034210343103441034510346103471034810349103501035110352103531035410355103561035710358103591036010361103621036310364103651036610367103681036910370103711037210373103741037510376103771037810379103801038110382103831038410385103861038710388103891039010391103921039310394103951039610397103981039910400104011040210403104041040510406104071040810409104101041110412104131041410415104161041710418104191042010421104221042310424104251042610427104281042910430104311043210433104341043510436104371043810439104401044110442104431044410445104461044710448104491045010451104521045310454104551045610457104581045910460104611046210463104641046510466104671046810469104701047110472104731047410475104761047710478104791048010481104821048310484104851048610487104881048910490104911049210493104941049510496104971049810499105001050110502105031050410505105061050710508105091051010511105121051310514105151051610517105181051910520105211052210523105241052510526105271052810529105301053110532105331053410535105361053710538105391054010541105421054310544105451054610547105481054910550105511055210553105541055510556105571055810559105601056110562105631056410565105661056710568105691057010571105721057310574105751057610577105781057910580105811058210583105841058510586105871058810589105901059110592105931059410595105961059710598105991060010601106021060310604106051060610607106081060910610106111061210613106141061510616106171061810619106201062110622106231062410625106261062710628106291063010631106321063310634106351063610637106381063910640106411064210643106441064510646106471064810649106501065110652106531065410655106561065710658106591066010661106621066310664106651066610667106681066910670106711067210673106741067510676106771067810679106801068110682106831068410685106861068710688106891069010691106921069310694106951069610697106981069910700107011070210703107041070510706107071070810709107101071110712107131071410715107161071710718107191072010721107221072310724107251072610727107281072910730107311073210733107341073510736107371073810739107401074110742107431074410745107461074710748107491075010751107521075310754107551075610757107581075910760107611076210763107641076510766107671076810769107701077110772107731077410775107761077710778107791078010781107821078310784107851078610787107881078910790107911079210793107941079510796107971079810799108001080110802108031080410805108061080710808108091081010811108121081310814108151081610817108181081910820108211082210823108241082510826108271082810829108301083110832108331083410835108361083710838108391084010841108421084310844108451084610847108481084910850108511085210853108541085510856108571085810859108601086110862108631086410865108661086710868108691087010871108721087310874108751087610877108781087910880108811088210883108841088510886108871088810889108901089110892108931089410895108961089710898108991090010901109021090310904109051090610907109081090910910109111091210913109141091510916109171091810919109201092110922109231092410925109261092710928109291093010931109321093310934109351093610937109381093910940109411094210943109441094510946109471094810949109501095110952109531095410955109561095710958109591096010961109621096310964109651096610967109681096910970109711097210973109741097510976109771097810979109801098110982109831098410985109861098710988109891099010991109921099310994109951099610997109981099911000110011100211003110041100511006110071100811009110101101111012110131101411015110161101711018110191102011021110221102311024110251102611027110281102911030110311103211033110341103511036110371103811039110401104111042110431104411045110461104711048110491105011051110521105311054110551105611057110581105911060110611106211063110641106511066110671106811069110701107111072110731107411075110761107711078110791108011081110821108311084110851108611087110881108911090110911109211093110941109511096110971109811099111001110111102111031110411105111061110711108111091111011111111121111311114111151111611117111181111911120111211112211123111241112511126111271112811129111301113111132111331113411135111361113711138111391114011141111421114311144111451114611147111481114911150111511115211153111541115511156111571115811159111601116111162111631116411165111661116711168111691117011171111721117311174111751117611177111781117911180111811118211183111841118511186111871118811189111901119111192111931119411195111961119711198111991120011201112021120311204112051120611207112081120911210112111121211213112141121511216112171121811219112201122111222112231122411225112261122711228112291123011231112321123311234112351123611237112381123911240112411124211243112441124511246112471124811249112501125111252112531125411255112561125711258112591126011261112621126311264112651126611267112681126911270112711127211273112741127511276112771127811279112801128111282112831128411285112861128711288112891129011291112921129311294112951129611297112981129911300113011130211303113041130511306113071130811309113101131111312113131131411315113161131711318113191132011321113221132311324113251132611327113281132911330113311133211333113341133511336113371133811339113401134111342113431134411345113461134711348113491135011351113521135311354113551135611357113581135911360113611136211363113641136511366113671136811369113701137111372113731137411375113761137711378113791138011381113821138311384113851138611387113881138911390113911139211393113941139511396113971139811399114001140111402114031140411405114061140711408114091141011411114121141311414114151141611417114181141911420114211142211423114241142511426114271142811429114301143111432114331143411435114361143711438114391144011441114421144311444114451144611447114481144911450114511145211453114541145511456114571145811459114601146111462114631146411465114661146711468114691147011471114721147311474114751147611477114781147911480114811148211483114841148511486114871148811489114901149111492114931149411495114961149711498114991150011501115021150311504115051150611507115081150911510115111151211513115141151511516115171151811519115201152111522115231152411525115261152711528115291153011531115321153311534115351153611537115381153911540115411154211543115441154511546115471154811549115501155111552115531155411555115561155711558115591156011561115621156311564115651156611567115681156911570115711157211573115741157511576115771157811579115801158111582115831158411585115861158711588115891159011591115921159311594115951159611597115981159911600116011160211603116041160511606116071160811609116101161111612116131161411615116161161711618116191162011621116221162311624116251162611627116281162911630116311163211633116341163511636116371163811639116401164111642116431164411645116461164711648116491165011651116521165311654116551165611657116581165911660116611166211663116641166511666116671166811669116701167111672116731167411675116761167711678116791168011681116821168311684116851168611687116881168911690116911169211693116941169511696116971169811699117001170111702117031170411705117061170711708117091171011711117121171311714117151171611717117181171911720117211172211723117241172511726117271172811729117301173111732117331173411735117361173711738117391174011741117421174311744117451174611747117481174911750117511175211753117541175511756117571175811759117601176111762117631176411765117661176711768117691177011771117721177311774117751177611777117781177911780117811178211783117841178511786117871178811789117901179111792117931179411795117961179711798117991180011801118021180311804118051180611807118081180911810118111181211813118141181511816118171181811819118201182111822118231182411825118261182711828118291183011831118321183311834118351183611837118381183911840118411184211843118441184511846118471184811849118501185111852118531185411855118561185711858118591186011861118621186311864118651186611867118681186911870118711187211873118741187511876118771187811879118801188111882118831188411885118861188711888118891189011891118921189311894118951189611897118981189911900119011190211903119041190511906119071190811909119101191111912119131191411915119161191711918119191192011921119221192311924119251192611927119281192911930119311193211933119341193511936119371193811939119401194111942119431194411945119461194711948119491195011951119521195311954119551195611957119581195911960119611196211963119641196511966119671196811969119701197111972119731197411975119761197711978119791198011981119821198311984119851198611987119881198911990119911199211993119941199511996119971199811999120001200112002120031200412005120061200712008120091201012011120121201312014120151201612017120181201912020120211202212023120241202512026120271202812029120301203112032120331203412035120361203712038120391204012041120421204312044120451204612047120481204912050120511205212053120541205512056120571205812059120601206112062120631206412065120661206712068120691207012071120721207312074120751207612077120781207912080120811208212083120841208512086120871208812089120901209112092120931209412095120961209712098120991210012101121021210312104121051210612107121081210912110121111211212113121141211512116121171211812119121201212112122121231212412125121261212712128121291213012131121321213312134121351213612137121381213912140121411214212143121441214512146121471214812149121501215112152121531215412155121561215712158121591216012161121621216312164121651216612167121681216912170121711217212173121741217512176121771217812179121801218112182121831218412185121861218712188121891219012191121921219312194121951219612197121981219912200122011220212203122041220512206122071220812209122101221112212122131221412215122161221712218122191222012221122221222312224122251222612227122281222912230122311223212233122341223512236122371223812239122401224112242122431224412245122461224712248122491225012251122521225312254122551225612257122581225912260122611226212263122641226512266122671226812269122701227112272122731227412275122761227712278122791228012281122821228312284122851228612287122881228912290122911229212293122941229512296122971229812299123001230112302123031230412305123061230712308123091231012311123121231312314123151231612317123181231912320123211232212323123241232512326123271232812329123301233112332123331233412335123361233712338123391234012341123421234312344123451234612347123481234912350123511235212353123541235512356123571235812359123601236112362123631236412365123661236712368123691237012371123721237312374123751237612377123781237912380123811238212383123841238512386123871238812389123901239112392123931239412395123961239712398123991240012401124021240312404124051240612407124081240912410124111241212413124141241512416124171241812419124201242112422124231242412425124261242712428124291243012431124321243312434124351243612437124381243912440124411244212443124441244512446124471244812449124501245112452124531245412455124561245712458124591246012461124621246312464124651246612467124681246912470124711247212473124741247512476124771247812479124801248112482124831248412485124861248712488124891249012491124921249312494124951249612497124981249912500125011250212503125041250512506125071250812509125101251112512125131251412515125161251712518125191252012521125221252312524125251252612527125281252912530125311253212533125341253512536125371253812539125401254112542125431254412545125461254712548125491255012551125521255312554125551255612557125581255912560125611256212563125641256512566125671256812569125701257112572125731257412575125761257712578125791258012581125821258312584125851258612587125881258912590125911259212593125941259512596125971259812599126001260112602126031260412605126061260712608126091261012611126121261312614126151261612617126181261912620126211262212623126241262512626126271262812629126301263112632126331263412635126361263712638126391264012641126421264312644126451264612647126481264912650126511265212653126541265512656126571265812659126601266112662126631266412665126661266712668126691267012671126721267312674126751267612677126781267912680126811268212683126841268512686126871268812689126901269112692126931269412695126961269712698126991270012701127021270312704127051270612707127081270912710127111271212713127141271512716127171271812719127201272112722127231272412725127261272712728127291273012731127321273312734127351273612737127381273912740127411274212743127441274512746127471274812749127501275112752127531275412755127561275712758127591276012761127621276312764127651276612767127681276912770127711277212773127741277512776127771277812779127801278112782127831278412785127861278712788127891279012791127921279312794127951279612797127981279912800128011280212803128041280512806128071280812809128101281112812128131281412815128161281712818128191282012821128221282312824128251282612827128281282912830128311283212833128341283512836128371283812839128401284112842128431284412845128461284712848128491285012851128521285312854128551285612857128581285912860128611286212863128641286512866128671286812869128701287112872128731287412875128761287712878128791288012881128821288312884128851288612887128881288912890128911289212893128941289512896128971289812899129001290112902129031290412905129061290712908129091291012911129121291312914129151291612917129181291912920129211292212923129241292512926129271292812929129301293112932129331293412935129361293712938129391294012941129421294312944129451294612947129481294912950129511295212953129541295512956129571295812959129601296112962129631296412965129661296712968129691297012971129721297312974129751297612977129781297912980129811298212983129841298512986129871298812989129901299112992129931299412995129961299712998129991300013001130021300313004130051300613007130081300913010130111301213013130141301513016130171301813019130201302113022130231302413025130261302713028130291303013031130321303313034130351303613037130381303913040130411304213043130441304513046130471304813049130501305113052130531305413055130561305713058130591306013061130621306313064130651306613067130681306913070130711307213073130741307513076130771307813079130801308113082130831308413085130861308713088130891309013091130921309313094130951309613097130981309913100131011310213103131041310513106131071310813109131101311113112131131311413115131161311713118131191312013121131221312313124131251312613127131281312913130131311313213133131341313513136131371313813139131401314113142131431314413145131461314713148131491315013151131521315313154131551315613157131581315913160131611316213163131641316513166131671316813169131701317113172131731317413175131761317713178131791318013181131821318313184131851318613187131881318913190131911319213193131941319513196131971319813199132001320113202132031320413205132061320713208132091321013211132121321313214132151321613217132181321913220132211322213223132241322513226132271322813229132301323113232132331323413235132361323713238132391324013241132421324313244132451324613247132481324913250132511325213253132541325513256132571325813259132601326113262132631326413265132661326713268132691327013271132721327313274132751327613277132781327913280132811328213283132841328513286132871328813289132901329113292132931329413295132961329713298132991330013301133021330313304133051330613307133081330913310133111331213313133141331513316133171331813319133201332113322133231332413325133261332713328133291333013331133321333313334133351333613337133381333913340133411334213343133441334513346133471334813349133501335113352133531335413355133561335713358133591336013361133621336313364133651336613367133681336913370133711337213373133741337513376133771337813379133801338113382133831338413385133861338713388133891339013391133921339313394133951339613397133981339913400134011340213403134041340513406134071340813409134101341113412134131341413415134161341713418134191342013421134221342313424134251342613427134281342913430134311343213433134341343513436134371343813439134401344113442134431344413445134461344713448134491345013451134521345313454134551345613457134581345913460134611346213463134641346513466134671346813469134701347113472134731347413475134761347713478134791348013481134821348313484134851348613487134881348913490134911349213493134941349513496134971349813499135001350113502135031350413505135061350713508135091351013511135121351313514135151351613517135181351913520135211352213523135241352513526135271352813529135301353113532135331353413535135361353713538135391354013541135421354313544135451354613547135481354913550135511355213553135541355513556135571355813559135601356113562135631356413565135661356713568135691357013571135721357313574135751357613577135781357913580135811358213583135841358513586135871358813589135901359113592135931359413595135961359713598135991360013601136021360313604136051360613607136081360913610136111361213613136141361513616136171361813619136201362113622136231362413625136261362713628136291363013631136321363313634136351363613637136381363913640136411364213643136441364513646136471364813649136501365113652136531365413655136561365713658136591366013661136621366313664136651366613667136681366913670136711367213673136741367513676136771367813679136801368113682136831368413685136861368713688136891369013691136921369313694136951369613697136981369913700137011370213703137041370513706137071370813709137101371113712137131371413715137161371713718137191372013721137221372313724137251372613727137281372913730137311373213733137341373513736137371373813739137401374113742137431374413745137461374713748137491375013751137521375313754137551375613757137581375913760137611376213763137641376513766137671376813769137701377113772137731377413775137761377713778137791378013781137821378313784137851378613787137881378913790137911379213793137941379513796137971379813799138001380113802138031380413805138061380713808138091381013811138121381313814138151381613817138181381913820138211382213823138241382513826138271382813829138301383113832138331383413835138361383713838138391384013841138421384313844138451384613847138481384913850138511385213853138541385513856138571385813859138601386113862138631386413865138661386713868138691387013871138721387313874138751387613877138781387913880138811388213883138841388513886138871388813889138901389113892138931389413895138961389713898138991390013901139021390313904139051390613907139081390913910139111391213913139141391513916139171391813919139201392113922139231392413925139261392713928139291393013931139321393313934139351393613937139381393913940139411394213943139441394513946139471394813949139501395113952139531395413955139561395713958139591396013961139621396313964139651396613967139681396913970139711397213973139741397513976139771397813979139801398113982139831398413985139861398713988139891399013991139921399313994139951399613997139981399914000140011400214003140041400514006140071400814009140101401114012140131401414015140161401714018140191402014021140221402314024140251402614027140281402914030140311403214033140341403514036
  1. <!doctype html>
  2. <html lang="en" class="no-js">
  3. <head>
  4. <meta charset="utf-8">
  5. <meta name="viewport" content="width=device-width,initial-scale=1">
  6. <link rel="prev" href="../generator/uuid/">
  7. <link rel="next" href="../controller-options/">
  8. <link rel="icon" href="../../pictures/eso-round-logo.svg">
  9. <meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.6.12">
  10. <title>API specification - External Secrets Operator</title>
  11. <link rel="stylesheet" href="../../assets/stylesheets/main.2afb09e1.min.css">
  12. <link rel="stylesheet" href="../../assets/stylesheets/palette.06af60db.min.css">
  13. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  14. <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,700,700i%7CRoboto+Mono:400,400i,700,700i&display=fallback">
  15. <style>:root{--md-text-font:"Roboto";--md-code-font:"Roboto Mono"}</style>
  16. <script>__md_scope=new URL("../..",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
  17. <script id="__analytics">function __md_analytics(){function e(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[],e("js",new Date),e("config","G-QP38TD8K7V"),document.addEventListener("DOMContentLoaded",(function(){document.forms.search&&document.forms.search.query.addEventListener("blur",(function(){this.value&&e("event","search",{search_term:this.value})}));document$.subscribe((function(){var t=document.forms.feedback;if(void 0!==t)for(var a of t.querySelectorAll("[type=submit]"))a.addEventListener("click",(function(a){a.preventDefault();var n=document.location.pathname,d=this.getAttribute("data-md-value");e("event","feedback",{page:n,data:d}),t.firstElementChild.disabled=!0;var r=t.querySelector(".md-feedback__note [data-md-value='"+d+"']");r&&(r.hidden=!1)})),t.hidden=!1})),location$.subscribe((function(t){e("config","G-QP38TD8K7V",{page_path:t.pathname})}))}));var t=document.createElement("script");t.async=!0,t.src="https://www.googletagmanager.com/gtag/js?id=G-QP38TD8K7V",document.getElementById("__analytics").insertAdjacentElement("afterEnd",t)}</script>
  18. <script>"undefined"!=typeof __md_analytics&&__md_analytics()</script>
  19. </head>
  20. <body dir="ltr" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo">
  21. <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
  22. <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
  23. <label class="md-overlay" for="__drawer"></label>
  24. <div data-md-component="skip">
  25. </div>
  26. <div data-md-component="announce">
  27. </div>
  28. <div data-md-color-scheme="default" data-md-component="outdated" hidden>
  29. <aside class="md-banner md-banner--warning">
  30. <div class="md-banner__inner md-grid md-typeset">
  31. You're not viewing the latest version.
  32. <a href="../../..">
  33. <strong>Click here to go to latest.</strong>
  34. </a>
  35. </div>
  36. <script>var el=document.querySelector("[data-md-component=outdated]"),base=new URL("../.."),outdated=__md_get("__outdated",sessionStorage,base);!0===outdated&&el&&(el.hidden=!1)</script>
  37. </aside>
  38. </div>
  39. <header class="md-header" data-md-component="header">
  40. <nav class="md-header__inner md-grid" aria-label="Header">
  41. <a href="../.." title="External Secrets Operator" class="md-header__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  42. <img src="../../pictures/eso-round-logo.svg" alt="logo">
  43. </a>
  44. <label class="md-header__button md-icon" for="__drawer">
  45. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"/></svg>
  46. </label>
  47. <div class="md-header__title" data-md-component="header-title">
  48. <div class="md-header__ellipsis">
  49. <div class="md-header__topic">
  50. <span class="md-ellipsis">
  51. External Secrets Operator
  52. </span>
  53. </div>
  54. <div class="md-header__topic" data-md-component="header-topic">
  55. <span class="md-ellipsis">
  56. API specification
  57. </span>
  58. </div>
  59. </div>
  60. </div>
  61. <form class="md-header__option" data-md-component="palette">
  62. <input class="md-option" data-md-color-media="(prefers-color-scheme: light)" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo" aria-label="Switch to dark mode" type="radio" name="__palette" id="__palette_0">
  63. <label class="md-header__button md-icon" title="Switch to dark mode" for="__palette_1" hidden>
  64. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a4 4 0 0 0-4 4 4 4 0 0 0 4 4 4 4 0 0 0 4-4 4 4 0 0 0-4-4m0 10a6 6 0 0 1-6-6 6 6 0 0 1 6-6 6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
  65. </label>
  66. <input class="md-option" data-md-color-media="(prefers-color-scheme: dark)" data-md-color-scheme="slate" data-md-color-primary="indigo" data-md-color-accent="indigo" aria-label="Switch to light mode" type="radio" name="__palette" id="__palette_1">
  67. <label class="md-header__button md-icon" title="Switch to light mode" for="__palette_0" hidden>
  68. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 18c-.89 0-1.74-.2-2.5-.55C11.56 16.5 13 14.42 13 12s-1.44-4.5-3.5-5.45C10.26 6.2 11.11 6 12 6a6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
  69. </label>
  70. </form>
  71. <script>var palette=__md_get("__palette");if(palette&&palette.color){if("(prefers-color-scheme)"===palette.color.media){var media=matchMedia("(prefers-color-scheme: light)"),input=document.querySelector(media.matches?"[data-md-color-media='(prefers-color-scheme: light)']":"[data-md-color-media='(prefers-color-scheme: dark)']");palette.color.media=input.getAttribute("data-md-color-media"),palette.color.scheme=input.getAttribute("data-md-color-scheme"),palette.color.primary=input.getAttribute("data-md-color-primary"),palette.color.accent=input.getAttribute("data-md-color-accent")}for(var[key,value]of Object.entries(palette.color))document.body.setAttribute("data-md-color-"+key,value)}</script>
  72. <label class="md-header__button md-icon" for="__search">
  73. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
  74. </label>
  75. <div class="md-search" data-md-component="search" role="dialog">
  76. <label class="md-search__overlay" for="__search"></label>
  77. <div class="md-search__inner" role="search">
  78. <form class="md-search__form" name="search">
  79. <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
  80. <label class="md-search__icon md-icon" for="__search">
  81. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
  82. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"/></svg>
  83. </label>
  84. <nav class="md-search__options" aria-label="Search">
  85. <button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1">
  86. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>
  87. </button>
  88. </nav>
  89. </form>
  90. <div class="md-search__output">
  91. <div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix>
  92. <div class="md-search-result" data-md-component="search-result">
  93. <div class="md-search-result__meta">
  94. Initializing search
  95. </div>
  96. <ol class="md-search-result__list" role="presentation"></ol>
  97. </div>
  98. </div>
  99. </div>
  100. </div>
  101. </div>
  102. <div class="md-header__source">
  103. <a href="https://github.com/external-secrets/external-secrets" title="Go to repository" class="md-source" data-md-component="source">
  104. <div class="md-source__icon md-icon">
  105. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"/></svg>
  106. </div>
  107. <div class="md-source__repository">
  108. External Secrets Operator
  109. </div>
  110. </a>
  111. </div>
  112. </nav>
  113. </header>
  114. <div class="md-container" data-md-component="container">
  115. <nav class="md-tabs" aria-label="Tabs" data-md-component="tabs">
  116. <div class="md-grid">
  117. <ul class="md-tabs__list">
  118. <li class="md-tabs__item">
  119. <a href="../.." class="md-tabs__link">
  120. Introduction
  121. </a>
  122. </li>
  123. <li class="md-tabs__item md-tabs__item--active">
  124. <a href="../components/" class="md-tabs__link">
  125. API
  126. </a>
  127. </li>
  128. <li class="md-tabs__item">
  129. <a href="../../guides/introduction/" class="md-tabs__link">
  130. Guides
  131. </a>
  132. </li>
  133. <li class="md-tabs__item">
  134. <a href="../../provider/aws-secrets-manager/" class="md-tabs__link">
  135. Provider
  136. </a>
  137. </li>
  138. <li class="md-tabs__item">
  139. <a href="../../examples/gitops-using-fluxcd/" class="md-tabs__link">
  140. Examples
  141. </a>
  142. </li>
  143. <li class="md-tabs__item">
  144. <a href="../../contributing/devguide/" class="md-tabs__link">
  145. Community
  146. </a>
  147. </li>
  148. </ul>
  149. </div>
  150. </nav>
  151. <main class="md-main" data-md-component="main">
  152. <div class="md-main__inner md-grid">
  153. <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
  154. <div class="md-sidebar__scrollwrap">
  155. <div class="md-sidebar__inner">
  156. <nav class="md-nav md-nav--primary md-nav--lifted" aria-label="Navigation" data-md-level="0">
  157. <label class="md-nav__title" for="__drawer">
  158. <a href="../.." title="External Secrets Operator" class="md-nav__button md-logo" aria-label="External Secrets Operator" data-md-component="logo">
  159. <img src="../../pictures/eso-round-logo.svg" alt="logo">
  160. </a>
  161. External Secrets Operator
  162. </label>
  163. <div class="md-nav__source">
  164. <a href="https://github.com/external-secrets/external-secrets" title="Go to repository" class="md-source" data-md-component="source">
  165. <div class="md-source__icon md-icon">
  166. <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"/></svg>
  167. </div>
  168. <div class="md-source__repository">
  169. External Secrets Operator
  170. </div>
  171. </a>
  172. </div>
  173. <ul class="md-nav__list" data-md-scrollfix>
  174. <li class="md-nav__item md-nav__item--nested">
  175. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_1" >
  176. <div class="md-nav__link md-nav__container">
  177. <a href="../.." class="md-nav__link ">
  178. <span class="md-ellipsis">
  179. Introduction
  180. </span>
  181. </a>
  182. <label class="md-nav__link " for="__nav_1" id="__nav_1_label" tabindex="0">
  183. <span class="md-nav__icon md-icon"></span>
  184. </label>
  185. </div>
  186. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_1_label" aria-expanded="false">
  187. <label class="md-nav__title" for="__nav_1">
  188. <span class="md-nav__icon md-icon"></span>
  189. Introduction
  190. </label>
  191. <ul class="md-nav__list" data-md-scrollfix>
  192. <li class="md-nav__item">
  193. <a href="../../introduction/overview/" class="md-nav__link">
  194. <span class="md-ellipsis">
  195. Overview
  196. </span>
  197. </a>
  198. </li>
  199. <li class="md-nav__item">
  200. <a href="../../introduction/glossary/" class="md-nav__link">
  201. <span class="md-ellipsis">
  202. Glossary
  203. </span>
  204. </a>
  205. </li>
  206. <li class="md-nav__item">
  207. <a href="../../introduction/prerequisites/" class="md-nav__link">
  208. <span class="md-ellipsis">
  209. Prerequisites
  210. </span>
  211. </a>
  212. </li>
  213. <li class="md-nav__item">
  214. <a href="../../introduction/getting-started/" class="md-nav__link">
  215. <span class="md-ellipsis">
  216. Getting started
  217. </span>
  218. </a>
  219. </li>
  220. <li class="md-nav__item">
  221. <a href="../../introduction/faq/" class="md-nav__link">
  222. <span class="md-ellipsis">
  223. FAQ
  224. </span>
  225. </a>
  226. </li>
  227. <li class="md-nav__item">
  228. <a href="../../introduction/stability-support/" class="md-nav__link">
  229. <span class="md-ellipsis">
  230. Stability and Support
  231. </span>
  232. </a>
  233. </li>
  234. <li class="md-nav__item">
  235. <a href="../../introduction/deprecation-policy/" class="md-nav__link">
  236. <span class="md-ellipsis">
  237. Deprecation Policy
  238. </span>
  239. </a>
  240. </li>
  241. </ul>
  242. </nav>
  243. </li>
  244. <li class="md-nav__item md-nav__item--active md-nav__item--section md-nav__item--nested">
  245. <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_2" checked>
  246. <label class="md-nav__link" for="__nav_2" id="__nav_2_label" tabindex="">
  247. <span class="md-ellipsis">
  248. API
  249. </span>
  250. <span class="md-nav__icon md-icon"></span>
  251. </label>
  252. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_2_label" aria-expanded="true">
  253. <label class="md-nav__title" for="__nav_2">
  254. <span class="md-nav__icon md-icon"></span>
  255. API
  256. </label>
  257. <ul class="md-nav__list" data-md-scrollfix>
  258. <li class="md-nav__item">
  259. <a href="../components/" class="md-nav__link">
  260. <span class="md-ellipsis">
  261. Components
  262. </span>
  263. </a>
  264. </li>
  265. <li class="md-nav__item md-nav__item--nested">
  266. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2_2" >
  267. <label class="md-nav__link" for="__nav_2_2" id="__nav_2_2_label" tabindex="0">
  268. <span class="md-ellipsis">
  269. Core Resources
  270. </span>
  271. <span class="md-nav__icon md-icon"></span>
  272. </label>
  273. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_2_label" aria-expanded="false">
  274. <label class="md-nav__title" for="__nav_2_2">
  275. <span class="md-nav__icon md-icon"></span>
  276. Core Resources
  277. </label>
  278. <ul class="md-nav__list" data-md-scrollfix>
  279. <li class="md-nav__item">
  280. <a href="../externalsecret/" class="md-nav__link">
  281. <span class="md-ellipsis">
  282. ExternalSecret
  283. </span>
  284. </a>
  285. </li>
  286. <li class="md-nav__item">
  287. <a href="../secretstore/" class="md-nav__link">
  288. <span class="md-ellipsis">
  289. SecretStore
  290. </span>
  291. </a>
  292. </li>
  293. <li class="md-nav__item">
  294. <a href="../clustersecretstore/" class="md-nav__link">
  295. <span class="md-ellipsis">
  296. ClusterSecretStore
  297. </span>
  298. </a>
  299. </li>
  300. <li class="md-nav__item">
  301. <a href="../clusterexternalsecret/" class="md-nav__link">
  302. <span class="md-ellipsis">
  303. ClusterExternalSecret
  304. </span>
  305. </a>
  306. </li>
  307. <li class="md-nav__item">
  308. <a href="../clusterpushsecret/" class="md-nav__link">
  309. <span class="md-ellipsis">
  310. ClusterPushSecret
  311. </span>
  312. </a>
  313. </li>
  314. <li class="md-nav__item">
  315. <a href="../pushsecret/" class="md-nav__link">
  316. <span class="md-ellipsis">
  317. PushSecret
  318. </span>
  319. </a>
  320. </li>
  321. </ul>
  322. </nav>
  323. </li>
  324. <li class="md-nav__item md-nav__item--nested">
  325. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_2_3" >
  326. <div class="md-nav__link md-nav__container">
  327. <a href="../generator/" class="md-nav__link ">
  328. <span class="md-ellipsis">
  329. Generators
  330. </span>
  331. </a>
  332. <label class="md-nav__link " for="__nav_2_3" id="__nav_2_3_label" tabindex="0">
  333. <span class="md-nav__icon md-icon"></span>
  334. </label>
  335. </div>
  336. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_3_label" aria-expanded="false">
  337. <label class="md-nav__title" for="__nav_2_3">
  338. <span class="md-nav__icon md-icon"></span>
  339. Generators
  340. </label>
  341. <ul class="md-nav__list" data-md-scrollfix>
  342. <li class="md-nav__item">
  343. <a href="../generator/acr/" class="md-nav__link">
  344. <span class="md-ellipsis">
  345. Azure Container Registry
  346. </span>
  347. </a>
  348. </li>
  349. <li class="md-nav__item">
  350. <a href="../generator/ecr/" class="md-nav__link">
  351. <span class="md-ellipsis">
  352. AWS Elastic Container Registry
  353. </span>
  354. </a>
  355. </li>
  356. <li class="md-nav__item">
  357. <a href="../generator/sts/" class="md-nav__link">
  358. <span class="md-ellipsis">
  359. AWS STS Session Token
  360. </span>
  361. </a>
  362. </li>
  363. <li class="md-nav__item">
  364. <a href="../generator/cluster/" class="md-nav__link">
  365. <span class="md-ellipsis">
  366. Cluster Generator
  367. </span>
  368. </a>
  369. </li>
  370. <li class="md-nav__item">
  371. <a href="../generator/gcr/" class="md-nav__link">
  372. <span class="md-ellipsis">
  373. Google Container Registry
  374. </span>
  375. </a>
  376. </li>
  377. <li class="md-nav__item">
  378. <a href="../generator/quay/" class="md-nav__link">
  379. <span class="md-ellipsis">
  380. Quay
  381. </span>
  382. </a>
  383. </li>
  384. <li class="md-nav__item">
  385. <a href="../generator/vault/" class="md-nav__link">
  386. <span class="md-ellipsis">
  387. Vault Dynamic Secret
  388. </span>
  389. </a>
  390. </li>
  391. <li class="md-nav__item">
  392. <a href="../generator/password/" class="md-nav__link">
  393. <span class="md-ellipsis">
  394. Password
  395. </span>
  396. </a>
  397. </li>
  398. <li class="md-nav__item">
  399. <a href="../generator/fake/" class="md-nav__link">
  400. <span class="md-ellipsis">
  401. Fake
  402. </span>
  403. </a>
  404. </li>
  405. <li class="md-nav__item">
  406. <a href="../generator/webhook/" class="md-nav__link">
  407. <span class="md-ellipsis">
  408. Webhook
  409. </span>
  410. </a>
  411. </li>
  412. <li class="md-nav__item">
  413. <a href="../generator/github/" class="md-nav__link">
  414. <span class="md-ellipsis">
  415. Github
  416. </span>
  417. </a>
  418. </li>
  419. <li class="md-nav__item">
  420. <a href="../generator/uuid/" class="md-nav__link">
  421. <span class="md-ellipsis">
  422. UUID
  423. </span>
  424. </a>
  425. </li>
  426. </ul>
  427. </nav>
  428. </li>
  429. <li class="md-nav__item md-nav__item--active md-nav__item--nested">
  430. <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_2_4" checked>
  431. <label class="md-nav__link" for="__nav_2_4" id="__nav_2_4_label" tabindex="0">
  432. <span class="md-ellipsis">
  433. Reference Docs
  434. </span>
  435. <span class="md-nav__icon md-icon"></span>
  436. </label>
  437. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_2_4_label" aria-expanded="true">
  438. <label class="md-nav__title" for="__nav_2_4">
  439. <span class="md-nav__icon md-icon"></span>
  440. Reference Docs
  441. </label>
  442. <ul class="md-nav__list" data-md-scrollfix>
  443. <li class="md-nav__item md-nav__item--active">
  444. <input class="md-nav__toggle md-toggle" type="checkbox" id="__toc">
  445. <a href="./" class="md-nav__link md-nav__link--active">
  446. <span class="md-ellipsis">
  447. API specification
  448. </span>
  449. </a>
  450. </li>
  451. <li class="md-nav__item">
  452. <a href="../controller-options/" class="md-nav__link">
  453. <span class="md-ellipsis">
  454. Controller Options
  455. </span>
  456. </a>
  457. </li>
  458. <li class="md-nav__item">
  459. <a href="../metrics/" class="md-nav__link">
  460. <span class="md-ellipsis">
  461. Metrics
  462. </span>
  463. </a>
  464. </li>
  465. </ul>
  466. </nav>
  467. </li>
  468. </ul>
  469. </nav>
  470. </li>
  471. <li class="md-nav__item md-nav__item--nested">
  472. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3" >
  473. <label class="md-nav__link" for="__nav_3" id="__nav_3_label" tabindex="0">
  474. <span class="md-ellipsis">
  475. Guides
  476. </span>
  477. <span class="md-nav__icon md-icon"></span>
  478. </label>
  479. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_3_label" aria-expanded="false">
  480. <label class="md-nav__title" for="__nav_3">
  481. <span class="md-nav__icon md-icon"></span>
  482. Guides
  483. </label>
  484. <ul class="md-nav__list" data-md-scrollfix>
  485. <li class="md-nav__item">
  486. <a href="../../guides/introduction/" class="md-nav__link">
  487. <span class="md-ellipsis">
  488. Introduction
  489. </span>
  490. </a>
  491. </li>
  492. <li class="md-nav__item md-nav__item--nested">
  493. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_2" >
  494. <label class="md-nav__link" for="__nav_3_2" id="__nav_3_2_label" tabindex="0">
  495. <span class="md-ellipsis">
  496. External Secrets
  497. </span>
  498. <span class="md-nav__icon md-icon"></span>
  499. </label>
  500. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_3_2_label" aria-expanded="false">
  501. <label class="md-nav__title" for="__nav_3_2">
  502. <span class="md-nav__icon md-icon"></span>
  503. External Secrets
  504. </label>
  505. <ul class="md-nav__list" data-md-scrollfix>
  506. <li class="md-nav__item">
  507. <a href="../../guides/all-keys-one-secret/" class="md-nav__link">
  508. <span class="md-ellipsis">
  509. Extract structured data
  510. </span>
  511. </a>
  512. </li>
  513. <li class="md-nav__item">
  514. <a href="../../guides/getallsecrets/" class="md-nav__link">
  515. <span class="md-ellipsis">
  516. Find Secrets by Name or Metadata
  517. </span>
  518. </a>
  519. </li>
  520. <li class="md-nav__item">
  521. <a href="../../guides/datafrom-rewrite/" class="md-nav__link">
  522. <span class="md-ellipsis">
  523. Rewriting Keys
  524. </span>
  525. </a>
  526. </li>
  527. <li class="md-nav__item md-nav__item--nested">
  528. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_2_4" >
  529. <label class="md-nav__link" for="__nav_3_2_4" id="__nav_3_2_4_label" tabindex="0">
  530. <span class="md-ellipsis">
  531. Advanced Templating
  532. </span>
  533. <span class="md-nav__icon md-icon"></span>
  534. </label>
  535. <nav class="md-nav" data-md-level="3" aria-labelledby="__nav_3_2_4_label" aria-expanded="false">
  536. <label class="md-nav__title" for="__nav_3_2_4">
  537. <span class="md-nav__icon md-icon"></span>
  538. Advanced Templating
  539. </label>
  540. <ul class="md-nav__list" data-md-scrollfix>
  541. <li class="md-nav__item">
  542. <a href="../../guides/templating/" class="md-nav__link">
  543. <span class="md-ellipsis">
  544. v2
  545. </span>
  546. </a>
  547. </li>
  548. <li class="md-nav__item">
  549. <a href="../../guides/templating-v1/" class="md-nav__link">
  550. <span class="md-ellipsis">
  551. v1
  552. </span>
  553. </a>
  554. </li>
  555. </ul>
  556. </nav>
  557. </li>
  558. <li class="md-nav__item">
  559. <a href="../../guides/common-k8s-secret-types/" class="md-nav__link">
  560. <span class="md-ellipsis">
  561. Kubernetes Secret Types
  562. </span>
  563. </a>
  564. </li>
  565. <li class="md-nav__item">
  566. <a href="../../guides/ownership-deletion-policy/" class="md-nav__link">
  567. <span class="md-ellipsis">
  568. Lifecycle: ownership & deletion
  569. </span>
  570. </a>
  571. </li>
  572. <li class="md-nav__item">
  573. <a href="../../guides/decoding-strategy/" class="md-nav__link">
  574. <span class="md-ellipsis">
  575. Decoding Strategies
  576. </span>
  577. </a>
  578. </li>
  579. <li class="md-nav__item">
  580. <a href="../../guides/controller-class/" class="md-nav__link">
  581. <span class="md-ellipsis">
  582. Controller Classes
  583. </span>
  584. </a>
  585. </li>
  586. </ul>
  587. </nav>
  588. </li>
  589. <li class="md-nav__item">
  590. <a href="../../guides/generator/" class="md-nav__link">
  591. <span class="md-ellipsis">
  592. Generators
  593. </span>
  594. </a>
  595. </li>
  596. <li class="md-nav__item">
  597. <a href="../../guides/pushsecrets/" class="md-nav__link">
  598. <span class="md-ellipsis">
  599. Push Secrets
  600. </span>
  601. </a>
  602. </li>
  603. <li class="md-nav__item md-nav__item--nested">
  604. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_5" >
  605. <label class="md-nav__link" for="__nav_3_5" id="__nav_3_5_label" tabindex="0">
  606. <span class="md-ellipsis">
  607. Operations
  608. </span>
  609. <span class="md-nav__icon md-icon"></span>
  610. </label>
  611. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_3_5_label" aria-expanded="false">
  612. <label class="md-nav__title" for="__nav_3_5">
  613. <span class="md-nav__icon md-icon"></span>
  614. Operations
  615. </label>
  616. <ul class="md-nav__list" data-md-scrollfix>
  617. <li class="md-nav__item">
  618. <a href="../../guides/multi-tenancy/" class="md-nav__link">
  619. <span class="md-ellipsis">
  620. Multi Tenancy
  621. </span>
  622. </a>
  623. </li>
  624. <li class="md-nav__item">
  625. <a href="../../guides/security-best-practices/" class="md-nav__link">
  626. <span class="md-ellipsis">
  627. Security Best Practices
  628. </span>
  629. </a>
  630. </li>
  631. <li class="md-nav__item">
  632. <a href="../../guides/threat-model/" class="md-nav__link">
  633. <span class="md-ellipsis">
  634. Threat Model
  635. </span>
  636. </a>
  637. </li>
  638. <li class="md-nav__item">
  639. <a href="../../guides/v1beta1/" class="md-nav__link">
  640. <span class="md-ellipsis">
  641. Upgrading to v1beta1
  642. </span>
  643. </a>
  644. </li>
  645. <li class="md-nav__item">
  646. <a href="../../guides/using-latest-image/" class="md-nav__link">
  647. <span class="md-ellipsis">
  648. Using Latest Image
  649. </span>
  650. </a>
  651. </li>
  652. <li class="md-nav__item">
  653. <a href="../../guides/disable-cluster-features/" class="md-nav__link">
  654. <span class="md-ellipsis">
  655. Disable Cluster Features
  656. </span>
  657. </a>
  658. </li>
  659. </ul>
  660. </nav>
  661. </li>
  662. <li class="md-nav__item md-nav__item--nested">
  663. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3_6" >
  664. <label class="md-nav__link" for="__nav_3_6" id="__nav_3_6_label" tabindex="0">
  665. <span class="md-ellipsis">
  666. Tooling
  667. </span>
  668. <span class="md-nav__icon md-icon"></span>
  669. </label>
  670. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_3_6_label" aria-expanded="false">
  671. <label class="md-nav__title" for="__nav_3_6">
  672. <span class="md-nav__icon md-icon"></span>
  673. Tooling
  674. </label>
  675. <ul class="md-nav__list" data-md-scrollfix>
  676. <li class="md-nav__item">
  677. <a href="../../guides/using-esoctl-tool/" class="md-nav__link">
  678. <span class="md-ellipsis">
  679. Using the esoctl tool
  680. </span>
  681. </a>
  682. </li>
  683. </ul>
  684. </nav>
  685. </li>
  686. </ul>
  687. </nav>
  688. </li>
  689. <li class="md-nav__item md-nav__item--nested">
  690. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_4" >
  691. <label class="md-nav__link" for="__nav_4" id="__nav_4_label" tabindex="0">
  692. <span class="md-ellipsis">
  693. Provider
  694. </span>
  695. <span class="md-nav__icon md-icon"></span>
  696. </label>
  697. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_4_label" aria-expanded="false">
  698. <label class="md-nav__title" for="__nav_4">
  699. <span class="md-nav__icon md-icon"></span>
  700. Provider
  701. </label>
  702. <ul class="md-nav__list" data-md-scrollfix>
  703. <li class="md-nav__item">
  704. <a href="../../provider/aws-secrets-manager/" class="md-nav__link">
  705. <span class="md-ellipsis">
  706. AWS Secrets Manager
  707. </span>
  708. </a>
  709. </li>
  710. <li class="md-nav__item">
  711. <a href="../../provider/aws-parameter-store/" class="md-nav__link">
  712. <span class="md-ellipsis">
  713. AWS Parameter Store
  714. </span>
  715. </a>
  716. </li>
  717. <li class="md-nav__item">
  718. <a href="../../provider/azure-key-vault/" class="md-nav__link">
  719. <span class="md-ellipsis">
  720. Azure Key Vault
  721. </span>
  722. </a>
  723. </li>
  724. <li class="md-nav__item">
  725. <a href="../../provider/beyondtrust/" class="md-nav__link">
  726. <span class="md-ellipsis">
  727. BeyondTrust
  728. </span>
  729. </a>
  730. </li>
  731. <li class="md-nav__item">
  732. <a href="../../provider/bitwarden-secrets-manager/" class="md-nav__link">
  733. <span class="md-ellipsis">
  734. Bitwarden Secrets Manager
  735. </span>
  736. </a>
  737. </li>
  738. <li class="md-nav__item">
  739. <a href="../../provider/chef/" class="md-nav__link">
  740. <span class="md-ellipsis">
  741. Chef
  742. </span>
  743. </a>
  744. </li>
  745. <li class="md-nav__item">
  746. <a href="../../provider/cloudru/" class="md-nav__link">
  747. <span class="md-ellipsis">
  748. Cloud.ru Secret Manager
  749. </span>
  750. </a>
  751. </li>
  752. <li class="md-nav__item">
  753. <a href="../../provider/conjur/" class="md-nav__link">
  754. <span class="md-ellipsis">
  755. CyberArk Conjur
  756. </span>
  757. </a>
  758. </li>
  759. <li class="md-nav__item">
  760. <a href="../../provider/device42/" class="md-nav__link">
  761. <span class="md-ellipsis">
  762. Device42
  763. </span>
  764. </a>
  765. </li>
  766. <li class="md-nav__item">
  767. <a href="../../provider/google-secrets-manager/" class="md-nav__link">
  768. <span class="md-ellipsis">
  769. Google Cloud Secret Manager
  770. </span>
  771. </a>
  772. </li>
  773. <li class="md-nav__item">
  774. <a href="../../provider/hashicorp-vault/" class="md-nav__link">
  775. <span class="md-ellipsis">
  776. HashiCorp Vault
  777. </span>
  778. </a>
  779. </li>
  780. <li class="md-nav__item">
  781. <a href="../../provider/kubernetes/" class="md-nav__link">
  782. <span class="md-ellipsis">
  783. Kubernetes
  784. </span>
  785. </a>
  786. </li>
  787. <li class="md-nav__item">
  788. <a href="../../provider/ibm-secrets-manager/" class="md-nav__link">
  789. <span class="md-ellipsis">
  790. IBM Secrets Manager
  791. </span>
  792. </a>
  793. </li>
  794. <li class="md-nav__item">
  795. <a href="../../provider/akeyless/" class="md-nav__link">
  796. <span class="md-ellipsis">
  797. Akeyless
  798. </span>
  799. </a>
  800. </li>
  801. <li class="md-nav__item">
  802. <a href="../../provider/yandex-certificate-manager/" class="md-nav__link">
  803. <span class="md-ellipsis">
  804. Yandex Certificate Manager
  805. </span>
  806. </a>
  807. </li>
  808. <li class="md-nav__item">
  809. <a href="../../provider/yandex-lockbox/" class="md-nav__link">
  810. <span class="md-ellipsis">
  811. Yandex Lockbox
  812. </span>
  813. </a>
  814. </li>
  815. <li class="md-nav__item">
  816. <a href="../../provider/alibaba/" class="md-nav__link">
  817. <span class="md-ellipsis">
  818. Alibaba Cloud
  819. </span>
  820. </a>
  821. </li>
  822. <li class="md-nav__item">
  823. <a href="../../provider/gitlab-variables/" class="md-nav__link">
  824. <span class="md-ellipsis">
  825. GitLab Variables
  826. </span>
  827. </a>
  828. </li>
  829. <li class="md-nav__item">
  830. <a href="../../provider/github/" class="md-nav__link">
  831. <span class="md-ellipsis">
  832. Github Actions Secrets
  833. </span>
  834. </a>
  835. </li>
  836. <li class="md-nav__item">
  837. <a href="../../provider/oracle-vault/" class="md-nav__link">
  838. <span class="md-ellipsis">
  839. Oracle Vault
  840. </span>
  841. </a>
  842. </li>
  843. <li class="md-nav__item">
  844. <a href="../../provider/1password-automation/" class="md-nav__link">
  845. <span class="md-ellipsis">
  846. 1Password Secrets Automation
  847. </span>
  848. </a>
  849. </li>
  850. <li class="md-nav__item">
  851. <a href="../../provider/webhook/" class="md-nav__link">
  852. <span class="md-ellipsis">
  853. Webhook
  854. </span>
  855. </a>
  856. </li>
  857. <li class="md-nav__item">
  858. <a href="../../provider/fake/" class="md-nav__link">
  859. <span class="md-ellipsis">
  860. Fake
  861. </span>
  862. </a>
  863. </li>
  864. <li class="md-nav__item">
  865. <a href="../../provider/senhasegura-dsm/" class="md-nav__link">
  866. <span class="md-ellipsis">
  867. senhasegura DevOps Secrets Management (DSM)
  868. </span>
  869. </a>
  870. </li>
  871. <li class="md-nav__item">
  872. <a href="../../provider/doppler/" class="md-nav__link">
  873. <span class="md-ellipsis">
  874. Doppler
  875. </span>
  876. </a>
  877. </li>
  878. <li class="md-nav__item">
  879. <a href="../../provider/keeper-security/" class="md-nav__link">
  880. <span class="md-ellipsis">
  881. Keeper Security
  882. </span>
  883. </a>
  884. </li>
  885. <li class="md-nav__item">
  886. <a href="../../provider/cloak/" class="md-nav__link">
  887. <span class="md-ellipsis">
  888. Cloak End 2 End Encrypted Secrets
  889. </span>
  890. </a>
  891. </li>
  892. <li class="md-nav__item">
  893. <a href="../../provider/scaleway/" class="md-nav__link">
  894. <span class="md-ellipsis">
  895. Scaleway
  896. </span>
  897. </a>
  898. </li>
  899. <li class="md-nav__item">
  900. <a href="../../provider/delinea/" class="md-nav__link">
  901. <span class="md-ellipsis">
  902. Delinea
  903. </span>
  904. </a>
  905. </li>
  906. <li class="md-nav__item">
  907. <a href="../../provider/secretserver/" class="md-nav__link">
  908. <span class="md-ellipsis">
  909. Secret Server
  910. </span>
  911. </a>
  912. </li>
  913. <li class="md-nav__item">
  914. <a href="../../provider/passbolt/" class="md-nav__link">
  915. <span class="md-ellipsis">
  916. Passbolt
  917. </span>
  918. </a>
  919. </li>
  920. <li class="md-nav__item">
  921. <a href="../../provider/pulumi/" class="md-nav__link">
  922. <span class="md-ellipsis">
  923. Pulumi ESC
  924. </span>
  925. </a>
  926. </li>
  927. <li class="md-nav__item">
  928. <a href="../../provider/onboardbase/" class="md-nav__link">
  929. <span class="md-ellipsis">
  930. Onboardbase
  931. </span>
  932. </a>
  933. </li>
  934. <li class="md-nav__item">
  935. <a href="../../provider-passworddepot/" class="md-nav__link">
  936. <span class="md-ellipsis">
  937. Password Depot
  938. </span>
  939. </a>
  940. </li>
  941. <li class="md-nav__item">
  942. <a href="../../provider/fortanix/" class="md-nav__link">
  943. <span class="md-ellipsis">
  944. Fortanix
  945. </span>
  946. </a>
  947. </li>
  948. <li class="md-nav__item">
  949. <a href="../../provider/infisical/" class="md-nav__link">
  950. <span class="md-ellipsis">
  951. Infisical
  952. </span>
  953. </a>
  954. </li>
  955. <li class="md-nav__item">
  956. <a href="../../provider/previder/" class="md-nav__link">
  957. <span class="md-ellipsis">
  958. Previder
  959. </span>
  960. </a>
  961. </li>
  962. </ul>
  963. </nav>
  964. </li>
  965. <li class="md-nav__item md-nav__item--nested">
  966. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_5" >
  967. <label class="md-nav__link" for="__nav_5" id="__nav_5_label" tabindex="0">
  968. <span class="md-ellipsis">
  969. Examples
  970. </span>
  971. <span class="md-nav__icon md-icon"></span>
  972. </label>
  973. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_5_label" aria-expanded="false">
  974. <label class="md-nav__title" for="__nav_5">
  975. <span class="md-nav__icon md-icon"></span>
  976. Examples
  977. </label>
  978. <ul class="md-nav__list" data-md-scrollfix>
  979. <li class="md-nav__item">
  980. <a href="../../examples/gitops-using-fluxcd/" class="md-nav__link">
  981. <span class="md-ellipsis">
  982. FluxCD
  983. </span>
  984. </a>
  985. </li>
  986. <li class="md-nav__item">
  987. <a href="../../examples/anchore-engine-credentials/" class="md-nav__link">
  988. <span class="md-ellipsis">
  989. Anchore Engine
  990. </span>
  991. </a>
  992. </li>
  993. <li class="md-nav__item">
  994. <a href="../../examples/jenkins-kubernetes-credentials/" class="md-nav__link">
  995. <span class="md-ellipsis">
  996. Jenkins
  997. </span>
  998. </a>
  999. </li>
  1000. <li class="md-nav__item">
  1001. <a href="../../examples/bitwarden/" class="md-nav__link">
  1002. <span class="md-ellipsis">
  1003. Bitwarden
  1004. </span>
  1005. </a>
  1006. </li>
  1007. </ul>
  1008. </nav>
  1009. </li>
  1010. <li class="md-nav__item md-nav__item--nested">
  1011. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6" >
  1012. <label class="md-nav__link" for="__nav_6" id="__nav_6_label" tabindex="0">
  1013. <span class="md-ellipsis">
  1014. Community
  1015. </span>
  1016. <span class="md-nav__icon md-icon"></span>
  1017. </label>
  1018. <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_6_label" aria-expanded="false">
  1019. <label class="md-nav__title" for="__nav_6">
  1020. <span class="md-nav__icon md-icon"></span>
  1021. Community
  1022. </label>
  1023. <ul class="md-nav__list" data-md-scrollfix>
  1024. <li class="md-nav__item md-nav__item--nested">
  1025. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6_1" >
  1026. <label class="md-nav__link" for="__nav_6_1" id="__nav_6_1_label" tabindex="0">
  1027. <span class="md-ellipsis">
  1028. Contributing
  1029. </span>
  1030. <span class="md-nav__icon md-icon"></span>
  1031. </label>
  1032. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_1_label" aria-expanded="false">
  1033. <label class="md-nav__title" for="__nav_6_1">
  1034. <span class="md-nav__icon md-icon"></span>
  1035. Contributing
  1036. </label>
  1037. <ul class="md-nav__list" data-md-scrollfix>
  1038. <li class="md-nav__item">
  1039. <a href="../../contributing/devguide/" class="md-nav__link">
  1040. <span class="md-ellipsis">
  1041. Developer guide
  1042. </span>
  1043. </a>
  1044. </li>
  1045. <li class="md-nav__item">
  1046. <a href="../../contributing/process/" class="md-nav__link">
  1047. <span class="md-ellipsis">
  1048. Contributing Process
  1049. </span>
  1050. </a>
  1051. </li>
  1052. <li class="md-nav__item">
  1053. <a href="../../contributing/release/" class="md-nav__link">
  1054. <span class="md-ellipsis">
  1055. Release Process
  1056. </span>
  1057. </a>
  1058. </li>
  1059. <li class="md-nav__item">
  1060. <a href="../../contributing/coc/" class="md-nav__link">
  1061. <span class="md-ellipsis">
  1062. Code of Conduct
  1063. </span>
  1064. </a>
  1065. </li>
  1066. <li class="md-nav__item">
  1067. <a href="../../contributing/calendar/" class="md-nav__link">
  1068. <span class="md-ellipsis">
  1069. Community meetings calendar
  1070. </span>
  1071. </a>
  1072. </li>
  1073. <li class="md-nav__item">
  1074. <a href="../../contributing/roadmap/" class="md-nav__link">
  1075. <span class="md-ellipsis">
  1076. Roadmap
  1077. </span>
  1078. </a>
  1079. </li>
  1080. </ul>
  1081. </nav>
  1082. </li>
  1083. <li class="md-nav__item md-nav__item--nested">
  1084. <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6_2" >
  1085. <label class="md-nav__link" for="__nav_6_2" id="__nav_6_2_label" tabindex="0">
  1086. <span class="md-ellipsis">
  1087. External Resources
  1088. </span>
  1089. <span class="md-nav__icon md-icon"></span>
  1090. </label>
  1091. <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_2_label" aria-expanded="false">
  1092. <label class="md-nav__title" for="__nav_6_2">
  1093. <span class="md-nav__icon md-icon"></span>
  1094. External Resources
  1095. </label>
  1096. <ul class="md-nav__list" data-md-scrollfix>
  1097. <li class="md-nav__item">
  1098. <a href="../../eso-talks/" class="md-nav__link">
  1099. <span class="md-ellipsis">
  1100. Talks
  1101. </span>
  1102. </a>
  1103. </li>
  1104. <li class="md-nav__item">
  1105. <a href="../../eso-demos/" class="md-nav__link">
  1106. <span class="md-ellipsis">
  1107. Demos
  1108. </span>
  1109. </a>
  1110. </li>
  1111. <li class="md-nav__item">
  1112. <a href="../../eso-blogs/" class="md-nav__link">
  1113. <span class="md-ellipsis">
  1114. Blogs
  1115. </span>
  1116. </a>
  1117. </li>
  1118. <li class="md-nav__item">
  1119. <a href="../../eso-tools/" class="md-nav__link">
  1120. <span class="md-ellipsis">
  1121. Tools
  1122. </span>
  1123. </a>
  1124. </li>
  1125. </ul>
  1126. </nav>
  1127. </li>
  1128. </ul>
  1129. </nav>
  1130. </li>
  1131. </ul>
  1132. </nav>
  1133. </div>
  1134. </div>
  1135. </div>
  1136. <div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" >
  1137. <div class="md-sidebar__scrollwrap">
  1138. <div class="md-sidebar__inner">
  1139. <nav class="md-nav md-nav--secondary" aria-label="Table of contents">
  1140. </nav>
  1141. </div>
  1142. </div>
  1143. </div>
  1144. <div class="md-content" data-md-component="content">
  1145. <article class="md-content__inner md-typeset">
  1146. <h1>API specification</h1>
  1147. <p>Packages:</p>
  1148. <ul>
  1149. <li>
  1150. <a href="#external-secrets.io%2fv1">external-secrets.io/v1</a>
  1151. </li>
  1152. </ul>
  1153. <h2 id="external-secrets.io/v1">external-secrets.io/v1</h2>
  1154. <p>
  1155. <p>Package v1 contains resources for external-secrets</p>
  1156. </p>
  1157. <p>Resource Types:</p>
  1158. <ul></ul>
  1159. <h3 id="external-secrets.io/v1.AWSAuth">AWSAuth
  1160. </h3>
  1161. <p>
  1162. (<em>Appears on:</em>
  1163. <a href="#external-secrets.io/v1.AWSProvider">AWSProvider</a>)
  1164. </p>
  1165. <p>
  1166. <p>AWSAuth tells the controller how to do authentication with aws.
  1167. Only one of secretRef or jwt can be specified.
  1168. if none is specified the controller will load credentials using the aws sdk defaults.</p>
  1169. </p>
  1170. <table>
  1171. <thead>
  1172. <tr>
  1173. <th>Field</th>
  1174. <th>Description</th>
  1175. </tr>
  1176. </thead>
  1177. <tbody>
  1178. <tr>
  1179. <td>
  1180. <code>secretRef</code></br>
  1181. <em>
  1182. <a href="#external-secrets.io/v1.AWSAuthSecretRef">
  1183. AWSAuthSecretRef
  1184. </a>
  1185. </em>
  1186. </td>
  1187. <td>
  1188. <em>(Optional)</em>
  1189. </td>
  1190. </tr>
  1191. <tr>
  1192. <td>
  1193. <code>jwt</code></br>
  1194. <em>
  1195. <a href="#external-secrets.io/v1.AWSJWTAuth">
  1196. AWSJWTAuth
  1197. </a>
  1198. </em>
  1199. </td>
  1200. <td>
  1201. <em>(Optional)</em>
  1202. </td>
  1203. </tr>
  1204. </tbody>
  1205. </table>
  1206. <h3 id="external-secrets.io/v1.AWSAuthSecretRef">AWSAuthSecretRef
  1207. </h3>
  1208. <p>
  1209. (<em>Appears on:</em>
  1210. <a href="#external-secrets.io/v1.AWSAuth">AWSAuth</a>)
  1211. </p>
  1212. <p>
  1213. <p>AWSAuthSecretRef holds secret references for AWS credentials
  1214. both AccessKeyID and SecretAccessKey must be defined in order to properly authenticate.</p>
  1215. </p>
  1216. <table>
  1217. <thead>
  1218. <tr>
  1219. <th>Field</th>
  1220. <th>Description</th>
  1221. </tr>
  1222. </thead>
  1223. <tbody>
  1224. <tr>
  1225. <td>
  1226. <code>accessKeyIDSecretRef</code></br>
  1227. <em>
  1228. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1229. External Secrets meta/v1.SecretKeySelector
  1230. </a>
  1231. </em>
  1232. </td>
  1233. <td>
  1234. <p>The AccessKeyID is used for authentication</p>
  1235. </td>
  1236. </tr>
  1237. <tr>
  1238. <td>
  1239. <code>secretAccessKeySecretRef</code></br>
  1240. <em>
  1241. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1242. External Secrets meta/v1.SecretKeySelector
  1243. </a>
  1244. </em>
  1245. </td>
  1246. <td>
  1247. <p>The SecretAccessKey is used for authentication</p>
  1248. </td>
  1249. </tr>
  1250. <tr>
  1251. <td>
  1252. <code>sessionTokenSecretRef</code></br>
  1253. <em>
  1254. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1255. External Secrets meta/v1.SecretKeySelector
  1256. </a>
  1257. </em>
  1258. </td>
  1259. <td>
  1260. <p>The SessionToken used for authentication
  1261. This must be defined if AccessKeyID and SecretAccessKey are temporary credentials
  1262. see: <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html">https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html</a></p>
  1263. </td>
  1264. </tr>
  1265. </tbody>
  1266. </table>
  1267. <h3 id="external-secrets.io/v1.AWSJWTAuth">AWSJWTAuth
  1268. </h3>
  1269. <p>
  1270. (<em>Appears on:</em>
  1271. <a href="#external-secrets.io/v1.AWSAuth">AWSAuth</a>)
  1272. </p>
  1273. <p>
  1274. <p>Authenticate against AWS using service account tokens.</p>
  1275. </p>
  1276. <table>
  1277. <thead>
  1278. <tr>
  1279. <th>Field</th>
  1280. <th>Description</th>
  1281. </tr>
  1282. </thead>
  1283. <tbody>
  1284. <tr>
  1285. <td>
  1286. <code>serviceAccountRef</code></br>
  1287. <em>
  1288. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  1289. External Secrets meta/v1.ServiceAccountSelector
  1290. </a>
  1291. </em>
  1292. </td>
  1293. <td>
  1294. </td>
  1295. </tr>
  1296. </tbody>
  1297. </table>
  1298. <h3 id="external-secrets.io/v1.AWSProvider">AWSProvider
  1299. </h3>
  1300. <p>
  1301. (<em>Appears on:</em>
  1302. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  1303. </p>
  1304. <p>
  1305. <p>AWSProvider configures a store to sync secrets with AWS.</p>
  1306. </p>
  1307. <table>
  1308. <thead>
  1309. <tr>
  1310. <th>Field</th>
  1311. <th>Description</th>
  1312. </tr>
  1313. </thead>
  1314. <tbody>
  1315. <tr>
  1316. <td>
  1317. <code>service</code></br>
  1318. <em>
  1319. <a href="#external-secrets.io/v1.AWSServiceType">
  1320. AWSServiceType
  1321. </a>
  1322. </em>
  1323. </td>
  1324. <td>
  1325. <p>Service defines which service should be used to fetch the secrets</p>
  1326. </td>
  1327. </tr>
  1328. <tr>
  1329. <td>
  1330. <code>auth</code></br>
  1331. <em>
  1332. <a href="#external-secrets.io/v1.AWSAuth">
  1333. AWSAuth
  1334. </a>
  1335. </em>
  1336. </td>
  1337. <td>
  1338. <em>(Optional)</em>
  1339. <p>Auth defines the information necessary to authenticate against AWS
  1340. if not set aws sdk will infer credentials from your environment
  1341. see: <a href="https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials">https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials</a></p>
  1342. </td>
  1343. </tr>
  1344. <tr>
  1345. <td>
  1346. <code>role</code></br>
  1347. <em>
  1348. string
  1349. </em>
  1350. </td>
  1351. <td>
  1352. <em>(Optional)</em>
  1353. <p>Role is a Role ARN which the provider will assume</p>
  1354. </td>
  1355. </tr>
  1356. <tr>
  1357. <td>
  1358. <code>region</code></br>
  1359. <em>
  1360. string
  1361. </em>
  1362. </td>
  1363. <td>
  1364. <p>AWS Region to be used for the provider</p>
  1365. </td>
  1366. </tr>
  1367. <tr>
  1368. <td>
  1369. <code>additionalRoles</code></br>
  1370. <em>
  1371. []string
  1372. </em>
  1373. </td>
  1374. <td>
  1375. <em>(Optional)</em>
  1376. <p>AdditionalRoles is a chained list of Role ARNs which the provider will sequentially assume before assuming the Role</p>
  1377. </td>
  1378. </tr>
  1379. <tr>
  1380. <td>
  1381. <code>externalID</code></br>
  1382. <em>
  1383. string
  1384. </em>
  1385. </td>
  1386. <td>
  1387. <p>AWS External ID set on assumed IAM roles</p>
  1388. </td>
  1389. </tr>
  1390. <tr>
  1391. <td>
  1392. <code>sessionTags</code></br>
  1393. <em>
  1394. <a href="#external-secrets.io/v1.*github.com/external-secrets/external-secrets/apis/externalsecrets/v1.Tag">
  1395. []*github.com/external-secrets/external-secrets/apis/externalsecrets/v1.Tag
  1396. </a>
  1397. </em>
  1398. </td>
  1399. <td>
  1400. <em>(Optional)</em>
  1401. <p>AWS STS assume role session tags</p>
  1402. </td>
  1403. </tr>
  1404. <tr>
  1405. <td>
  1406. <code>secretsManager</code></br>
  1407. <em>
  1408. <a href="#external-secrets.io/v1.SecretsManager">
  1409. SecretsManager
  1410. </a>
  1411. </em>
  1412. </td>
  1413. <td>
  1414. <em>(Optional)</em>
  1415. <p>SecretsManager defines how the provider behaves when interacting with AWS SecretsManager</p>
  1416. </td>
  1417. </tr>
  1418. <tr>
  1419. <td>
  1420. <code>transitiveTagKeys</code></br>
  1421. <em>
  1422. []*string
  1423. </em>
  1424. </td>
  1425. <td>
  1426. <em>(Optional)</em>
  1427. <p>AWS STS assume role transitive session tags. Required when multiple rules are used with the provider</p>
  1428. </td>
  1429. </tr>
  1430. <tr>
  1431. <td>
  1432. <code>prefix</code></br>
  1433. <em>
  1434. string
  1435. </em>
  1436. </td>
  1437. <td>
  1438. <em>(Optional)</em>
  1439. <p>Prefix adds a prefix to all retrieved values.</p>
  1440. </td>
  1441. </tr>
  1442. </tbody>
  1443. </table>
  1444. <h3 id="external-secrets.io/v1.AWSServiceType">AWSServiceType
  1445. (<code>string</code> alias)</p></h3>
  1446. <p>
  1447. (<em>Appears on:</em>
  1448. <a href="#external-secrets.io/v1.AWSProvider">AWSProvider</a>)
  1449. </p>
  1450. <p>
  1451. <p>AWSServiceType is a enum that defines the service/API that is used to fetch the secrets.</p>
  1452. </p>
  1453. <table>
  1454. <thead>
  1455. <tr>
  1456. <th>Value</th>
  1457. <th>Description</th>
  1458. </tr>
  1459. </thead>
  1460. <tbody><tr><td><p>&#34;ParameterStore&#34;</p></td>
  1461. <td><p>AWSServiceParameterStore is the AWS SystemsManager ParameterStore service.
  1462. see: <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html">https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html</a></p>
  1463. </td>
  1464. </tr><tr><td><p>&#34;SecretsManager&#34;</p></td>
  1465. <td><p>AWSServiceSecretsManager is the AWS SecretsManager service.
  1466. see: <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html">https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html</a></p>
  1467. </td>
  1468. </tr></tbody>
  1469. </table>
  1470. <h3 id="external-secrets.io/v1.AkeylessAuth">AkeylessAuth
  1471. </h3>
  1472. <p>
  1473. (<em>Appears on:</em>
  1474. <a href="#external-secrets.io/v1.AkeylessProvider">AkeylessProvider</a>)
  1475. </p>
  1476. <p>
  1477. </p>
  1478. <table>
  1479. <thead>
  1480. <tr>
  1481. <th>Field</th>
  1482. <th>Description</th>
  1483. </tr>
  1484. </thead>
  1485. <tbody>
  1486. <tr>
  1487. <td>
  1488. <code>secretRef</code></br>
  1489. <em>
  1490. <a href="#external-secrets.io/v1.AkeylessAuthSecretRef">
  1491. AkeylessAuthSecretRef
  1492. </a>
  1493. </em>
  1494. </td>
  1495. <td>
  1496. <em>(Optional)</em>
  1497. <p>Reference to a Secret that contains the details
  1498. to authenticate with Akeyless.</p>
  1499. </td>
  1500. </tr>
  1501. <tr>
  1502. <td>
  1503. <code>kubernetesAuth</code></br>
  1504. <em>
  1505. <a href="#external-secrets.io/v1.AkeylessKubernetesAuth">
  1506. AkeylessKubernetesAuth
  1507. </a>
  1508. </em>
  1509. </td>
  1510. <td>
  1511. <em>(Optional)</em>
  1512. <p>Kubernetes authenticates with Akeyless by passing the ServiceAccount
  1513. token stored in the named Secret resource.</p>
  1514. </td>
  1515. </tr>
  1516. </tbody>
  1517. </table>
  1518. <h3 id="external-secrets.io/v1.AkeylessAuthSecretRef">AkeylessAuthSecretRef
  1519. </h3>
  1520. <p>
  1521. (<em>Appears on:</em>
  1522. <a href="#external-secrets.io/v1.AkeylessAuth">AkeylessAuth</a>)
  1523. </p>
  1524. <p>
  1525. <p>AkeylessAuthSecretRef
  1526. AKEYLESS_ACCESS_TYPE_PARAM: AZURE_OBJ_ID OR GCP_AUDIENCE OR ACCESS_KEY OR KUB_CONFIG_NAME.</p>
  1527. </p>
  1528. <table>
  1529. <thead>
  1530. <tr>
  1531. <th>Field</th>
  1532. <th>Description</th>
  1533. </tr>
  1534. </thead>
  1535. <tbody>
  1536. <tr>
  1537. <td>
  1538. <code>accessID</code></br>
  1539. <em>
  1540. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1541. External Secrets meta/v1.SecretKeySelector
  1542. </a>
  1543. </em>
  1544. </td>
  1545. <td>
  1546. <p>The SecretAccessID is used for authentication</p>
  1547. </td>
  1548. </tr>
  1549. <tr>
  1550. <td>
  1551. <code>accessType</code></br>
  1552. <em>
  1553. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1554. External Secrets meta/v1.SecretKeySelector
  1555. </a>
  1556. </em>
  1557. </td>
  1558. <td>
  1559. </td>
  1560. </tr>
  1561. <tr>
  1562. <td>
  1563. <code>accessTypeParam</code></br>
  1564. <em>
  1565. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1566. External Secrets meta/v1.SecretKeySelector
  1567. </a>
  1568. </em>
  1569. </td>
  1570. <td>
  1571. </td>
  1572. </tr>
  1573. </tbody>
  1574. </table>
  1575. <h3 id="external-secrets.io/v1.AkeylessKubernetesAuth">AkeylessKubernetesAuth
  1576. </h3>
  1577. <p>
  1578. (<em>Appears on:</em>
  1579. <a href="#external-secrets.io/v1.AkeylessAuth">AkeylessAuth</a>)
  1580. </p>
  1581. <p>
  1582. <p>Authenticate with Kubernetes ServiceAccount token stored.</p>
  1583. </p>
  1584. <table>
  1585. <thead>
  1586. <tr>
  1587. <th>Field</th>
  1588. <th>Description</th>
  1589. </tr>
  1590. </thead>
  1591. <tbody>
  1592. <tr>
  1593. <td>
  1594. <code>accessID</code></br>
  1595. <em>
  1596. string
  1597. </em>
  1598. </td>
  1599. <td>
  1600. <p>the Akeyless Kubernetes auth-method access-id</p>
  1601. </td>
  1602. </tr>
  1603. <tr>
  1604. <td>
  1605. <code>k8sConfName</code></br>
  1606. <em>
  1607. string
  1608. </em>
  1609. </td>
  1610. <td>
  1611. <p>Kubernetes-auth configuration name in Akeyless-Gateway</p>
  1612. </td>
  1613. </tr>
  1614. <tr>
  1615. <td>
  1616. <code>serviceAccountRef</code></br>
  1617. <em>
  1618. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  1619. External Secrets meta/v1.ServiceAccountSelector
  1620. </a>
  1621. </em>
  1622. </td>
  1623. <td>
  1624. <em>(Optional)</em>
  1625. <p>Optional service account field containing the name of a kubernetes ServiceAccount.
  1626. If the service account is specified, the service account secret token JWT will be used
  1627. for authenticating with Akeyless. If the service account selector is not supplied,
  1628. the secretRef will be used instead.</p>
  1629. </td>
  1630. </tr>
  1631. <tr>
  1632. <td>
  1633. <code>secretRef</code></br>
  1634. <em>
  1635. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1636. External Secrets meta/v1.SecretKeySelector
  1637. </a>
  1638. </em>
  1639. </td>
  1640. <td>
  1641. <em>(Optional)</em>
  1642. <p>Optional secret field containing a Kubernetes ServiceAccount JWT used
  1643. for authenticating with Akeyless. If a name is specified without a key,
  1644. <code>token</code> is the default. If one is not specified, the one bound to
  1645. the controller will be used.</p>
  1646. </td>
  1647. </tr>
  1648. </tbody>
  1649. </table>
  1650. <h3 id="external-secrets.io/v1.AkeylessProvider">AkeylessProvider
  1651. </h3>
  1652. <p>
  1653. (<em>Appears on:</em>
  1654. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  1655. </p>
  1656. <p>
  1657. <p>AkeylessProvider Configures an store to sync secrets using Akeyless KV.</p>
  1658. </p>
  1659. <table>
  1660. <thead>
  1661. <tr>
  1662. <th>Field</th>
  1663. <th>Description</th>
  1664. </tr>
  1665. </thead>
  1666. <tbody>
  1667. <tr>
  1668. <td>
  1669. <code>akeylessGWApiURL</code></br>
  1670. <em>
  1671. string
  1672. </em>
  1673. </td>
  1674. <td>
  1675. <p>Akeyless GW API Url from which the secrets to be fetched from.</p>
  1676. </td>
  1677. </tr>
  1678. <tr>
  1679. <td>
  1680. <code>authSecretRef</code></br>
  1681. <em>
  1682. <a href="#external-secrets.io/v1.AkeylessAuth">
  1683. AkeylessAuth
  1684. </a>
  1685. </em>
  1686. </td>
  1687. <td>
  1688. <p>Auth configures how the operator authenticates with Akeyless.</p>
  1689. </td>
  1690. </tr>
  1691. <tr>
  1692. <td>
  1693. <code>caBundle</code></br>
  1694. <em>
  1695. []byte
  1696. </em>
  1697. </td>
  1698. <td>
  1699. <em>(Optional)</em>
  1700. <p>PEM/base64 encoded CA bundle used to validate Akeyless Gateway certificate. Only used
  1701. if the AkeylessGWApiURL URL is using HTTPS protocol. If not set the system root certificates
  1702. are used to validate the TLS connection.</p>
  1703. </td>
  1704. </tr>
  1705. <tr>
  1706. <td>
  1707. <code>caProvider</code></br>
  1708. <em>
  1709. <a href="#external-secrets.io/v1.CAProvider">
  1710. CAProvider
  1711. </a>
  1712. </em>
  1713. </td>
  1714. <td>
  1715. <em>(Optional)</em>
  1716. <p>The provider for the CA bundle to use to validate Akeyless Gateway certificate.</p>
  1717. </td>
  1718. </tr>
  1719. </tbody>
  1720. </table>
  1721. <h3 id="external-secrets.io/v1.AlibabaAuth">AlibabaAuth
  1722. </h3>
  1723. <p>
  1724. (<em>Appears on:</em>
  1725. <a href="#external-secrets.io/v1.AlibabaProvider">AlibabaProvider</a>)
  1726. </p>
  1727. <p>
  1728. <p>AlibabaAuth contains a secretRef for credentials.</p>
  1729. </p>
  1730. <table>
  1731. <thead>
  1732. <tr>
  1733. <th>Field</th>
  1734. <th>Description</th>
  1735. </tr>
  1736. </thead>
  1737. <tbody>
  1738. <tr>
  1739. <td>
  1740. <code>secretRef</code></br>
  1741. <em>
  1742. <a href="#external-secrets.io/v1.AlibabaAuthSecretRef">
  1743. AlibabaAuthSecretRef
  1744. </a>
  1745. </em>
  1746. </td>
  1747. <td>
  1748. <em>(Optional)</em>
  1749. </td>
  1750. </tr>
  1751. <tr>
  1752. <td>
  1753. <code>rrsa</code></br>
  1754. <em>
  1755. <a href="#external-secrets.io/v1.AlibabaRRSAAuth">
  1756. AlibabaRRSAAuth
  1757. </a>
  1758. </em>
  1759. </td>
  1760. <td>
  1761. <em>(Optional)</em>
  1762. </td>
  1763. </tr>
  1764. </tbody>
  1765. </table>
  1766. <h3 id="external-secrets.io/v1.AlibabaAuthSecretRef">AlibabaAuthSecretRef
  1767. </h3>
  1768. <p>
  1769. (<em>Appears on:</em>
  1770. <a href="#external-secrets.io/v1.AlibabaAuth">AlibabaAuth</a>)
  1771. </p>
  1772. <p>
  1773. <p>AlibabaAuthSecretRef holds secret references for Alibaba credentials.</p>
  1774. </p>
  1775. <table>
  1776. <thead>
  1777. <tr>
  1778. <th>Field</th>
  1779. <th>Description</th>
  1780. </tr>
  1781. </thead>
  1782. <tbody>
  1783. <tr>
  1784. <td>
  1785. <code>accessKeyIDSecretRef</code></br>
  1786. <em>
  1787. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1788. External Secrets meta/v1.SecretKeySelector
  1789. </a>
  1790. </em>
  1791. </td>
  1792. <td>
  1793. <p>The AccessKeyID is used for authentication</p>
  1794. </td>
  1795. </tr>
  1796. <tr>
  1797. <td>
  1798. <code>accessKeySecretSecretRef</code></br>
  1799. <em>
  1800. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  1801. External Secrets meta/v1.SecretKeySelector
  1802. </a>
  1803. </em>
  1804. </td>
  1805. <td>
  1806. <p>The AccessKeySecret is used for authentication</p>
  1807. </td>
  1808. </tr>
  1809. </tbody>
  1810. </table>
  1811. <h3 id="external-secrets.io/v1.AlibabaProvider">AlibabaProvider
  1812. </h3>
  1813. <p>
  1814. (<em>Appears on:</em>
  1815. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  1816. </p>
  1817. <p>
  1818. <p>AlibabaProvider configures a store to sync secrets using the Alibaba Secret Manager provider.</p>
  1819. </p>
  1820. <table>
  1821. <thead>
  1822. <tr>
  1823. <th>Field</th>
  1824. <th>Description</th>
  1825. </tr>
  1826. </thead>
  1827. <tbody>
  1828. <tr>
  1829. <td>
  1830. <code>auth</code></br>
  1831. <em>
  1832. <a href="#external-secrets.io/v1.AlibabaAuth">
  1833. AlibabaAuth
  1834. </a>
  1835. </em>
  1836. </td>
  1837. <td>
  1838. </td>
  1839. </tr>
  1840. <tr>
  1841. <td>
  1842. <code>regionID</code></br>
  1843. <em>
  1844. string
  1845. </em>
  1846. </td>
  1847. <td>
  1848. <p>Alibaba Region to be used for the provider</p>
  1849. </td>
  1850. </tr>
  1851. </tbody>
  1852. </table>
  1853. <h3 id="external-secrets.io/v1.AlibabaRRSAAuth">AlibabaRRSAAuth
  1854. </h3>
  1855. <p>
  1856. (<em>Appears on:</em>
  1857. <a href="#external-secrets.io/v1.AlibabaAuth">AlibabaAuth</a>)
  1858. </p>
  1859. <p>
  1860. <p>Authenticate against Alibaba using RRSA.</p>
  1861. </p>
  1862. <table>
  1863. <thead>
  1864. <tr>
  1865. <th>Field</th>
  1866. <th>Description</th>
  1867. </tr>
  1868. </thead>
  1869. <tbody>
  1870. <tr>
  1871. <td>
  1872. <code>oidcProviderArn</code></br>
  1873. <em>
  1874. string
  1875. </em>
  1876. </td>
  1877. <td>
  1878. </td>
  1879. </tr>
  1880. <tr>
  1881. <td>
  1882. <code>oidcTokenFilePath</code></br>
  1883. <em>
  1884. string
  1885. </em>
  1886. </td>
  1887. <td>
  1888. </td>
  1889. </tr>
  1890. <tr>
  1891. <td>
  1892. <code>roleArn</code></br>
  1893. <em>
  1894. string
  1895. </em>
  1896. </td>
  1897. <td>
  1898. </td>
  1899. </tr>
  1900. <tr>
  1901. <td>
  1902. <code>sessionName</code></br>
  1903. <em>
  1904. string
  1905. </em>
  1906. </td>
  1907. <td>
  1908. </td>
  1909. </tr>
  1910. </tbody>
  1911. </table>
  1912. <h3 id="external-secrets.io/v1.AuthorizationProtocol">AuthorizationProtocol
  1913. </h3>
  1914. <p>
  1915. (<em>Appears on:</em>
  1916. <a href="#external-secrets.io/v1.WebhookProvider">WebhookProvider</a>)
  1917. </p>
  1918. <p>
  1919. <p>AuthorizationProtocol contains the protocol-specific configuration</p>
  1920. </p>
  1921. <table>
  1922. <thead>
  1923. <tr>
  1924. <th>Field</th>
  1925. <th>Description</th>
  1926. </tr>
  1927. </thead>
  1928. <tbody>
  1929. <tr>
  1930. <td>
  1931. <code>ntlm</code></br>
  1932. <em>
  1933. <a href="#external-secrets.io/v1.NTLMProtocol">
  1934. NTLMProtocol
  1935. </a>
  1936. </em>
  1937. </td>
  1938. <td>
  1939. <em>(Optional)</em>
  1940. <p>NTLMProtocol configures the store to use NTLM for auth</p>
  1941. </td>
  1942. </tr>
  1943. </tbody>
  1944. </table>
  1945. <h3 id="external-secrets.io/v1.AzureAuthType">AzureAuthType
  1946. (<code>string</code> alias)</p></h3>
  1947. <p>
  1948. (<em>Appears on:</em>
  1949. <a href="#external-secrets.io/v1.AzureKVProvider">AzureKVProvider</a>)
  1950. </p>
  1951. <p>
  1952. <p>AuthType describes how to authenticate to the Azure Keyvault
  1953. Only one of the following auth types may be specified.
  1954. If none of the following auth type is specified, the default one
  1955. is ServicePrincipal.</p>
  1956. </p>
  1957. <table>
  1958. <thead>
  1959. <tr>
  1960. <th>Value</th>
  1961. <th>Description</th>
  1962. </tr>
  1963. </thead>
  1964. <tbody><tr><td><p>&#34;ManagedIdentity&#34;</p></td>
  1965. <td><p>Using Managed Identity to authenticate. Used with aad-pod-identity installed in the cluster.</p>
  1966. </td>
  1967. </tr><tr><td><p>&#34;ServicePrincipal&#34;</p></td>
  1968. <td><p>Using service principal to authenticate, which needs a tenantId, a clientId and a clientSecret.</p>
  1969. </td>
  1970. </tr><tr><td><p>&#34;WorkloadIdentity&#34;</p></td>
  1971. <td><p>Using Workload Identity service accounts to authenticate.</p>
  1972. </td>
  1973. </tr></tbody>
  1974. </table>
  1975. <h3 id="external-secrets.io/v1.AzureEnvironmentType">AzureEnvironmentType
  1976. (<code>string</code> alias)</p></h3>
  1977. <p>
  1978. (<em>Appears on:</em>
  1979. <a href="#external-secrets.io/v1.AzureKVProvider">AzureKVProvider</a>)
  1980. </p>
  1981. <p>
  1982. <p>AzureEnvironmentType specifies the Azure cloud environment endpoints to use for
  1983. connecting and authenticating with Azure. By default it points to the public cloud AAD endpoint.
  1984. The following endpoints are available, also see here: <a href="https://github.com/Azure/go-autorest/blob/main/autorest/azure/environments.go#L152">https://github.com/Azure/go-autorest/blob/main/autorest/azure/environments.go#L152</a>
  1985. PublicCloud, USGovernmentCloud, ChinaCloud, GermanCloud</p>
  1986. </p>
  1987. <table>
  1988. <thead>
  1989. <tr>
  1990. <th>Value</th>
  1991. <th>Description</th>
  1992. </tr>
  1993. </thead>
  1994. <tbody><tr><td><p>&#34;ChinaCloud&#34;</p></td>
  1995. <td></td>
  1996. </tr><tr><td><p>&#34;GermanCloud&#34;</p></td>
  1997. <td></td>
  1998. </tr><tr><td><p>&#34;PublicCloud&#34;</p></td>
  1999. <td></td>
  2000. </tr><tr><td><p>&#34;USGovernmentCloud&#34;</p></td>
  2001. <td></td>
  2002. </tr></tbody>
  2003. </table>
  2004. <h3 id="external-secrets.io/v1.AzureKVAuth">AzureKVAuth
  2005. </h3>
  2006. <p>
  2007. (<em>Appears on:</em>
  2008. <a href="#external-secrets.io/v1.AzureKVProvider">AzureKVProvider</a>)
  2009. </p>
  2010. <p>
  2011. <p>Configuration used to authenticate with Azure.</p>
  2012. </p>
  2013. <table>
  2014. <thead>
  2015. <tr>
  2016. <th>Field</th>
  2017. <th>Description</th>
  2018. </tr>
  2019. </thead>
  2020. <tbody>
  2021. <tr>
  2022. <td>
  2023. <code>clientId</code></br>
  2024. <em>
  2025. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2026. External Secrets meta/v1.SecretKeySelector
  2027. </a>
  2028. </em>
  2029. </td>
  2030. <td>
  2031. <em>(Optional)</em>
  2032. <p>The Azure clientId of the service principle or managed identity used for authentication.</p>
  2033. </td>
  2034. </tr>
  2035. <tr>
  2036. <td>
  2037. <code>tenantId</code></br>
  2038. <em>
  2039. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2040. External Secrets meta/v1.SecretKeySelector
  2041. </a>
  2042. </em>
  2043. </td>
  2044. <td>
  2045. <em>(Optional)</em>
  2046. <p>The Azure tenantId of the managed identity used for authentication.</p>
  2047. </td>
  2048. </tr>
  2049. <tr>
  2050. <td>
  2051. <code>clientSecret</code></br>
  2052. <em>
  2053. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2054. External Secrets meta/v1.SecretKeySelector
  2055. </a>
  2056. </em>
  2057. </td>
  2058. <td>
  2059. <em>(Optional)</em>
  2060. <p>The Azure ClientSecret of the service principle used for authentication.</p>
  2061. </td>
  2062. </tr>
  2063. <tr>
  2064. <td>
  2065. <code>clientCertificate</code></br>
  2066. <em>
  2067. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2068. External Secrets meta/v1.SecretKeySelector
  2069. </a>
  2070. </em>
  2071. </td>
  2072. <td>
  2073. <em>(Optional)</em>
  2074. <p>The Azure ClientCertificate of the service principle used for authentication.</p>
  2075. </td>
  2076. </tr>
  2077. </tbody>
  2078. </table>
  2079. <h3 id="external-secrets.io/v1.AzureKVProvider">AzureKVProvider
  2080. </h3>
  2081. <p>
  2082. (<em>Appears on:</em>
  2083. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  2084. </p>
  2085. <p>
  2086. <p>Configures an store to sync secrets using Azure KV.</p>
  2087. </p>
  2088. <table>
  2089. <thead>
  2090. <tr>
  2091. <th>Field</th>
  2092. <th>Description</th>
  2093. </tr>
  2094. </thead>
  2095. <tbody>
  2096. <tr>
  2097. <td>
  2098. <code>authType</code></br>
  2099. <em>
  2100. <a href="#external-secrets.io/v1.AzureAuthType">
  2101. AzureAuthType
  2102. </a>
  2103. </em>
  2104. </td>
  2105. <td>
  2106. <em>(Optional)</em>
  2107. <p>Auth type defines how to authenticate to the keyvault service.
  2108. Valid values are:
  2109. - &ldquo;ServicePrincipal&rdquo; (default): Using a service principal (tenantId, clientId, clientSecret)
  2110. - &ldquo;ManagedIdentity&rdquo;: Using Managed Identity assigned to the pod (see aad-pod-identity)</p>
  2111. </td>
  2112. </tr>
  2113. <tr>
  2114. <td>
  2115. <code>vaultUrl</code></br>
  2116. <em>
  2117. string
  2118. </em>
  2119. </td>
  2120. <td>
  2121. <p>Vault Url from which the secrets to be fetched from.</p>
  2122. </td>
  2123. </tr>
  2124. <tr>
  2125. <td>
  2126. <code>tenantId</code></br>
  2127. <em>
  2128. string
  2129. </em>
  2130. </td>
  2131. <td>
  2132. <em>(Optional)</em>
  2133. <p>TenantID configures the Azure Tenant to send requests to. Required for ServicePrincipal auth type. Optional for WorkloadIdentity.</p>
  2134. </td>
  2135. </tr>
  2136. <tr>
  2137. <td>
  2138. <code>environmentType</code></br>
  2139. <em>
  2140. <a href="#external-secrets.io/v1.AzureEnvironmentType">
  2141. AzureEnvironmentType
  2142. </a>
  2143. </em>
  2144. </td>
  2145. <td>
  2146. <p>EnvironmentType specifies the Azure cloud environment endpoints to use for
  2147. connecting and authenticating with Azure. By default it points to the public cloud AAD endpoint.
  2148. The following endpoints are available, also see here: <a href="https://github.com/Azure/go-autorest/blob/main/autorest/azure/environments.go#L152">https://github.com/Azure/go-autorest/blob/main/autorest/azure/environments.go#L152</a>
  2149. PublicCloud, USGovernmentCloud, ChinaCloud, GermanCloud</p>
  2150. </td>
  2151. </tr>
  2152. <tr>
  2153. <td>
  2154. <code>authSecretRef</code></br>
  2155. <em>
  2156. <a href="#external-secrets.io/v1.AzureKVAuth">
  2157. AzureKVAuth
  2158. </a>
  2159. </em>
  2160. </td>
  2161. <td>
  2162. <em>(Optional)</em>
  2163. <p>Auth configures how the operator authenticates with Azure. Required for ServicePrincipal auth type. Optional for WorkloadIdentity.</p>
  2164. </td>
  2165. </tr>
  2166. <tr>
  2167. <td>
  2168. <code>serviceAccountRef</code></br>
  2169. <em>
  2170. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  2171. External Secrets meta/v1.ServiceAccountSelector
  2172. </a>
  2173. </em>
  2174. </td>
  2175. <td>
  2176. <em>(Optional)</em>
  2177. <p>ServiceAccountRef specified the service account
  2178. that should be used when authenticating with WorkloadIdentity.</p>
  2179. </td>
  2180. </tr>
  2181. <tr>
  2182. <td>
  2183. <code>identityId</code></br>
  2184. <em>
  2185. string
  2186. </em>
  2187. </td>
  2188. <td>
  2189. <em>(Optional)</em>
  2190. <p>If multiple Managed Identity is assigned to the pod, you can select the one to be used</p>
  2191. </td>
  2192. </tr>
  2193. </tbody>
  2194. </table>
  2195. <h3 id="external-secrets.io/v1.BeyondTrustProviderSecretRef">BeyondTrustProviderSecretRef
  2196. </h3>
  2197. <p>
  2198. (<em>Appears on:</em>
  2199. <a href="#external-secrets.io/v1.BeyondtrustAuth">BeyondtrustAuth</a>)
  2200. </p>
  2201. <p>
  2202. </p>
  2203. <table>
  2204. <thead>
  2205. <tr>
  2206. <th>Field</th>
  2207. <th>Description</th>
  2208. </tr>
  2209. </thead>
  2210. <tbody>
  2211. <tr>
  2212. <td>
  2213. <code>value</code></br>
  2214. <em>
  2215. string
  2216. </em>
  2217. </td>
  2218. <td>
  2219. <em>(Optional)</em>
  2220. <p>Value can be specified directly to set a value without using a secret.</p>
  2221. </td>
  2222. </tr>
  2223. <tr>
  2224. <td>
  2225. <code>secretRef</code></br>
  2226. <em>
  2227. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2228. External Secrets meta/v1.SecretKeySelector
  2229. </a>
  2230. </em>
  2231. </td>
  2232. <td>
  2233. <em>(Optional)</em>
  2234. <p>SecretRef references a key in a secret that will be used as value.</p>
  2235. </td>
  2236. </tr>
  2237. </tbody>
  2238. </table>
  2239. <h3 id="external-secrets.io/v1.BeyondtrustAuth">BeyondtrustAuth
  2240. </h3>
  2241. <p>
  2242. (<em>Appears on:</em>
  2243. <a href="#external-secrets.io/v1.BeyondtrustProvider">BeyondtrustProvider</a>)
  2244. </p>
  2245. <p>
  2246. <p>Configures a store to sync secrets using BeyondTrust Password Safe.</p>
  2247. </p>
  2248. <table>
  2249. <thead>
  2250. <tr>
  2251. <th>Field</th>
  2252. <th>Description</th>
  2253. </tr>
  2254. </thead>
  2255. <tbody>
  2256. <tr>
  2257. <td>
  2258. <code>apiKey</code></br>
  2259. <em>
  2260. <a href="#external-secrets.io/v1.BeyondTrustProviderSecretRef">
  2261. BeyondTrustProviderSecretRef
  2262. </a>
  2263. </em>
  2264. </td>
  2265. <td>
  2266. <p>APIKey If not provided then ClientID/ClientSecret become required.</p>
  2267. </td>
  2268. </tr>
  2269. <tr>
  2270. <td>
  2271. <code>clientId</code></br>
  2272. <em>
  2273. <a href="#external-secrets.io/v1.BeyondTrustProviderSecretRef">
  2274. BeyondTrustProviderSecretRef
  2275. </a>
  2276. </em>
  2277. </td>
  2278. <td>
  2279. <p>ClientID is the API OAuth Client ID.</p>
  2280. </td>
  2281. </tr>
  2282. <tr>
  2283. <td>
  2284. <code>clientSecret</code></br>
  2285. <em>
  2286. <a href="#external-secrets.io/v1.BeyondTrustProviderSecretRef">
  2287. BeyondTrustProviderSecretRef
  2288. </a>
  2289. </em>
  2290. </td>
  2291. <td>
  2292. <p>ClientSecret is the API OAuth Client Secret.</p>
  2293. </td>
  2294. </tr>
  2295. <tr>
  2296. <td>
  2297. <code>certificate</code></br>
  2298. <em>
  2299. <a href="#external-secrets.io/v1.BeyondTrustProviderSecretRef">
  2300. BeyondTrustProviderSecretRef
  2301. </a>
  2302. </em>
  2303. </td>
  2304. <td>
  2305. <p>Certificate (cert.pem) for use when authenticating with an OAuth client Id using a Client Certificate.</p>
  2306. </td>
  2307. </tr>
  2308. <tr>
  2309. <td>
  2310. <code>certificateKey</code></br>
  2311. <em>
  2312. <a href="#external-secrets.io/v1.BeyondTrustProviderSecretRef">
  2313. BeyondTrustProviderSecretRef
  2314. </a>
  2315. </em>
  2316. </td>
  2317. <td>
  2318. <p>Certificate private key (key.pem). For use when authenticating with an OAuth client Id</p>
  2319. </td>
  2320. </tr>
  2321. </tbody>
  2322. </table>
  2323. <h3 id="external-secrets.io/v1.BeyondtrustProvider">BeyondtrustProvider
  2324. </h3>
  2325. <p>
  2326. (<em>Appears on:</em>
  2327. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  2328. </p>
  2329. <p>
  2330. </p>
  2331. <table>
  2332. <thead>
  2333. <tr>
  2334. <th>Field</th>
  2335. <th>Description</th>
  2336. </tr>
  2337. </thead>
  2338. <tbody>
  2339. <tr>
  2340. <td>
  2341. <code>auth</code></br>
  2342. <em>
  2343. <a href="#external-secrets.io/v1.BeyondtrustAuth">
  2344. BeyondtrustAuth
  2345. </a>
  2346. </em>
  2347. </td>
  2348. <td>
  2349. <p>Auth configures how the operator authenticates with Beyondtrust.</p>
  2350. </td>
  2351. </tr>
  2352. <tr>
  2353. <td>
  2354. <code>server</code></br>
  2355. <em>
  2356. <a href="#external-secrets.io/v1.BeyondtrustServer">
  2357. BeyondtrustServer
  2358. </a>
  2359. </em>
  2360. </td>
  2361. <td>
  2362. <p>Auth configures how API server works.</p>
  2363. </td>
  2364. </tr>
  2365. </tbody>
  2366. </table>
  2367. <h3 id="external-secrets.io/v1.BeyondtrustServer">BeyondtrustServer
  2368. </h3>
  2369. <p>
  2370. (<em>Appears on:</em>
  2371. <a href="#external-secrets.io/v1.BeyondtrustProvider">BeyondtrustProvider</a>)
  2372. </p>
  2373. <p>
  2374. <p>Configures a store to sync secrets using BeyondTrust Password Safe.</p>
  2375. </p>
  2376. <table>
  2377. <thead>
  2378. <tr>
  2379. <th>Field</th>
  2380. <th>Description</th>
  2381. </tr>
  2382. </thead>
  2383. <tbody>
  2384. <tr>
  2385. <td>
  2386. <code>apiUrl</code></br>
  2387. <em>
  2388. string
  2389. </em>
  2390. </td>
  2391. <td>
  2392. </td>
  2393. </tr>
  2394. <tr>
  2395. <td>
  2396. <code>apiVersion</code></br>
  2397. <em>
  2398. string
  2399. </em>
  2400. </td>
  2401. <td>
  2402. </td>
  2403. </tr>
  2404. <tr>
  2405. <td>
  2406. <code>retrievalType</code></br>
  2407. <em>
  2408. string
  2409. </em>
  2410. </td>
  2411. <td>
  2412. <p>The secret retrieval type. SECRET = Secrets Safe (credential, text, file). MANAGED_ACCOUNT = Password Safe account associated with a system.</p>
  2413. </td>
  2414. </tr>
  2415. <tr>
  2416. <td>
  2417. <code>separator</code></br>
  2418. <em>
  2419. string
  2420. </em>
  2421. </td>
  2422. <td>
  2423. <p>A character that separates the folder names.</p>
  2424. </td>
  2425. </tr>
  2426. <tr>
  2427. <td>
  2428. <code>verifyCA</code></br>
  2429. <em>
  2430. bool
  2431. </em>
  2432. </td>
  2433. <td>
  2434. </td>
  2435. </tr>
  2436. <tr>
  2437. <td>
  2438. <code>clientTimeOutSeconds</code></br>
  2439. <em>
  2440. int
  2441. </em>
  2442. </td>
  2443. <td>
  2444. <p>Timeout specifies a time limit for requests made by this Client. The timeout includes connection time, any redirects, and reading the response body. Defaults to 45 seconds.</p>
  2445. </td>
  2446. </tr>
  2447. </tbody>
  2448. </table>
  2449. <h3 id="external-secrets.io/v1.BitwardenSecretsManagerAuth">BitwardenSecretsManagerAuth
  2450. </h3>
  2451. <p>
  2452. (<em>Appears on:</em>
  2453. <a href="#external-secrets.io/v1.BitwardenSecretsManagerProvider">BitwardenSecretsManagerProvider</a>)
  2454. </p>
  2455. <p>
  2456. <p>BitwardenSecretsManagerAuth contains the ref to the secret that contains the machine account token.</p>
  2457. </p>
  2458. <table>
  2459. <thead>
  2460. <tr>
  2461. <th>Field</th>
  2462. <th>Description</th>
  2463. </tr>
  2464. </thead>
  2465. <tbody>
  2466. <tr>
  2467. <td>
  2468. <code>secretRef</code></br>
  2469. <em>
  2470. <a href="#external-secrets.io/v1.BitwardenSecretsManagerSecretRef">
  2471. BitwardenSecretsManagerSecretRef
  2472. </a>
  2473. </em>
  2474. </td>
  2475. <td>
  2476. </td>
  2477. </tr>
  2478. </tbody>
  2479. </table>
  2480. <h3 id="external-secrets.io/v1.BitwardenSecretsManagerProvider">BitwardenSecretsManagerProvider
  2481. </h3>
  2482. <p>
  2483. (<em>Appears on:</em>
  2484. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  2485. </p>
  2486. <p>
  2487. <p>BitwardenSecretsManagerProvider configures a store to sync secrets with a Bitwarden Secrets Manager instance.</p>
  2488. </p>
  2489. <table>
  2490. <thead>
  2491. <tr>
  2492. <th>Field</th>
  2493. <th>Description</th>
  2494. </tr>
  2495. </thead>
  2496. <tbody>
  2497. <tr>
  2498. <td>
  2499. <code>apiURL</code></br>
  2500. <em>
  2501. string
  2502. </em>
  2503. </td>
  2504. <td>
  2505. </td>
  2506. </tr>
  2507. <tr>
  2508. <td>
  2509. <code>identityURL</code></br>
  2510. <em>
  2511. string
  2512. </em>
  2513. </td>
  2514. <td>
  2515. </td>
  2516. </tr>
  2517. <tr>
  2518. <td>
  2519. <code>bitwardenServerSDKURL</code></br>
  2520. <em>
  2521. string
  2522. </em>
  2523. </td>
  2524. <td>
  2525. </td>
  2526. </tr>
  2527. <tr>
  2528. <td>
  2529. <code>caBundle</code></br>
  2530. <em>
  2531. string
  2532. </em>
  2533. </td>
  2534. <td>
  2535. <em>(Optional)</em>
  2536. <p>Base64 encoded certificate for the bitwarden server sdk. The sdk MUST run with HTTPS to make sure no MITM attack
  2537. can be performed.</p>
  2538. </td>
  2539. </tr>
  2540. <tr>
  2541. <td>
  2542. <code>caProvider</code></br>
  2543. <em>
  2544. <a href="#external-secrets.io/v1.CAProvider">
  2545. CAProvider
  2546. </a>
  2547. </em>
  2548. </td>
  2549. <td>
  2550. <em>(Optional)</em>
  2551. <p>see: <a href="https://external-secrets.io/latest/spec/#external-secrets.io/v1alpha1.CAProvider">https://external-secrets.io/latest/spec/#external-secrets.io/v1alpha1.CAProvider</a></p>
  2552. </td>
  2553. </tr>
  2554. <tr>
  2555. <td>
  2556. <code>organizationID</code></br>
  2557. <em>
  2558. string
  2559. </em>
  2560. </td>
  2561. <td>
  2562. <p>OrganizationID determines which organization this secret store manages.</p>
  2563. </td>
  2564. </tr>
  2565. <tr>
  2566. <td>
  2567. <code>projectID</code></br>
  2568. <em>
  2569. string
  2570. </em>
  2571. </td>
  2572. <td>
  2573. <p>ProjectID determines which project this secret store manages.</p>
  2574. </td>
  2575. </tr>
  2576. <tr>
  2577. <td>
  2578. <code>auth</code></br>
  2579. <em>
  2580. <a href="#external-secrets.io/v1.BitwardenSecretsManagerAuth">
  2581. BitwardenSecretsManagerAuth
  2582. </a>
  2583. </em>
  2584. </td>
  2585. <td>
  2586. <p>Auth configures how secret-manager authenticates with a bitwarden machine account instance.
  2587. Make sure that the token being used has permissions on the given secret.</p>
  2588. </td>
  2589. </tr>
  2590. </tbody>
  2591. </table>
  2592. <h3 id="external-secrets.io/v1.BitwardenSecretsManagerSecretRef">BitwardenSecretsManagerSecretRef
  2593. </h3>
  2594. <p>
  2595. (<em>Appears on:</em>
  2596. <a href="#external-secrets.io/v1.BitwardenSecretsManagerAuth">BitwardenSecretsManagerAuth</a>)
  2597. </p>
  2598. <p>
  2599. <p>BitwardenSecretsManagerSecretRef contains the credential ref to the bitwarden instance.</p>
  2600. </p>
  2601. <table>
  2602. <thead>
  2603. <tr>
  2604. <th>Field</th>
  2605. <th>Description</th>
  2606. </tr>
  2607. </thead>
  2608. <tbody>
  2609. <tr>
  2610. <td>
  2611. <code>credentials</code></br>
  2612. <em>
  2613. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2614. External Secrets meta/v1.SecretKeySelector
  2615. </a>
  2616. </em>
  2617. </td>
  2618. <td>
  2619. <p>AccessToken used for the bitwarden instance.</p>
  2620. </td>
  2621. </tr>
  2622. </tbody>
  2623. </table>
  2624. <h3 id="external-secrets.io/v1.CAProvider">CAProvider
  2625. </h3>
  2626. <p>
  2627. (<em>Appears on:</em>
  2628. <a href="#external-secrets.io/v1.AkeylessProvider">AkeylessProvider</a>,
  2629. <a href="#external-secrets.io/v1.BitwardenSecretsManagerProvider">BitwardenSecretsManagerProvider</a>,
  2630. <a href="#external-secrets.io/v1.ConjurProvider">ConjurProvider</a>,
  2631. <a href="#external-secrets.io/v1.KubernetesServer">KubernetesServer</a>,
  2632. <a href="#external-secrets.io/v1.VaultProvider">VaultProvider</a>)
  2633. </p>
  2634. <p>
  2635. <p>Used to provide custom certificate authority (CA) certificates
  2636. for a secret store. The CAProvider points to a Secret or ConfigMap resource
  2637. that contains a PEM-encoded certificate.</p>
  2638. </p>
  2639. <table>
  2640. <thead>
  2641. <tr>
  2642. <th>Field</th>
  2643. <th>Description</th>
  2644. </tr>
  2645. </thead>
  2646. <tbody>
  2647. <tr>
  2648. <td>
  2649. <code>type</code></br>
  2650. <em>
  2651. <a href="#external-secrets.io/v1.CAProviderType">
  2652. CAProviderType
  2653. </a>
  2654. </em>
  2655. </td>
  2656. <td>
  2657. <p>The type of provider to use such as &ldquo;Secret&rdquo;, or &ldquo;ConfigMap&rdquo;.</p>
  2658. </td>
  2659. </tr>
  2660. <tr>
  2661. <td>
  2662. <code>name</code></br>
  2663. <em>
  2664. string
  2665. </em>
  2666. </td>
  2667. <td>
  2668. <p>The name of the object located at the provider type.</p>
  2669. </td>
  2670. </tr>
  2671. <tr>
  2672. <td>
  2673. <code>key</code></br>
  2674. <em>
  2675. string
  2676. </em>
  2677. </td>
  2678. <td>
  2679. <p>The key where the CA certificate can be found in the Secret or ConfigMap.</p>
  2680. </td>
  2681. </tr>
  2682. <tr>
  2683. <td>
  2684. <code>namespace</code></br>
  2685. <em>
  2686. string
  2687. </em>
  2688. </td>
  2689. <td>
  2690. <em>(Optional)</em>
  2691. <p>The namespace the Provider type is in.
  2692. Can only be defined when used in a ClusterSecretStore.</p>
  2693. </td>
  2694. </tr>
  2695. </tbody>
  2696. </table>
  2697. <h3 id="external-secrets.io/v1.CAProviderType">CAProviderType
  2698. (<code>string</code> alias)</p></h3>
  2699. <p>
  2700. (<em>Appears on:</em>
  2701. <a href="#external-secrets.io/v1.CAProvider">CAProvider</a>)
  2702. </p>
  2703. <p>
  2704. </p>
  2705. <table>
  2706. <thead>
  2707. <tr>
  2708. <th>Value</th>
  2709. <th>Description</th>
  2710. </tr>
  2711. </thead>
  2712. <tbody><tr><td><p>&#34;ConfigMap&#34;</p></td>
  2713. <td></td>
  2714. </tr><tr><td><p>&#34;Secret&#34;</p></td>
  2715. <td></td>
  2716. </tr></tbody>
  2717. </table>
  2718. <h3 id="external-secrets.io/v1.CSMAuth">CSMAuth
  2719. </h3>
  2720. <p>
  2721. (<em>Appears on:</em>
  2722. <a href="#external-secrets.io/v1.CloudruSMProvider">CloudruSMProvider</a>)
  2723. </p>
  2724. <p>
  2725. <p>CSMAuth contains a secretRef for credentials.</p>
  2726. </p>
  2727. <table>
  2728. <thead>
  2729. <tr>
  2730. <th>Field</th>
  2731. <th>Description</th>
  2732. </tr>
  2733. </thead>
  2734. <tbody>
  2735. <tr>
  2736. <td>
  2737. <code>secretRef</code></br>
  2738. <em>
  2739. <a href="#external-secrets.io/v1.CSMAuthSecretRef">
  2740. CSMAuthSecretRef
  2741. </a>
  2742. </em>
  2743. </td>
  2744. <td>
  2745. <em>(Optional)</em>
  2746. </td>
  2747. </tr>
  2748. </tbody>
  2749. </table>
  2750. <h3 id="external-secrets.io/v1.CSMAuthSecretRef">CSMAuthSecretRef
  2751. </h3>
  2752. <p>
  2753. (<em>Appears on:</em>
  2754. <a href="#external-secrets.io/v1.CSMAuth">CSMAuth</a>)
  2755. </p>
  2756. <p>
  2757. <p>CSMAuthSecretRef holds secret references for Cloud.ru credentials.</p>
  2758. </p>
  2759. <table>
  2760. <thead>
  2761. <tr>
  2762. <th>Field</th>
  2763. <th>Description</th>
  2764. </tr>
  2765. </thead>
  2766. <tbody>
  2767. <tr>
  2768. <td>
  2769. <code>accessKeyIDSecretRef</code></br>
  2770. <em>
  2771. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2772. External Secrets meta/v1.SecretKeySelector
  2773. </a>
  2774. </em>
  2775. </td>
  2776. <td>
  2777. <p>The AccessKeyID is used for authentication</p>
  2778. </td>
  2779. </tr>
  2780. <tr>
  2781. <td>
  2782. <code>accessKeySecretSecretRef</code></br>
  2783. <em>
  2784. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2785. External Secrets meta/v1.SecretKeySelector
  2786. </a>
  2787. </em>
  2788. </td>
  2789. <td>
  2790. <p>The AccessKeySecret is used for authentication</p>
  2791. </td>
  2792. </tr>
  2793. </tbody>
  2794. </table>
  2795. <h3 id="external-secrets.io/v1.CertAuth">CertAuth
  2796. </h3>
  2797. <p>
  2798. (<em>Appears on:</em>
  2799. <a href="#external-secrets.io/v1.KubernetesAuth">KubernetesAuth</a>)
  2800. </p>
  2801. <p>
  2802. </p>
  2803. <table>
  2804. <thead>
  2805. <tr>
  2806. <th>Field</th>
  2807. <th>Description</th>
  2808. </tr>
  2809. </thead>
  2810. <tbody>
  2811. <tr>
  2812. <td>
  2813. <code>clientCert</code></br>
  2814. <em>
  2815. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2816. External Secrets meta/v1.SecretKeySelector
  2817. </a>
  2818. </em>
  2819. </td>
  2820. <td>
  2821. </td>
  2822. </tr>
  2823. <tr>
  2824. <td>
  2825. <code>clientKey</code></br>
  2826. <em>
  2827. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2828. External Secrets meta/v1.SecretKeySelector
  2829. </a>
  2830. </em>
  2831. </td>
  2832. <td>
  2833. </td>
  2834. </tr>
  2835. </tbody>
  2836. </table>
  2837. <h3 id="external-secrets.io/v1.ChefAuth">ChefAuth
  2838. </h3>
  2839. <p>
  2840. (<em>Appears on:</em>
  2841. <a href="#external-secrets.io/v1.ChefProvider">ChefProvider</a>)
  2842. </p>
  2843. <p>
  2844. <p>ChefAuth contains a secretRef for credentials.</p>
  2845. </p>
  2846. <table>
  2847. <thead>
  2848. <tr>
  2849. <th>Field</th>
  2850. <th>Description</th>
  2851. </tr>
  2852. </thead>
  2853. <tbody>
  2854. <tr>
  2855. <td>
  2856. <code>secretRef</code></br>
  2857. <em>
  2858. <a href="#external-secrets.io/v1.ChefAuthSecretRef">
  2859. ChefAuthSecretRef
  2860. </a>
  2861. </em>
  2862. </td>
  2863. <td>
  2864. </td>
  2865. </tr>
  2866. </tbody>
  2867. </table>
  2868. <h3 id="external-secrets.io/v1.ChefAuthSecretRef">ChefAuthSecretRef
  2869. </h3>
  2870. <p>
  2871. (<em>Appears on:</em>
  2872. <a href="#external-secrets.io/v1.ChefAuth">ChefAuth</a>)
  2873. </p>
  2874. <p>
  2875. <p>ChefAuthSecretRef holds secret references for chef server login credentials.</p>
  2876. </p>
  2877. <table>
  2878. <thead>
  2879. <tr>
  2880. <th>Field</th>
  2881. <th>Description</th>
  2882. </tr>
  2883. </thead>
  2884. <tbody>
  2885. <tr>
  2886. <td>
  2887. <code>privateKeySecretRef</code></br>
  2888. <em>
  2889. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  2890. External Secrets meta/v1.SecretKeySelector
  2891. </a>
  2892. </em>
  2893. </td>
  2894. <td>
  2895. <p>SecretKey is the Signing Key in PEM format, used for authentication.</p>
  2896. </td>
  2897. </tr>
  2898. </tbody>
  2899. </table>
  2900. <h3 id="external-secrets.io/v1.ChefProvider">ChefProvider
  2901. </h3>
  2902. <p>
  2903. (<em>Appears on:</em>
  2904. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  2905. </p>
  2906. <p>
  2907. <p>ChefProvider configures a store to sync secrets using basic chef server connection credentials.</p>
  2908. </p>
  2909. <table>
  2910. <thead>
  2911. <tr>
  2912. <th>Field</th>
  2913. <th>Description</th>
  2914. </tr>
  2915. </thead>
  2916. <tbody>
  2917. <tr>
  2918. <td>
  2919. <code>auth</code></br>
  2920. <em>
  2921. <a href="#external-secrets.io/v1.ChefAuth">
  2922. ChefAuth
  2923. </a>
  2924. </em>
  2925. </td>
  2926. <td>
  2927. <p>Auth defines the information necessary to authenticate against chef Server</p>
  2928. </td>
  2929. </tr>
  2930. <tr>
  2931. <td>
  2932. <code>username</code></br>
  2933. <em>
  2934. string
  2935. </em>
  2936. </td>
  2937. <td>
  2938. <p>UserName should be the user ID on the chef server</p>
  2939. </td>
  2940. </tr>
  2941. <tr>
  2942. <td>
  2943. <code>serverUrl</code></br>
  2944. <em>
  2945. string
  2946. </em>
  2947. </td>
  2948. <td>
  2949. <p>ServerURL is the chef server URL used to connect to. If using orgs you should include your org in the url and terminate the url with a &ldquo;/&rdquo;</p>
  2950. </td>
  2951. </tr>
  2952. </tbody>
  2953. </table>
  2954. <h3 id="external-secrets.io/v1.CloudruSMProvider">CloudruSMProvider
  2955. </h3>
  2956. <p>
  2957. (<em>Appears on:</em>
  2958. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  2959. </p>
  2960. <p>
  2961. <p>CloudruSMProvider configures a store to sync secrets using the Cloud.ru Secret Manager provider.</p>
  2962. </p>
  2963. <table>
  2964. <thead>
  2965. <tr>
  2966. <th>Field</th>
  2967. <th>Description</th>
  2968. </tr>
  2969. </thead>
  2970. <tbody>
  2971. <tr>
  2972. <td>
  2973. <code>auth</code></br>
  2974. <em>
  2975. <a href="#external-secrets.io/v1.CSMAuth">
  2976. CSMAuth
  2977. </a>
  2978. </em>
  2979. </td>
  2980. <td>
  2981. </td>
  2982. </tr>
  2983. <tr>
  2984. <td>
  2985. <code>projectID</code></br>
  2986. <em>
  2987. string
  2988. </em>
  2989. </td>
  2990. <td>
  2991. <p>ProjectID is the project, which the secrets are stored in.</p>
  2992. </td>
  2993. </tr>
  2994. </tbody>
  2995. </table>
  2996. <h3 id="external-secrets.io/v1.ClusterExternalSecret">ClusterExternalSecret
  2997. </h3>
  2998. <p>
  2999. <p>ClusterExternalSecret is the Schema for the clusterexternalsecrets API.</p>
  3000. </p>
  3001. <table>
  3002. <thead>
  3003. <tr>
  3004. <th>Field</th>
  3005. <th>Description</th>
  3006. </tr>
  3007. </thead>
  3008. <tbody>
  3009. <tr>
  3010. <td>
  3011. <code>metadata</code></br>
  3012. <em>
  3013. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#objectmeta-v1-meta">
  3014. Kubernetes meta/v1.ObjectMeta
  3015. </a>
  3016. </em>
  3017. </td>
  3018. <td>
  3019. Refer to the Kubernetes API documentation for the fields of the
  3020. <code>metadata</code> field.
  3021. </td>
  3022. </tr>
  3023. <tr>
  3024. <td>
  3025. <code>spec</code></br>
  3026. <em>
  3027. <a href="#external-secrets.io/v1.ClusterExternalSecretSpec">
  3028. ClusterExternalSecretSpec
  3029. </a>
  3030. </em>
  3031. </td>
  3032. <td>
  3033. <br/>
  3034. <br/>
  3035. <table>
  3036. <tr>
  3037. <td>
  3038. <code>externalSecretSpec</code></br>
  3039. <em>
  3040. <a href="#external-secrets.io/v1.ExternalSecretSpec">
  3041. ExternalSecretSpec
  3042. </a>
  3043. </em>
  3044. </td>
  3045. <td>
  3046. <p>The spec for the ExternalSecrets to be created</p>
  3047. </td>
  3048. </tr>
  3049. <tr>
  3050. <td>
  3051. <code>externalSecretName</code></br>
  3052. <em>
  3053. string
  3054. </em>
  3055. </td>
  3056. <td>
  3057. <em>(Optional)</em>
  3058. <p>The name of the external secrets to be created.
  3059. Defaults to the name of the ClusterExternalSecret</p>
  3060. </td>
  3061. </tr>
  3062. <tr>
  3063. <td>
  3064. <code>externalSecretMetadata</code></br>
  3065. <em>
  3066. <a href="#external-secrets.io/v1.ExternalSecretMetadata">
  3067. ExternalSecretMetadata
  3068. </a>
  3069. </em>
  3070. </td>
  3071. <td>
  3072. <em>(Optional)</em>
  3073. <p>The metadata of the external secrets to be created</p>
  3074. </td>
  3075. </tr>
  3076. <tr>
  3077. <td>
  3078. <code>namespaceSelector</code></br>
  3079. <em>
  3080. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#labelselector-v1-meta">
  3081. Kubernetes meta/v1.LabelSelector
  3082. </a>
  3083. </em>
  3084. </td>
  3085. <td>
  3086. <em>(Optional)</em>
  3087. <p>The labels to select by to find the Namespaces to create the ExternalSecrets in.
  3088. Deprecated: Use NamespaceSelectors instead.</p>
  3089. </td>
  3090. </tr>
  3091. <tr>
  3092. <td>
  3093. <code>namespaceSelectors</code></br>
  3094. <em>
  3095. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#*k8s.io/apimachinery/pkg/apis/meta/v1.labelselector--">
  3096. []*k8s.io/apimachinery/pkg/apis/meta/v1.LabelSelector
  3097. </a>
  3098. </em>
  3099. </td>
  3100. <td>
  3101. <em>(Optional)</em>
  3102. <p>A list of labels to select by to find the Namespaces to create the ExternalSecrets in. The selectors are ORed.</p>
  3103. </td>
  3104. </tr>
  3105. <tr>
  3106. <td>
  3107. <code>namespaces</code></br>
  3108. <em>
  3109. []string
  3110. </em>
  3111. </td>
  3112. <td>
  3113. <em>(Optional)</em>
  3114. <p>Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.
  3115. Deprecated: Use NamespaceSelectors instead.</p>
  3116. </td>
  3117. </tr>
  3118. <tr>
  3119. <td>
  3120. <code>refreshTime</code></br>
  3121. <em>
  3122. <a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration">
  3123. Kubernetes meta/v1.Duration
  3124. </a>
  3125. </em>
  3126. </td>
  3127. <td>
  3128. <p>The time in which the controller should reconcile its objects and recheck namespaces for labels.</p>
  3129. </td>
  3130. </tr>
  3131. </table>
  3132. </td>
  3133. </tr>
  3134. <tr>
  3135. <td>
  3136. <code>status</code></br>
  3137. <em>
  3138. <a href="#external-secrets.io/v1.ClusterExternalSecretStatus">
  3139. ClusterExternalSecretStatus
  3140. </a>
  3141. </em>
  3142. </td>
  3143. <td>
  3144. </td>
  3145. </tr>
  3146. </tbody>
  3147. </table>
  3148. <h3 id="external-secrets.io/v1.ClusterExternalSecretConditionType">ClusterExternalSecretConditionType
  3149. (<code>string</code> alias)</p></h3>
  3150. <p>
  3151. (<em>Appears on:</em>
  3152. <a href="#external-secrets.io/v1.ClusterExternalSecretStatusCondition">ClusterExternalSecretStatusCondition</a>)
  3153. </p>
  3154. <p>
  3155. </p>
  3156. <table>
  3157. <thead>
  3158. <tr>
  3159. <th>Value</th>
  3160. <th>Description</th>
  3161. </tr>
  3162. </thead>
  3163. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  3164. <td></td>
  3165. </tr></tbody>
  3166. </table>
  3167. <h3 id="external-secrets.io/v1.ClusterExternalSecretNamespaceFailure">ClusterExternalSecretNamespaceFailure
  3168. </h3>
  3169. <p>
  3170. (<em>Appears on:</em>
  3171. <a href="#external-secrets.io/v1.ClusterExternalSecretStatus">ClusterExternalSecretStatus</a>)
  3172. </p>
  3173. <p>
  3174. <p>ClusterExternalSecretNamespaceFailure represents a failed namespace deployment and it&rsquo;s reason.</p>
  3175. </p>
  3176. <table>
  3177. <thead>
  3178. <tr>
  3179. <th>Field</th>
  3180. <th>Description</th>
  3181. </tr>
  3182. </thead>
  3183. <tbody>
  3184. <tr>
  3185. <td>
  3186. <code>namespace</code></br>
  3187. <em>
  3188. string
  3189. </em>
  3190. </td>
  3191. <td>
  3192. <p>Namespace is the namespace that failed when trying to apply an ExternalSecret</p>
  3193. </td>
  3194. </tr>
  3195. <tr>
  3196. <td>
  3197. <code>reason</code></br>
  3198. <em>
  3199. string
  3200. </em>
  3201. </td>
  3202. <td>
  3203. <em>(Optional)</em>
  3204. <p>Reason is why the ExternalSecret failed to apply to the namespace</p>
  3205. </td>
  3206. </tr>
  3207. </tbody>
  3208. </table>
  3209. <h3 id="external-secrets.io/v1.ClusterExternalSecretSpec">ClusterExternalSecretSpec
  3210. </h3>
  3211. <p>
  3212. (<em>Appears on:</em>
  3213. <a href="#external-secrets.io/v1.ClusterExternalSecret">ClusterExternalSecret</a>)
  3214. </p>
  3215. <p>
  3216. <p>ClusterExternalSecretSpec defines the desired state of ClusterExternalSecret.</p>
  3217. </p>
  3218. <table>
  3219. <thead>
  3220. <tr>
  3221. <th>Field</th>
  3222. <th>Description</th>
  3223. </tr>
  3224. </thead>
  3225. <tbody>
  3226. <tr>
  3227. <td>
  3228. <code>externalSecretSpec</code></br>
  3229. <em>
  3230. <a href="#external-secrets.io/v1.ExternalSecretSpec">
  3231. ExternalSecretSpec
  3232. </a>
  3233. </em>
  3234. </td>
  3235. <td>
  3236. <p>The spec for the ExternalSecrets to be created</p>
  3237. </td>
  3238. </tr>
  3239. <tr>
  3240. <td>
  3241. <code>externalSecretName</code></br>
  3242. <em>
  3243. string
  3244. </em>
  3245. </td>
  3246. <td>
  3247. <em>(Optional)</em>
  3248. <p>The name of the external secrets to be created.
  3249. Defaults to the name of the ClusterExternalSecret</p>
  3250. </td>
  3251. </tr>
  3252. <tr>
  3253. <td>
  3254. <code>externalSecretMetadata</code></br>
  3255. <em>
  3256. <a href="#external-secrets.io/v1.ExternalSecretMetadata">
  3257. ExternalSecretMetadata
  3258. </a>
  3259. </em>
  3260. </td>
  3261. <td>
  3262. <em>(Optional)</em>
  3263. <p>The metadata of the external secrets to be created</p>
  3264. </td>
  3265. </tr>
  3266. <tr>
  3267. <td>
  3268. <code>namespaceSelector</code></br>
  3269. <em>
  3270. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#labelselector-v1-meta">
  3271. Kubernetes meta/v1.LabelSelector
  3272. </a>
  3273. </em>
  3274. </td>
  3275. <td>
  3276. <em>(Optional)</em>
  3277. <p>The labels to select by to find the Namespaces to create the ExternalSecrets in.
  3278. Deprecated: Use NamespaceSelectors instead.</p>
  3279. </td>
  3280. </tr>
  3281. <tr>
  3282. <td>
  3283. <code>namespaceSelectors</code></br>
  3284. <em>
  3285. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#*k8s.io/apimachinery/pkg/apis/meta/v1.labelselector--">
  3286. []*k8s.io/apimachinery/pkg/apis/meta/v1.LabelSelector
  3287. </a>
  3288. </em>
  3289. </td>
  3290. <td>
  3291. <em>(Optional)</em>
  3292. <p>A list of labels to select by to find the Namespaces to create the ExternalSecrets in. The selectors are ORed.</p>
  3293. </td>
  3294. </tr>
  3295. <tr>
  3296. <td>
  3297. <code>namespaces</code></br>
  3298. <em>
  3299. []string
  3300. </em>
  3301. </td>
  3302. <td>
  3303. <em>(Optional)</em>
  3304. <p>Choose namespaces by name. This field is ORed with anything that NamespaceSelectors ends up choosing.
  3305. Deprecated: Use NamespaceSelectors instead.</p>
  3306. </td>
  3307. </tr>
  3308. <tr>
  3309. <td>
  3310. <code>refreshTime</code></br>
  3311. <em>
  3312. <a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration">
  3313. Kubernetes meta/v1.Duration
  3314. </a>
  3315. </em>
  3316. </td>
  3317. <td>
  3318. <p>The time in which the controller should reconcile its objects and recheck namespaces for labels.</p>
  3319. </td>
  3320. </tr>
  3321. </tbody>
  3322. </table>
  3323. <h3 id="external-secrets.io/v1.ClusterExternalSecretStatus">ClusterExternalSecretStatus
  3324. </h3>
  3325. <p>
  3326. (<em>Appears on:</em>
  3327. <a href="#external-secrets.io/v1.ClusterExternalSecret">ClusterExternalSecret</a>)
  3328. </p>
  3329. <p>
  3330. <p>ClusterExternalSecretStatus defines the observed state of ClusterExternalSecret.</p>
  3331. </p>
  3332. <table>
  3333. <thead>
  3334. <tr>
  3335. <th>Field</th>
  3336. <th>Description</th>
  3337. </tr>
  3338. </thead>
  3339. <tbody>
  3340. <tr>
  3341. <td>
  3342. <code>externalSecretName</code></br>
  3343. <em>
  3344. string
  3345. </em>
  3346. </td>
  3347. <td>
  3348. <p>ExternalSecretName is the name of the ExternalSecrets created by the ClusterExternalSecret</p>
  3349. </td>
  3350. </tr>
  3351. <tr>
  3352. <td>
  3353. <code>failedNamespaces</code></br>
  3354. <em>
  3355. <a href="#external-secrets.io/v1.ClusterExternalSecretNamespaceFailure">
  3356. []ClusterExternalSecretNamespaceFailure
  3357. </a>
  3358. </em>
  3359. </td>
  3360. <td>
  3361. <em>(Optional)</em>
  3362. <p>Failed namespaces are the namespaces that failed to apply an ExternalSecret</p>
  3363. </td>
  3364. </tr>
  3365. <tr>
  3366. <td>
  3367. <code>provisionedNamespaces</code></br>
  3368. <em>
  3369. []string
  3370. </em>
  3371. </td>
  3372. <td>
  3373. <em>(Optional)</em>
  3374. <p>ProvisionedNamespaces are the namespaces where the ClusterExternalSecret has secrets</p>
  3375. </td>
  3376. </tr>
  3377. <tr>
  3378. <td>
  3379. <code>conditions</code></br>
  3380. <em>
  3381. <a href="#external-secrets.io/v1.ClusterExternalSecretStatusCondition">
  3382. []ClusterExternalSecretStatusCondition
  3383. </a>
  3384. </em>
  3385. </td>
  3386. <td>
  3387. <em>(Optional)</em>
  3388. </td>
  3389. </tr>
  3390. </tbody>
  3391. </table>
  3392. <h3 id="external-secrets.io/v1.ClusterExternalSecretStatusCondition">ClusterExternalSecretStatusCondition
  3393. </h3>
  3394. <p>
  3395. (<em>Appears on:</em>
  3396. <a href="#external-secrets.io/v1.ClusterExternalSecretStatus">ClusterExternalSecretStatus</a>)
  3397. </p>
  3398. <p>
  3399. </p>
  3400. <table>
  3401. <thead>
  3402. <tr>
  3403. <th>Field</th>
  3404. <th>Description</th>
  3405. </tr>
  3406. </thead>
  3407. <tbody>
  3408. <tr>
  3409. <td>
  3410. <code>type</code></br>
  3411. <em>
  3412. <a href="#external-secrets.io/v1.ClusterExternalSecretConditionType">
  3413. ClusterExternalSecretConditionType
  3414. </a>
  3415. </em>
  3416. </td>
  3417. <td>
  3418. </td>
  3419. </tr>
  3420. <tr>
  3421. <td>
  3422. <code>status</code></br>
  3423. <em>
  3424. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#conditionstatus-v1-core">
  3425. Kubernetes core/v1.ConditionStatus
  3426. </a>
  3427. </em>
  3428. </td>
  3429. <td>
  3430. </td>
  3431. </tr>
  3432. <tr>
  3433. <td>
  3434. <code>message</code></br>
  3435. <em>
  3436. string
  3437. </em>
  3438. </td>
  3439. <td>
  3440. <em>(Optional)</em>
  3441. </td>
  3442. </tr>
  3443. </tbody>
  3444. </table>
  3445. <h3 id="external-secrets.io/v1.ClusterSecretStore">ClusterSecretStore
  3446. </h3>
  3447. <p>
  3448. <p>ClusterSecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  3449. </p>
  3450. <table>
  3451. <thead>
  3452. <tr>
  3453. <th>Field</th>
  3454. <th>Description</th>
  3455. </tr>
  3456. </thead>
  3457. <tbody>
  3458. <tr>
  3459. <td>
  3460. <code>metadata</code></br>
  3461. <em>
  3462. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#objectmeta-v1-meta">
  3463. Kubernetes meta/v1.ObjectMeta
  3464. </a>
  3465. </em>
  3466. </td>
  3467. <td>
  3468. Refer to the Kubernetes API documentation for the fields of the
  3469. <code>metadata</code> field.
  3470. </td>
  3471. </tr>
  3472. <tr>
  3473. <td>
  3474. <code>spec</code></br>
  3475. <em>
  3476. <a href="#external-secrets.io/v1.SecretStoreSpec">
  3477. SecretStoreSpec
  3478. </a>
  3479. </em>
  3480. </td>
  3481. <td>
  3482. <br/>
  3483. <br/>
  3484. <table>
  3485. <tr>
  3486. <td>
  3487. <code>controller</code></br>
  3488. <em>
  3489. string
  3490. </em>
  3491. </td>
  3492. <td>
  3493. <em>(Optional)</em>
  3494. <p>Used to select the correct ESO controller (think: ingress.ingressClassName)
  3495. The ESO controller is instantiated with a specific controller name and filters ES based on this property</p>
  3496. </td>
  3497. </tr>
  3498. <tr>
  3499. <td>
  3500. <code>provider</code></br>
  3501. <em>
  3502. <a href="#external-secrets.io/v1.SecretStoreProvider">
  3503. SecretStoreProvider
  3504. </a>
  3505. </em>
  3506. </td>
  3507. <td>
  3508. <p>Used to configure the provider. Only one provider may be set</p>
  3509. </td>
  3510. </tr>
  3511. <tr>
  3512. <td>
  3513. <code>retrySettings</code></br>
  3514. <em>
  3515. <a href="#external-secrets.io/v1.SecretStoreRetrySettings">
  3516. SecretStoreRetrySettings
  3517. </a>
  3518. </em>
  3519. </td>
  3520. <td>
  3521. <em>(Optional)</em>
  3522. <p>Used to configure http retries if failed</p>
  3523. </td>
  3524. </tr>
  3525. <tr>
  3526. <td>
  3527. <code>refreshInterval</code></br>
  3528. <em>
  3529. int
  3530. </em>
  3531. </td>
  3532. <td>
  3533. <em>(Optional)</em>
  3534. <p>Used to configure store refresh interval in seconds. Empty or 0 will default to the controller config.</p>
  3535. </td>
  3536. </tr>
  3537. <tr>
  3538. <td>
  3539. <code>conditions</code></br>
  3540. <em>
  3541. <a href="#external-secrets.io/v1.ClusterSecretStoreCondition">
  3542. []ClusterSecretStoreCondition
  3543. </a>
  3544. </em>
  3545. </td>
  3546. <td>
  3547. <em>(Optional)</em>
  3548. <p>Used to constraint a ClusterSecretStore to specific namespaces. Relevant only to ClusterSecretStore</p>
  3549. </td>
  3550. </tr>
  3551. </table>
  3552. </td>
  3553. </tr>
  3554. <tr>
  3555. <td>
  3556. <code>status</code></br>
  3557. <em>
  3558. <a href="#external-secrets.io/v1.SecretStoreStatus">
  3559. SecretStoreStatus
  3560. </a>
  3561. </em>
  3562. </td>
  3563. <td>
  3564. </td>
  3565. </tr>
  3566. </tbody>
  3567. </table>
  3568. <h3 id="external-secrets.io/v1.ClusterSecretStoreCondition">ClusterSecretStoreCondition
  3569. </h3>
  3570. <p>
  3571. (<em>Appears on:</em>
  3572. <a href="#external-secrets.io/v1.SecretStoreSpec">SecretStoreSpec</a>)
  3573. </p>
  3574. <p>
  3575. <p>ClusterSecretStoreCondition describes a condition by which to choose namespaces to process ExternalSecrets in
  3576. for a ClusterSecretStore instance.</p>
  3577. </p>
  3578. <table>
  3579. <thead>
  3580. <tr>
  3581. <th>Field</th>
  3582. <th>Description</th>
  3583. </tr>
  3584. </thead>
  3585. <tbody>
  3586. <tr>
  3587. <td>
  3588. <code>namespaceSelector</code></br>
  3589. <em>
  3590. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#labelselector-v1-meta">
  3591. Kubernetes meta/v1.LabelSelector
  3592. </a>
  3593. </em>
  3594. </td>
  3595. <td>
  3596. <em>(Optional)</em>
  3597. <p>Choose namespace using a labelSelector</p>
  3598. </td>
  3599. </tr>
  3600. <tr>
  3601. <td>
  3602. <code>namespaces</code></br>
  3603. <em>
  3604. []string
  3605. </em>
  3606. </td>
  3607. <td>
  3608. <em>(Optional)</em>
  3609. <p>Choose namespaces by name</p>
  3610. </td>
  3611. </tr>
  3612. <tr>
  3613. <td>
  3614. <code>namespaceRegexes</code></br>
  3615. <em>
  3616. []string
  3617. </em>
  3618. </td>
  3619. <td>
  3620. <em>(Optional)</em>
  3621. <p>Choose namespaces by using regex matching</p>
  3622. </td>
  3623. </tr>
  3624. </tbody>
  3625. </table>
  3626. <h3 id="external-secrets.io/v1.ConjurAPIKey">ConjurAPIKey
  3627. </h3>
  3628. <p>
  3629. (<em>Appears on:</em>
  3630. <a href="#external-secrets.io/v1.ConjurAuth">ConjurAuth</a>)
  3631. </p>
  3632. <p>
  3633. </p>
  3634. <table>
  3635. <thead>
  3636. <tr>
  3637. <th>Field</th>
  3638. <th>Description</th>
  3639. </tr>
  3640. </thead>
  3641. <tbody>
  3642. <tr>
  3643. <td>
  3644. <code>account</code></br>
  3645. <em>
  3646. string
  3647. </em>
  3648. </td>
  3649. <td>
  3650. <p>Account is the Conjur organization account name.</p>
  3651. </td>
  3652. </tr>
  3653. <tr>
  3654. <td>
  3655. <code>userRef</code></br>
  3656. <em>
  3657. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  3658. External Secrets meta/v1.SecretKeySelector
  3659. </a>
  3660. </em>
  3661. </td>
  3662. <td>
  3663. <p>A reference to a specific &lsquo;key&rsquo; containing the Conjur username
  3664. within a Secret resource. In some instances, <code>key</code> is a required field.</p>
  3665. </td>
  3666. </tr>
  3667. <tr>
  3668. <td>
  3669. <code>apiKeyRef</code></br>
  3670. <em>
  3671. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  3672. External Secrets meta/v1.SecretKeySelector
  3673. </a>
  3674. </em>
  3675. </td>
  3676. <td>
  3677. <p>A reference to a specific &lsquo;key&rsquo; containing the Conjur API key
  3678. within a Secret resource. In some instances, <code>key</code> is a required field.</p>
  3679. </td>
  3680. </tr>
  3681. </tbody>
  3682. </table>
  3683. <h3 id="external-secrets.io/v1.ConjurAuth">ConjurAuth
  3684. </h3>
  3685. <p>
  3686. (<em>Appears on:</em>
  3687. <a href="#external-secrets.io/v1.ConjurProvider">ConjurProvider</a>)
  3688. </p>
  3689. <p>
  3690. </p>
  3691. <table>
  3692. <thead>
  3693. <tr>
  3694. <th>Field</th>
  3695. <th>Description</th>
  3696. </tr>
  3697. </thead>
  3698. <tbody>
  3699. <tr>
  3700. <td>
  3701. <code>apikey</code></br>
  3702. <em>
  3703. <a href="#external-secrets.io/v1.ConjurAPIKey">
  3704. ConjurAPIKey
  3705. </a>
  3706. </em>
  3707. </td>
  3708. <td>
  3709. <em>(Optional)</em>
  3710. <p>Authenticates with Conjur using an API key.</p>
  3711. </td>
  3712. </tr>
  3713. <tr>
  3714. <td>
  3715. <code>jwt</code></br>
  3716. <em>
  3717. <a href="#external-secrets.io/v1.ConjurJWT">
  3718. ConjurJWT
  3719. </a>
  3720. </em>
  3721. </td>
  3722. <td>
  3723. <em>(Optional)</em>
  3724. <p>Jwt enables JWT authentication using Kubernetes service account tokens.</p>
  3725. </td>
  3726. </tr>
  3727. </tbody>
  3728. </table>
  3729. <h3 id="external-secrets.io/v1.ConjurJWT">ConjurJWT
  3730. </h3>
  3731. <p>
  3732. (<em>Appears on:</em>
  3733. <a href="#external-secrets.io/v1.ConjurAuth">ConjurAuth</a>)
  3734. </p>
  3735. <p>
  3736. </p>
  3737. <table>
  3738. <thead>
  3739. <tr>
  3740. <th>Field</th>
  3741. <th>Description</th>
  3742. </tr>
  3743. </thead>
  3744. <tbody>
  3745. <tr>
  3746. <td>
  3747. <code>account</code></br>
  3748. <em>
  3749. string
  3750. </em>
  3751. </td>
  3752. <td>
  3753. <p>Account is the Conjur organization account name.</p>
  3754. </td>
  3755. </tr>
  3756. <tr>
  3757. <td>
  3758. <code>serviceID</code></br>
  3759. <em>
  3760. string
  3761. </em>
  3762. </td>
  3763. <td>
  3764. <p>The conjur authn jwt webservice id</p>
  3765. </td>
  3766. </tr>
  3767. <tr>
  3768. <td>
  3769. <code>hostId</code></br>
  3770. <em>
  3771. string
  3772. </em>
  3773. </td>
  3774. <td>
  3775. <em>(Optional)</em>
  3776. <p>Optional HostID for JWT authentication. This may be used depending
  3777. on how the Conjur JWT authenticator policy is configured.</p>
  3778. </td>
  3779. </tr>
  3780. <tr>
  3781. <td>
  3782. <code>secretRef</code></br>
  3783. <em>
  3784. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  3785. External Secrets meta/v1.SecretKeySelector
  3786. </a>
  3787. </em>
  3788. </td>
  3789. <td>
  3790. <em>(Optional)</em>
  3791. <p>Optional SecretRef that refers to a key in a Secret resource containing JWT token to
  3792. authenticate with Conjur using the JWT authentication method.</p>
  3793. </td>
  3794. </tr>
  3795. <tr>
  3796. <td>
  3797. <code>serviceAccountRef</code></br>
  3798. <em>
  3799. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  3800. External Secrets meta/v1.ServiceAccountSelector
  3801. </a>
  3802. </em>
  3803. </td>
  3804. <td>
  3805. <em>(Optional)</em>
  3806. <p>Optional ServiceAccountRef specifies the Kubernetes service account for which to request
  3807. a token for with the <code>TokenRequest</code> API.</p>
  3808. </td>
  3809. </tr>
  3810. </tbody>
  3811. </table>
  3812. <h3 id="external-secrets.io/v1.ConjurProvider">ConjurProvider
  3813. </h3>
  3814. <p>
  3815. (<em>Appears on:</em>
  3816. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  3817. </p>
  3818. <p>
  3819. </p>
  3820. <table>
  3821. <thead>
  3822. <tr>
  3823. <th>Field</th>
  3824. <th>Description</th>
  3825. </tr>
  3826. </thead>
  3827. <tbody>
  3828. <tr>
  3829. <td>
  3830. <code>url</code></br>
  3831. <em>
  3832. string
  3833. </em>
  3834. </td>
  3835. <td>
  3836. <p>URL is the endpoint of the Conjur instance.</p>
  3837. </td>
  3838. </tr>
  3839. <tr>
  3840. <td>
  3841. <code>caBundle</code></br>
  3842. <em>
  3843. string
  3844. </em>
  3845. </td>
  3846. <td>
  3847. <em>(Optional)</em>
  3848. <p>CABundle is a PEM encoded CA bundle that will be used to validate the Conjur server certificate.</p>
  3849. </td>
  3850. </tr>
  3851. <tr>
  3852. <td>
  3853. <code>caProvider</code></br>
  3854. <em>
  3855. <a href="#external-secrets.io/v1.CAProvider">
  3856. CAProvider
  3857. </a>
  3858. </em>
  3859. </td>
  3860. <td>
  3861. <em>(Optional)</em>
  3862. <p>Used to provide custom certificate authority (CA) certificates
  3863. for a secret store. The CAProvider points to a Secret or ConfigMap resource
  3864. that contains a PEM-encoded certificate.</p>
  3865. </td>
  3866. </tr>
  3867. <tr>
  3868. <td>
  3869. <code>auth</code></br>
  3870. <em>
  3871. <a href="#external-secrets.io/v1.ConjurAuth">
  3872. ConjurAuth
  3873. </a>
  3874. </em>
  3875. </td>
  3876. <td>
  3877. <p>Defines authentication settings for connecting to Conjur.</p>
  3878. </td>
  3879. </tr>
  3880. </tbody>
  3881. </table>
  3882. <h3 id="external-secrets.io/v1.DelineaProvider">DelineaProvider
  3883. </h3>
  3884. <p>
  3885. (<em>Appears on:</em>
  3886. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  3887. </p>
  3888. <p>
  3889. <p>See <a href="https://github.com/DelineaXPM/dsv-sdk-go/blob/main/vault/vault.go">https://github.com/DelineaXPM/dsv-sdk-go/blob/main/vault/vault.go</a>.</p>
  3890. </p>
  3891. <table>
  3892. <thead>
  3893. <tr>
  3894. <th>Field</th>
  3895. <th>Description</th>
  3896. </tr>
  3897. </thead>
  3898. <tbody>
  3899. <tr>
  3900. <td>
  3901. <code>clientId</code></br>
  3902. <em>
  3903. <a href="#external-secrets.io/v1.DelineaProviderSecretRef">
  3904. DelineaProviderSecretRef
  3905. </a>
  3906. </em>
  3907. </td>
  3908. <td>
  3909. <p>ClientID is the non-secret part of the credential.</p>
  3910. </td>
  3911. </tr>
  3912. <tr>
  3913. <td>
  3914. <code>clientSecret</code></br>
  3915. <em>
  3916. <a href="#external-secrets.io/v1.DelineaProviderSecretRef">
  3917. DelineaProviderSecretRef
  3918. </a>
  3919. </em>
  3920. </td>
  3921. <td>
  3922. <p>ClientSecret is the secret part of the credential.</p>
  3923. </td>
  3924. </tr>
  3925. <tr>
  3926. <td>
  3927. <code>tenant</code></br>
  3928. <em>
  3929. string
  3930. </em>
  3931. </td>
  3932. <td>
  3933. <p>Tenant is the chosen hostname / site name.</p>
  3934. </td>
  3935. </tr>
  3936. <tr>
  3937. <td>
  3938. <code>urlTemplate</code></br>
  3939. <em>
  3940. string
  3941. </em>
  3942. </td>
  3943. <td>
  3944. <em>(Optional)</em>
  3945. <p>URLTemplate
  3946. If unset, defaults to &ldquo;https://%s.secretsvaultcloud.%s/v1/%s%s&rdquo;.</p>
  3947. </td>
  3948. </tr>
  3949. <tr>
  3950. <td>
  3951. <code>tld</code></br>
  3952. <em>
  3953. string
  3954. </em>
  3955. </td>
  3956. <td>
  3957. <em>(Optional)</em>
  3958. <p>TLD is based on the server location that was chosen during provisioning.
  3959. If unset, defaults to &ldquo;com&rdquo;.</p>
  3960. </td>
  3961. </tr>
  3962. </tbody>
  3963. </table>
  3964. <h3 id="external-secrets.io/v1.DelineaProviderSecretRef">DelineaProviderSecretRef
  3965. </h3>
  3966. <p>
  3967. (<em>Appears on:</em>
  3968. <a href="#external-secrets.io/v1.DelineaProvider">DelineaProvider</a>)
  3969. </p>
  3970. <p>
  3971. </p>
  3972. <table>
  3973. <thead>
  3974. <tr>
  3975. <th>Field</th>
  3976. <th>Description</th>
  3977. </tr>
  3978. </thead>
  3979. <tbody>
  3980. <tr>
  3981. <td>
  3982. <code>value</code></br>
  3983. <em>
  3984. string
  3985. </em>
  3986. </td>
  3987. <td>
  3988. <em>(Optional)</em>
  3989. <p>Value can be specified directly to set a value without using a secret.</p>
  3990. </td>
  3991. </tr>
  3992. <tr>
  3993. <td>
  3994. <code>secretRef</code></br>
  3995. <em>
  3996. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  3997. External Secrets meta/v1.SecretKeySelector
  3998. </a>
  3999. </em>
  4000. </td>
  4001. <td>
  4002. <em>(Optional)</em>
  4003. <p>SecretRef references a key in a secret that will be used as value.</p>
  4004. </td>
  4005. </tr>
  4006. </tbody>
  4007. </table>
  4008. <h3 id="external-secrets.io/v1.Device42Auth">Device42Auth
  4009. </h3>
  4010. <p>
  4011. (<em>Appears on:</em>
  4012. <a href="#external-secrets.io/v1.Device42Provider">Device42Provider</a>)
  4013. </p>
  4014. <p>
  4015. </p>
  4016. <table>
  4017. <thead>
  4018. <tr>
  4019. <th>Field</th>
  4020. <th>Description</th>
  4021. </tr>
  4022. </thead>
  4023. <tbody>
  4024. <tr>
  4025. <td>
  4026. <code>secretRef</code></br>
  4027. <em>
  4028. <a href="#external-secrets.io/v1.Device42SecretRef">
  4029. Device42SecretRef
  4030. </a>
  4031. </em>
  4032. </td>
  4033. <td>
  4034. </td>
  4035. </tr>
  4036. </tbody>
  4037. </table>
  4038. <h3 id="external-secrets.io/v1.Device42Provider">Device42Provider
  4039. </h3>
  4040. <p>
  4041. (<em>Appears on:</em>
  4042. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  4043. </p>
  4044. <p>
  4045. <p>Device42Provider configures a store to sync secrets with a Device42 instance.</p>
  4046. </p>
  4047. <table>
  4048. <thead>
  4049. <tr>
  4050. <th>Field</th>
  4051. <th>Description</th>
  4052. </tr>
  4053. </thead>
  4054. <tbody>
  4055. <tr>
  4056. <td>
  4057. <code>host</code></br>
  4058. <em>
  4059. string
  4060. </em>
  4061. </td>
  4062. <td>
  4063. <p>URL configures the Device42 instance URL.</p>
  4064. </td>
  4065. </tr>
  4066. <tr>
  4067. <td>
  4068. <code>auth</code></br>
  4069. <em>
  4070. <a href="#external-secrets.io/v1.Device42Auth">
  4071. Device42Auth
  4072. </a>
  4073. </em>
  4074. </td>
  4075. <td>
  4076. <p>Auth configures how secret-manager authenticates with a Device42 instance.</p>
  4077. </td>
  4078. </tr>
  4079. </tbody>
  4080. </table>
  4081. <h3 id="external-secrets.io/v1.Device42SecretRef">Device42SecretRef
  4082. </h3>
  4083. <p>
  4084. (<em>Appears on:</em>
  4085. <a href="#external-secrets.io/v1.Device42Auth">Device42Auth</a>)
  4086. </p>
  4087. <p>
  4088. </p>
  4089. <table>
  4090. <thead>
  4091. <tr>
  4092. <th>Field</th>
  4093. <th>Description</th>
  4094. </tr>
  4095. </thead>
  4096. <tbody>
  4097. <tr>
  4098. <td>
  4099. <code>credentials</code></br>
  4100. <em>
  4101. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  4102. External Secrets meta/v1.SecretKeySelector
  4103. </a>
  4104. </em>
  4105. </td>
  4106. <td>
  4107. <em>(Optional)</em>
  4108. <p>Username / Password is used for authentication.</p>
  4109. </td>
  4110. </tr>
  4111. </tbody>
  4112. </table>
  4113. <h3 id="external-secrets.io/v1.DopplerAuth">DopplerAuth
  4114. </h3>
  4115. <p>
  4116. (<em>Appears on:</em>
  4117. <a href="#external-secrets.io/v1.DopplerProvider">DopplerProvider</a>)
  4118. </p>
  4119. <p>
  4120. </p>
  4121. <table>
  4122. <thead>
  4123. <tr>
  4124. <th>Field</th>
  4125. <th>Description</th>
  4126. </tr>
  4127. </thead>
  4128. <tbody>
  4129. <tr>
  4130. <td>
  4131. <code>secretRef</code></br>
  4132. <em>
  4133. <a href="#external-secrets.io/v1.DopplerAuthSecretRef">
  4134. DopplerAuthSecretRef
  4135. </a>
  4136. </em>
  4137. </td>
  4138. <td>
  4139. </td>
  4140. </tr>
  4141. </tbody>
  4142. </table>
  4143. <h3 id="external-secrets.io/v1.DopplerAuthSecretRef">DopplerAuthSecretRef
  4144. </h3>
  4145. <p>
  4146. (<em>Appears on:</em>
  4147. <a href="#external-secrets.io/v1.DopplerAuth">DopplerAuth</a>)
  4148. </p>
  4149. <p>
  4150. </p>
  4151. <table>
  4152. <thead>
  4153. <tr>
  4154. <th>Field</th>
  4155. <th>Description</th>
  4156. </tr>
  4157. </thead>
  4158. <tbody>
  4159. <tr>
  4160. <td>
  4161. <code>dopplerToken</code></br>
  4162. <em>
  4163. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  4164. External Secrets meta/v1.SecretKeySelector
  4165. </a>
  4166. </em>
  4167. </td>
  4168. <td>
  4169. <p>The DopplerToken is used for authentication.
  4170. See <a href="https://docs.doppler.com/reference/api#authentication">https://docs.doppler.com/reference/api#authentication</a> for auth token types.
  4171. The Key attribute defaults to dopplerToken if not specified.</p>
  4172. </td>
  4173. </tr>
  4174. </tbody>
  4175. </table>
  4176. <h3 id="external-secrets.io/v1.DopplerProvider">DopplerProvider
  4177. </h3>
  4178. <p>
  4179. (<em>Appears on:</em>
  4180. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  4181. </p>
  4182. <p>
  4183. <p>DopplerProvider configures a store to sync secrets using the Doppler provider.
  4184. Project and Config are required if not using a Service Token.</p>
  4185. </p>
  4186. <table>
  4187. <thead>
  4188. <tr>
  4189. <th>Field</th>
  4190. <th>Description</th>
  4191. </tr>
  4192. </thead>
  4193. <tbody>
  4194. <tr>
  4195. <td>
  4196. <code>auth</code></br>
  4197. <em>
  4198. <a href="#external-secrets.io/v1.DopplerAuth">
  4199. DopplerAuth
  4200. </a>
  4201. </em>
  4202. </td>
  4203. <td>
  4204. <p>Auth configures how the Operator authenticates with the Doppler API</p>
  4205. </td>
  4206. </tr>
  4207. <tr>
  4208. <td>
  4209. <code>project</code></br>
  4210. <em>
  4211. string
  4212. </em>
  4213. </td>
  4214. <td>
  4215. <em>(Optional)</em>
  4216. <p>Doppler project (required if not using a Service Token)</p>
  4217. </td>
  4218. </tr>
  4219. <tr>
  4220. <td>
  4221. <code>config</code></br>
  4222. <em>
  4223. string
  4224. </em>
  4225. </td>
  4226. <td>
  4227. <em>(Optional)</em>
  4228. <p>Doppler config (required if not using a Service Token)</p>
  4229. </td>
  4230. </tr>
  4231. <tr>
  4232. <td>
  4233. <code>nameTransformer</code></br>
  4234. <em>
  4235. string
  4236. </em>
  4237. </td>
  4238. <td>
  4239. <em>(Optional)</em>
  4240. <p>Environment variable compatible name transforms that change secret names to a different format</p>
  4241. </td>
  4242. </tr>
  4243. <tr>
  4244. <td>
  4245. <code>format</code></br>
  4246. <em>
  4247. string
  4248. </em>
  4249. </td>
  4250. <td>
  4251. <em>(Optional)</em>
  4252. <p>Format enables the downloading of secrets as a file (string)</p>
  4253. </td>
  4254. </tr>
  4255. </tbody>
  4256. </table>
  4257. <h3 id="external-secrets.io/v1.ExternalSecret">ExternalSecret
  4258. </h3>
  4259. <p>
  4260. <p>ExternalSecret is the Schema for the external-secrets API.</p>
  4261. </p>
  4262. <table>
  4263. <thead>
  4264. <tr>
  4265. <th>Field</th>
  4266. <th>Description</th>
  4267. </tr>
  4268. </thead>
  4269. <tbody>
  4270. <tr>
  4271. <td>
  4272. <code>metadata</code></br>
  4273. <em>
  4274. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#objectmeta-v1-meta">
  4275. Kubernetes meta/v1.ObjectMeta
  4276. </a>
  4277. </em>
  4278. </td>
  4279. <td>
  4280. Refer to the Kubernetes API documentation for the fields of the
  4281. <code>metadata</code> field.
  4282. </td>
  4283. </tr>
  4284. <tr>
  4285. <td>
  4286. <code>spec</code></br>
  4287. <em>
  4288. <a href="#external-secrets.io/v1.ExternalSecretSpec">
  4289. ExternalSecretSpec
  4290. </a>
  4291. </em>
  4292. </td>
  4293. <td>
  4294. <br/>
  4295. <br/>
  4296. <table>
  4297. <tr>
  4298. <td>
  4299. <code>secretStoreRef</code></br>
  4300. <em>
  4301. <a href="#external-secrets.io/v1.SecretStoreRef">
  4302. SecretStoreRef
  4303. </a>
  4304. </em>
  4305. </td>
  4306. <td>
  4307. <em>(Optional)</em>
  4308. </td>
  4309. </tr>
  4310. <tr>
  4311. <td>
  4312. <code>target</code></br>
  4313. <em>
  4314. <a href="#external-secrets.io/v1.ExternalSecretTarget">
  4315. ExternalSecretTarget
  4316. </a>
  4317. </em>
  4318. </td>
  4319. <td>
  4320. <em>(Optional)</em>
  4321. </td>
  4322. </tr>
  4323. <tr>
  4324. <td>
  4325. <code>refreshPolicy</code></br>
  4326. <em>
  4327. <a href="#external-secrets.io/v1.ExternalSecretRefreshPolicy">
  4328. ExternalSecretRefreshPolicy
  4329. </a>
  4330. </em>
  4331. </td>
  4332. <td>
  4333. <em>(Optional)</em>
  4334. <p>RefreshPolicy determines how the ExternalSecret should be refreshed:
  4335. - CreatedOnce: Creates the Secret only if it does not exist and does not update it thereafter
  4336. - Periodic: Synchronizes the Secret from the external source at regular intervals specified by refreshInterval.
  4337. No periodic updates occur if refreshInterval is 0.
  4338. - OnChange: Only synchronizes the Secret when the ExternalSecret&rsquo;s metadata or specification changes</p>
  4339. </td>
  4340. </tr>
  4341. <tr>
  4342. <td>
  4343. <code>refreshInterval</code></br>
  4344. <em>
  4345. <a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration">
  4346. Kubernetes meta/v1.Duration
  4347. </a>
  4348. </em>
  4349. </td>
  4350. <td>
  4351. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
  4352. specified as Golang Duration strings.
  4353. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  4354. Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
  4355. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  4356. </td>
  4357. </tr>
  4358. <tr>
  4359. <td>
  4360. <code>data</code></br>
  4361. <em>
  4362. <a href="#external-secrets.io/v1.ExternalSecretData">
  4363. []ExternalSecretData
  4364. </a>
  4365. </em>
  4366. </td>
  4367. <td>
  4368. <em>(Optional)</em>
  4369. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  4370. </td>
  4371. </tr>
  4372. <tr>
  4373. <td>
  4374. <code>dataFrom</code></br>
  4375. <em>
  4376. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">
  4377. []ExternalSecretDataFromRemoteRef
  4378. </a>
  4379. </em>
  4380. </td>
  4381. <td>
  4382. <em>(Optional)</em>
  4383. <p>DataFrom is used to fetch all properties from a specific Provider data
  4384. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  4385. </td>
  4386. </tr>
  4387. </table>
  4388. </td>
  4389. </tr>
  4390. <tr>
  4391. <td>
  4392. <code>status</code></br>
  4393. <em>
  4394. <a href="#external-secrets.io/v1.ExternalSecretStatus">
  4395. ExternalSecretStatus
  4396. </a>
  4397. </em>
  4398. </td>
  4399. <td>
  4400. </td>
  4401. </tr>
  4402. </tbody>
  4403. </table>
  4404. <h3 id="external-secrets.io/v1.ExternalSecretConditionType">ExternalSecretConditionType
  4405. (<code>string</code> alias)</p></h3>
  4406. <p>
  4407. (<em>Appears on:</em>
  4408. <a href="#external-secrets.io/v1.ExternalSecretStatusCondition">ExternalSecretStatusCondition</a>)
  4409. </p>
  4410. <p>
  4411. </p>
  4412. <table>
  4413. <thead>
  4414. <tr>
  4415. <th>Value</th>
  4416. <th>Description</th>
  4417. </tr>
  4418. </thead>
  4419. <tbody><tr><td><p>&#34;Deleted&#34;</p></td>
  4420. <td></td>
  4421. </tr><tr><td><p>&#34;Ready&#34;</p></td>
  4422. <td></td>
  4423. </tr></tbody>
  4424. </table>
  4425. <h3 id="external-secrets.io/v1.ExternalSecretConversionStrategy">ExternalSecretConversionStrategy
  4426. (<code>string</code> alias)</p></h3>
  4427. <p>
  4428. (<em>Appears on:</em>
  4429. <a href="#external-secrets.io/v1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef</a>,
  4430. <a href="#external-secrets.io/v1.ExternalSecretFind">ExternalSecretFind</a>)
  4431. </p>
  4432. <p>
  4433. </p>
  4434. <table>
  4435. <thead>
  4436. <tr>
  4437. <th>Value</th>
  4438. <th>Description</th>
  4439. </tr>
  4440. </thead>
  4441. <tbody><tr><td><p>&#34;Default&#34;</p></td>
  4442. <td></td>
  4443. </tr><tr><td><p>&#34;Unicode&#34;</p></td>
  4444. <td></td>
  4445. </tr></tbody>
  4446. </table>
  4447. <h3 id="external-secrets.io/v1.ExternalSecretCreationPolicy">ExternalSecretCreationPolicy
  4448. (<code>string</code> alias)</p></h3>
  4449. <p>
  4450. (<em>Appears on:</em>
  4451. <a href="#external-secrets.io/v1.ExternalSecretTarget">ExternalSecretTarget</a>)
  4452. </p>
  4453. <p>
  4454. <p>ExternalSecretCreationPolicy defines rules on how to create the resulting Secret.</p>
  4455. </p>
  4456. <table>
  4457. <thead>
  4458. <tr>
  4459. <th>Value</th>
  4460. <th>Description</th>
  4461. </tr>
  4462. </thead>
  4463. <tbody><tr><td><p>&#34;Merge&#34;</p></td>
  4464. <td><p>Merge does not create the Secret, but merges the data fields to the Secret.</p>
  4465. </td>
  4466. </tr><tr><td><p>&#34;None&#34;</p></td>
  4467. <td><p>None does not create a Secret (future use with injector).</p>
  4468. </td>
  4469. </tr><tr><td><p>&#34;Orphan&#34;</p></td>
  4470. <td><p>Orphan creates the Secret and does not set the ownerReference.
  4471. I.e. it will be orphaned after the deletion of the ExternalSecret.</p>
  4472. </td>
  4473. </tr><tr><td><p>&#34;Owner&#34;</p></td>
  4474. <td><p>Owner creates the Secret and sets .metadata.ownerReferences to the ExternalSecret resource.</p>
  4475. </td>
  4476. </tr></tbody>
  4477. </table>
  4478. <h3 id="external-secrets.io/v1.ExternalSecretData">ExternalSecretData
  4479. </h3>
  4480. <p>
  4481. (<em>Appears on:</em>
  4482. <a href="#external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec</a>)
  4483. </p>
  4484. <p>
  4485. <p>ExternalSecretData defines the connection between the Kubernetes Secret key (spec.data.<key>) and the Provider data.</p>
  4486. </p>
  4487. <table>
  4488. <thead>
  4489. <tr>
  4490. <th>Field</th>
  4491. <th>Description</th>
  4492. </tr>
  4493. </thead>
  4494. <tbody>
  4495. <tr>
  4496. <td>
  4497. <code>secretKey</code></br>
  4498. <em>
  4499. string
  4500. </em>
  4501. </td>
  4502. <td>
  4503. <p>The key in the Kubernetes Secret to store the value.</p>
  4504. </td>
  4505. </tr>
  4506. <tr>
  4507. <td>
  4508. <code>remoteRef</code></br>
  4509. <em>
  4510. <a href="#external-secrets.io/v1.ExternalSecretDataRemoteRef">
  4511. ExternalSecretDataRemoteRef
  4512. </a>
  4513. </em>
  4514. </td>
  4515. <td>
  4516. <p>RemoteRef points to the remote secret and defines
  4517. which secret (version/property/..) to fetch.</p>
  4518. </td>
  4519. </tr>
  4520. <tr>
  4521. <td>
  4522. <code>sourceRef</code></br>
  4523. <em>
  4524. <a href="#external-secrets.io/v1.StoreSourceRef">
  4525. StoreSourceRef
  4526. </a>
  4527. </em>
  4528. </td>
  4529. <td>
  4530. <p>SourceRef allows you to override the source
  4531. from which the value will be pulled.</p>
  4532. </td>
  4533. </tr>
  4534. </tbody>
  4535. </table>
  4536. <h3 id="external-secrets.io/v1.ExternalSecretDataFromRemoteRef">ExternalSecretDataFromRemoteRef
  4537. </h3>
  4538. <p>
  4539. (<em>Appears on:</em>
  4540. <a href="#external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec</a>)
  4541. </p>
  4542. <p>
  4543. </p>
  4544. <table>
  4545. <thead>
  4546. <tr>
  4547. <th>Field</th>
  4548. <th>Description</th>
  4549. </tr>
  4550. </thead>
  4551. <tbody>
  4552. <tr>
  4553. <td>
  4554. <code>extract</code></br>
  4555. <em>
  4556. <a href="#external-secrets.io/v1.ExternalSecretDataRemoteRef">
  4557. ExternalSecretDataRemoteRef
  4558. </a>
  4559. </em>
  4560. </td>
  4561. <td>
  4562. <em>(Optional)</em>
  4563. <p>Used to extract multiple key/value pairs from one secret
  4564. Note: Extract does not support sourceRef.Generator or sourceRef.GeneratorRef.</p>
  4565. </td>
  4566. </tr>
  4567. <tr>
  4568. <td>
  4569. <code>find</code></br>
  4570. <em>
  4571. <a href="#external-secrets.io/v1.ExternalSecretFind">
  4572. ExternalSecretFind
  4573. </a>
  4574. </em>
  4575. </td>
  4576. <td>
  4577. <em>(Optional)</em>
  4578. <p>Used to find secrets based on tags or regular expressions
  4579. Note: Find does not support sourceRef.Generator or sourceRef.GeneratorRef.</p>
  4580. </td>
  4581. </tr>
  4582. <tr>
  4583. <td>
  4584. <code>rewrite</code></br>
  4585. <em>
  4586. <a href="#external-secrets.io/v1.ExternalSecretRewrite">
  4587. []ExternalSecretRewrite
  4588. </a>
  4589. </em>
  4590. </td>
  4591. <td>
  4592. <em>(Optional)</em>
  4593. <p>Used to rewrite secret Keys after getting them from the secret Provider
  4594. Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)</p>
  4595. </td>
  4596. </tr>
  4597. <tr>
  4598. <td>
  4599. <code>sourceRef</code></br>
  4600. <em>
  4601. <a href="#external-secrets.io/v1.StoreGeneratorSourceRef">
  4602. StoreGeneratorSourceRef
  4603. </a>
  4604. </em>
  4605. </td>
  4606. <td>
  4607. <p>SourceRef points to a store or generator
  4608. which contains secret values ready to use.
  4609. Use this in combination with Extract or Find pull values out of
  4610. a specific SecretStore.
  4611. When sourceRef points to a generator Extract or Find is not supported.
  4612. The generator returns a static map of values</p>
  4613. </td>
  4614. </tr>
  4615. </tbody>
  4616. </table>
  4617. <h3 id="external-secrets.io/v1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef
  4618. </h3>
  4619. <p>
  4620. (<em>Appears on:</em>
  4621. <a href="#external-secrets.io/v1.ExternalSecretData">ExternalSecretData</a>,
  4622. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">ExternalSecretDataFromRemoteRef</a>)
  4623. </p>
  4624. <p>
  4625. <p>ExternalSecretDataRemoteRef defines Provider data location.</p>
  4626. </p>
  4627. <table>
  4628. <thead>
  4629. <tr>
  4630. <th>Field</th>
  4631. <th>Description</th>
  4632. </tr>
  4633. </thead>
  4634. <tbody>
  4635. <tr>
  4636. <td>
  4637. <code>key</code></br>
  4638. <em>
  4639. string
  4640. </em>
  4641. </td>
  4642. <td>
  4643. <p>Key is the key used in the Provider, mandatory</p>
  4644. </td>
  4645. </tr>
  4646. <tr>
  4647. <td>
  4648. <code>metadataPolicy</code></br>
  4649. <em>
  4650. <a href="#external-secrets.io/v1.ExternalSecretMetadataPolicy">
  4651. ExternalSecretMetadataPolicy
  4652. </a>
  4653. </em>
  4654. </td>
  4655. <td>
  4656. <em>(Optional)</em>
  4657. <p>Policy for fetching tags/labels from provider secrets, possible options are Fetch, None. Defaults to None</p>
  4658. </td>
  4659. </tr>
  4660. <tr>
  4661. <td>
  4662. <code>property</code></br>
  4663. <em>
  4664. string
  4665. </em>
  4666. </td>
  4667. <td>
  4668. <em>(Optional)</em>
  4669. <p>Used to select a specific property of the Provider value (if a map), if supported</p>
  4670. </td>
  4671. </tr>
  4672. <tr>
  4673. <td>
  4674. <code>version</code></br>
  4675. <em>
  4676. string
  4677. </em>
  4678. </td>
  4679. <td>
  4680. <em>(Optional)</em>
  4681. <p>Used to select a specific version of the Provider value, if supported</p>
  4682. </td>
  4683. </tr>
  4684. <tr>
  4685. <td>
  4686. <code>conversionStrategy</code></br>
  4687. <em>
  4688. <a href="#external-secrets.io/v1.ExternalSecretConversionStrategy">
  4689. ExternalSecretConversionStrategy
  4690. </a>
  4691. </em>
  4692. </td>
  4693. <td>
  4694. <em>(Optional)</em>
  4695. <p>Used to define a conversion Strategy</p>
  4696. </td>
  4697. </tr>
  4698. <tr>
  4699. <td>
  4700. <code>decodingStrategy</code></br>
  4701. <em>
  4702. <a href="#external-secrets.io/v1.ExternalSecretDecodingStrategy">
  4703. ExternalSecretDecodingStrategy
  4704. </a>
  4705. </em>
  4706. </td>
  4707. <td>
  4708. <em>(Optional)</em>
  4709. <p>Used to define a decoding Strategy</p>
  4710. </td>
  4711. </tr>
  4712. </tbody>
  4713. </table>
  4714. <h3 id="external-secrets.io/v1.ExternalSecretDecodingStrategy">ExternalSecretDecodingStrategy
  4715. (<code>string</code> alias)</p></h3>
  4716. <p>
  4717. (<em>Appears on:</em>
  4718. <a href="#external-secrets.io/v1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef</a>,
  4719. <a href="#external-secrets.io/v1.ExternalSecretFind">ExternalSecretFind</a>)
  4720. </p>
  4721. <p>
  4722. </p>
  4723. <table>
  4724. <thead>
  4725. <tr>
  4726. <th>Value</th>
  4727. <th>Description</th>
  4728. </tr>
  4729. </thead>
  4730. <tbody><tr><td><p>&#34;Auto&#34;</p></td>
  4731. <td></td>
  4732. </tr><tr><td><p>&#34;Base64&#34;</p></td>
  4733. <td></td>
  4734. </tr><tr><td><p>&#34;Base64URL&#34;</p></td>
  4735. <td></td>
  4736. </tr><tr><td><p>&#34;None&#34;</p></td>
  4737. <td></td>
  4738. </tr></tbody>
  4739. </table>
  4740. <h3 id="external-secrets.io/v1.ExternalSecretDeletionPolicy">ExternalSecretDeletionPolicy
  4741. (<code>string</code> alias)</p></h3>
  4742. <p>
  4743. (<em>Appears on:</em>
  4744. <a href="#external-secrets.io/v1.ExternalSecretTarget">ExternalSecretTarget</a>)
  4745. </p>
  4746. <p>
  4747. <p>ExternalSecretDeletionPolicy defines rules on how to delete the resulting Secret.</p>
  4748. </p>
  4749. <table>
  4750. <thead>
  4751. <tr>
  4752. <th>Value</th>
  4753. <th>Description</th>
  4754. </tr>
  4755. </thead>
  4756. <tbody><tr><td><p>&#34;Delete&#34;</p></td>
  4757. <td><p>Delete deletes the secret if all provider secrets are deleted.
  4758. If a secret gets deleted on the provider side and is not accessible
  4759. anymore this is not considered an error and the ExternalSecret
  4760. does not go into SecretSyncedError status.</p>
  4761. </td>
  4762. </tr><tr><td><p>&#34;Merge&#34;</p></td>
  4763. <td><p>Merge removes keys in the secret, but not the secret itself.
  4764. If a secret gets deleted on the provider side and is not accessible
  4765. anymore this is not considered an error and the ExternalSecret
  4766. does not go into SecretSyncedError status.</p>
  4767. </td>
  4768. </tr><tr><td><p>&#34;Retain&#34;</p></td>
  4769. <td><p>Retain will retain the secret if all provider secrets have been deleted.
  4770. If a provider secret does not exist the ExternalSecret gets into the
  4771. SecretSyncedError status.</p>
  4772. </td>
  4773. </tr></tbody>
  4774. </table>
  4775. <h3 id="external-secrets.io/v1.ExternalSecretFind">ExternalSecretFind
  4776. </h3>
  4777. <p>
  4778. (<em>Appears on:</em>
  4779. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">ExternalSecretDataFromRemoteRef</a>)
  4780. </p>
  4781. <p>
  4782. </p>
  4783. <table>
  4784. <thead>
  4785. <tr>
  4786. <th>Field</th>
  4787. <th>Description</th>
  4788. </tr>
  4789. </thead>
  4790. <tbody>
  4791. <tr>
  4792. <td>
  4793. <code>path</code></br>
  4794. <em>
  4795. string
  4796. </em>
  4797. </td>
  4798. <td>
  4799. <em>(Optional)</em>
  4800. <p>A root path to start the find operations.</p>
  4801. </td>
  4802. </tr>
  4803. <tr>
  4804. <td>
  4805. <code>name</code></br>
  4806. <em>
  4807. <a href="#external-secrets.io/v1.FindName">
  4808. FindName
  4809. </a>
  4810. </em>
  4811. </td>
  4812. <td>
  4813. <em>(Optional)</em>
  4814. <p>Finds secrets based on the name.</p>
  4815. </td>
  4816. </tr>
  4817. <tr>
  4818. <td>
  4819. <code>tags</code></br>
  4820. <em>
  4821. map[string]string
  4822. </em>
  4823. </td>
  4824. <td>
  4825. <em>(Optional)</em>
  4826. <p>Find secrets based on tags.</p>
  4827. </td>
  4828. </tr>
  4829. <tr>
  4830. <td>
  4831. <code>conversionStrategy</code></br>
  4832. <em>
  4833. <a href="#external-secrets.io/v1.ExternalSecretConversionStrategy">
  4834. ExternalSecretConversionStrategy
  4835. </a>
  4836. </em>
  4837. </td>
  4838. <td>
  4839. <em>(Optional)</em>
  4840. <p>Used to define a conversion Strategy</p>
  4841. </td>
  4842. </tr>
  4843. <tr>
  4844. <td>
  4845. <code>decodingStrategy</code></br>
  4846. <em>
  4847. <a href="#external-secrets.io/v1.ExternalSecretDecodingStrategy">
  4848. ExternalSecretDecodingStrategy
  4849. </a>
  4850. </em>
  4851. </td>
  4852. <td>
  4853. <em>(Optional)</em>
  4854. <p>Used to define a decoding Strategy</p>
  4855. </td>
  4856. </tr>
  4857. </tbody>
  4858. </table>
  4859. <h3 id="external-secrets.io/v1.ExternalSecretMetadata">ExternalSecretMetadata
  4860. </h3>
  4861. <p>
  4862. (<em>Appears on:</em>
  4863. <a href="#external-secrets.io/v1.ClusterExternalSecretSpec">ClusterExternalSecretSpec</a>)
  4864. </p>
  4865. <p>
  4866. <p>ExternalSecretMetadata defines metadata fields for the ExternalSecret generated by the ClusterExternalSecret.</p>
  4867. </p>
  4868. <table>
  4869. <thead>
  4870. <tr>
  4871. <th>Field</th>
  4872. <th>Description</th>
  4873. </tr>
  4874. </thead>
  4875. <tbody>
  4876. <tr>
  4877. <td>
  4878. <code>annotations</code></br>
  4879. <em>
  4880. map[string]string
  4881. </em>
  4882. </td>
  4883. <td>
  4884. <em>(Optional)</em>
  4885. </td>
  4886. </tr>
  4887. <tr>
  4888. <td>
  4889. <code>labels</code></br>
  4890. <em>
  4891. map[string]string
  4892. </em>
  4893. </td>
  4894. <td>
  4895. <em>(Optional)</em>
  4896. </td>
  4897. </tr>
  4898. </tbody>
  4899. </table>
  4900. <h3 id="external-secrets.io/v1.ExternalSecretMetadataPolicy">ExternalSecretMetadataPolicy
  4901. (<code>string</code> alias)</p></h3>
  4902. <p>
  4903. (<em>Appears on:</em>
  4904. <a href="#external-secrets.io/v1.ExternalSecretDataRemoteRef">ExternalSecretDataRemoteRef</a>)
  4905. </p>
  4906. <p>
  4907. </p>
  4908. <table>
  4909. <thead>
  4910. <tr>
  4911. <th>Value</th>
  4912. <th>Description</th>
  4913. </tr>
  4914. </thead>
  4915. <tbody><tr><td><p>&#34;Fetch&#34;</p></td>
  4916. <td></td>
  4917. </tr><tr><td><p>&#34;None&#34;</p></td>
  4918. <td></td>
  4919. </tr></tbody>
  4920. </table>
  4921. <h3 id="external-secrets.io/v1.ExternalSecretRefreshPolicy">ExternalSecretRefreshPolicy
  4922. (<code>string</code> alias)</p></h3>
  4923. <p>
  4924. (<em>Appears on:</em>
  4925. <a href="#external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec</a>)
  4926. </p>
  4927. <p>
  4928. </p>
  4929. <table>
  4930. <thead>
  4931. <tr>
  4932. <th>Value</th>
  4933. <th>Description</th>
  4934. </tr>
  4935. </thead>
  4936. <tbody><tr><td><p>&#34;CreatedOnce&#34;</p></td>
  4937. <td></td>
  4938. </tr><tr><td><p>&#34;OnChange&#34;</p></td>
  4939. <td></td>
  4940. </tr><tr><td><p>&#34;Periodic&#34;</p></td>
  4941. <td></td>
  4942. </tr></tbody>
  4943. </table>
  4944. <h3 id="external-secrets.io/v1.ExternalSecretRewrite">ExternalSecretRewrite
  4945. </h3>
  4946. <p>
  4947. (<em>Appears on:</em>
  4948. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">ExternalSecretDataFromRemoteRef</a>)
  4949. </p>
  4950. <p>
  4951. </p>
  4952. <table>
  4953. <thead>
  4954. <tr>
  4955. <th>Field</th>
  4956. <th>Description</th>
  4957. </tr>
  4958. </thead>
  4959. <tbody>
  4960. <tr>
  4961. <td>
  4962. <code>regexp</code></br>
  4963. <em>
  4964. <a href="#external-secrets.io/v1.ExternalSecretRewriteRegexp">
  4965. ExternalSecretRewriteRegexp
  4966. </a>
  4967. </em>
  4968. </td>
  4969. <td>
  4970. <em>(Optional)</em>
  4971. <p>Used to rewrite with regular expressions.
  4972. The resulting key will be the output of a regexp.ReplaceAll operation.</p>
  4973. </td>
  4974. </tr>
  4975. <tr>
  4976. <td>
  4977. <code>transform</code></br>
  4978. <em>
  4979. <a href="#external-secrets.io/v1.ExternalSecretRewriteTransform">
  4980. ExternalSecretRewriteTransform
  4981. </a>
  4982. </em>
  4983. </td>
  4984. <td>
  4985. <em>(Optional)</em>
  4986. <p>Used to apply string transformation on the secrets.
  4987. The resulting key will be the output of the template applied by the operation.</p>
  4988. </td>
  4989. </tr>
  4990. </tbody>
  4991. </table>
  4992. <h3 id="external-secrets.io/v1.ExternalSecretRewriteRegexp">ExternalSecretRewriteRegexp
  4993. </h3>
  4994. <p>
  4995. (<em>Appears on:</em>
  4996. <a href="#external-secrets.io/v1.ExternalSecretRewrite">ExternalSecretRewrite</a>)
  4997. </p>
  4998. <p>
  4999. </p>
  5000. <table>
  5001. <thead>
  5002. <tr>
  5003. <th>Field</th>
  5004. <th>Description</th>
  5005. </tr>
  5006. </thead>
  5007. <tbody>
  5008. <tr>
  5009. <td>
  5010. <code>source</code></br>
  5011. <em>
  5012. string
  5013. </em>
  5014. </td>
  5015. <td>
  5016. <p>Used to define the regular expression of a re.Compiler.</p>
  5017. </td>
  5018. </tr>
  5019. <tr>
  5020. <td>
  5021. <code>target</code></br>
  5022. <em>
  5023. string
  5024. </em>
  5025. </td>
  5026. <td>
  5027. <p>Used to define the target pattern of a ReplaceAll operation.</p>
  5028. </td>
  5029. </tr>
  5030. </tbody>
  5031. </table>
  5032. <h3 id="external-secrets.io/v1.ExternalSecretRewriteTransform">ExternalSecretRewriteTransform
  5033. </h3>
  5034. <p>
  5035. (<em>Appears on:</em>
  5036. <a href="#external-secrets.io/v1.ExternalSecretRewrite">ExternalSecretRewrite</a>)
  5037. </p>
  5038. <p>
  5039. </p>
  5040. <table>
  5041. <thead>
  5042. <tr>
  5043. <th>Field</th>
  5044. <th>Description</th>
  5045. </tr>
  5046. </thead>
  5047. <tbody>
  5048. <tr>
  5049. <td>
  5050. <code>template</code></br>
  5051. <em>
  5052. string
  5053. </em>
  5054. </td>
  5055. <td>
  5056. <p>Used to define the template to apply on the secret name.
  5057. <code>.value</code> will specify the secret name in the template.</p>
  5058. </td>
  5059. </tr>
  5060. </tbody>
  5061. </table>
  5062. <h3 id="external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec
  5063. </h3>
  5064. <p>
  5065. (<em>Appears on:</em>
  5066. <a href="#external-secrets.io/v1.ClusterExternalSecretSpec">ClusterExternalSecretSpec</a>,
  5067. <a href="#external-secrets.io/v1.ExternalSecret">ExternalSecret</a>)
  5068. </p>
  5069. <p>
  5070. <p>ExternalSecretSpec defines the desired state of ExternalSecret.</p>
  5071. </p>
  5072. <table>
  5073. <thead>
  5074. <tr>
  5075. <th>Field</th>
  5076. <th>Description</th>
  5077. </tr>
  5078. </thead>
  5079. <tbody>
  5080. <tr>
  5081. <td>
  5082. <code>secretStoreRef</code></br>
  5083. <em>
  5084. <a href="#external-secrets.io/v1.SecretStoreRef">
  5085. SecretStoreRef
  5086. </a>
  5087. </em>
  5088. </td>
  5089. <td>
  5090. <em>(Optional)</em>
  5091. </td>
  5092. </tr>
  5093. <tr>
  5094. <td>
  5095. <code>target</code></br>
  5096. <em>
  5097. <a href="#external-secrets.io/v1.ExternalSecretTarget">
  5098. ExternalSecretTarget
  5099. </a>
  5100. </em>
  5101. </td>
  5102. <td>
  5103. <em>(Optional)</em>
  5104. </td>
  5105. </tr>
  5106. <tr>
  5107. <td>
  5108. <code>refreshPolicy</code></br>
  5109. <em>
  5110. <a href="#external-secrets.io/v1.ExternalSecretRefreshPolicy">
  5111. ExternalSecretRefreshPolicy
  5112. </a>
  5113. </em>
  5114. </td>
  5115. <td>
  5116. <em>(Optional)</em>
  5117. <p>RefreshPolicy determines how the ExternalSecret should be refreshed:
  5118. - CreatedOnce: Creates the Secret only if it does not exist and does not update it thereafter
  5119. - Periodic: Synchronizes the Secret from the external source at regular intervals specified by refreshInterval.
  5120. No periodic updates occur if refreshInterval is 0.
  5121. - OnChange: Only synchronizes the Secret when the ExternalSecret&rsquo;s metadata or specification changes</p>
  5122. </td>
  5123. </tr>
  5124. <tr>
  5125. <td>
  5126. <code>refreshInterval</code></br>
  5127. <em>
  5128. <a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration">
  5129. Kubernetes meta/v1.Duration
  5130. </a>
  5131. </em>
  5132. </td>
  5133. <td>
  5134. <p>RefreshInterval is the amount of time before the values are read again from the SecretStore provider,
  5135. specified as Golang Duration strings.
  5136. Valid time units are &ldquo;ns&rdquo;, &ldquo;us&rdquo; (or &ldquo;µs&rdquo;), &ldquo;ms&rdquo;, &ldquo;s&rdquo;, &ldquo;m&rdquo;, &ldquo;h&rdquo;
  5137. Example values: &ldquo;1h&rdquo;, &ldquo;2h30m&rdquo;, &ldquo;10s&rdquo;
  5138. May be set to zero to fetch and create it once. Defaults to 1h.</p>
  5139. </td>
  5140. </tr>
  5141. <tr>
  5142. <td>
  5143. <code>data</code></br>
  5144. <em>
  5145. <a href="#external-secrets.io/v1.ExternalSecretData">
  5146. []ExternalSecretData
  5147. </a>
  5148. </em>
  5149. </td>
  5150. <td>
  5151. <em>(Optional)</em>
  5152. <p>Data defines the connection between the Kubernetes Secret keys and the Provider data</p>
  5153. </td>
  5154. </tr>
  5155. <tr>
  5156. <td>
  5157. <code>dataFrom</code></br>
  5158. <em>
  5159. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">
  5160. []ExternalSecretDataFromRemoteRef
  5161. </a>
  5162. </em>
  5163. </td>
  5164. <td>
  5165. <em>(Optional)</em>
  5166. <p>DataFrom is used to fetch all properties from a specific Provider data
  5167. If multiple entries are specified, the Secret keys are merged in the specified order</p>
  5168. </td>
  5169. </tr>
  5170. </tbody>
  5171. </table>
  5172. <h3 id="external-secrets.io/v1.ExternalSecretStatus">ExternalSecretStatus
  5173. </h3>
  5174. <p>
  5175. (<em>Appears on:</em>
  5176. <a href="#external-secrets.io/v1.ExternalSecret">ExternalSecret</a>)
  5177. </p>
  5178. <p>
  5179. </p>
  5180. <table>
  5181. <thead>
  5182. <tr>
  5183. <th>Field</th>
  5184. <th>Description</th>
  5185. </tr>
  5186. </thead>
  5187. <tbody>
  5188. <tr>
  5189. <td>
  5190. <code>refreshTime</code></br>
  5191. <em>
  5192. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#time-v1-meta">
  5193. Kubernetes meta/v1.Time
  5194. </a>
  5195. </em>
  5196. </td>
  5197. <td>
  5198. <p>refreshTime is the time and date the external secret was fetched and
  5199. the target secret updated</p>
  5200. </td>
  5201. </tr>
  5202. <tr>
  5203. <td>
  5204. <code>syncedResourceVersion</code></br>
  5205. <em>
  5206. string
  5207. </em>
  5208. </td>
  5209. <td>
  5210. <p>SyncedResourceVersion keeps track of the last synced version</p>
  5211. </td>
  5212. </tr>
  5213. <tr>
  5214. <td>
  5215. <code>conditions</code></br>
  5216. <em>
  5217. <a href="#external-secrets.io/v1.ExternalSecretStatusCondition">
  5218. []ExternalSecretStatusCondition
  5219. </a>
  5220. </em>
  5221. </td>
  5222. <td>
  5223. <em>(Optional)</em>
  5224. </td>
  5225. </tr>
  5226. <tr>
  5227. <td>
  5228. <code>binding</code></br>
  5229. <em>
  5230. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#localobjectreference-v1-core">
  5231. Kubernetes core/v1.LocalObjectReference
  5232. </a>
  5233. </em>
  5234. </td>
  5235. <td>
  5236. <p>Binding represents a servicebinding.io Provisioned Service reference to the secret</p>
  5237. </td>
  5238. </tr>
  5239. </tbody>
  5240. </table>
  5241. <h3 id="external-secrets.io/v1.ExternalSecretStatusCondition">ExternalSecretStatusCondition
  5242. </h3>
  5243. <p>
  5244. (<em>Appears on:</em>
  5245. <a href="#external-secrets.io/v1.ExternalSecretStatus">ExternalSecretStatus</a>)
  5246. </p>
  5247. <p>
  5248. </p>
  5249. <table>
  5250. <thead>
  5251. <tr>
  5252. <th>Field</th>
  5253. <th>Description</th>
  5254. </tr>
  5255. </thead>
  5256. <tbody>
  5257. <tr>
  5258. <td>
  5259. <code>type</code></br>
  5260. <em>
  5261. <a href="#external-secrets.io/v1.ExternalSecretConditionType">
  5262. ExternalSecretConditionType
  5263. </a>
  5264. </em>
  5265. </td>
  5266. <td>
  5267. </td>
  5268. </tr>
  5269. <tr>
  5270. <td>
  5271. <code>status</code></br>
  5272. <em>
  5273. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#conditionstatus-v1-core">
  5274. Kubernetes core/v1.ConditionStatus
  5275. </a>
  5276. </em>
  5277. </td>
  5278. <td>
  5279. </td>
  5280. </tr>
  5281. <tr>
  5282. <td>
  5283. <code>reason</code></br>
  5284. <em>
  5285. string
  5286. </em>
  5287. </td>
  5288. <td>
  5289. <em>(Optional)</em>
  5290. </td>
  5291. </tr>
  5292. <tr>
  5293. <td>
  5294. <code>message</code></br>
  5295. <em>
  5296. string
  5297. </em>
  5298. </td>
  5299. <td>
  5300. <em>(Optional)</em>
  5301. </td>
  5302. </tr>
  5303. <tr>
  5304. <td>
  5305. <code>lastTransitionTime</code></br>
  5306. <em>
  5307. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#time-v1-meta">
  5308. Kubernetes meta/v1.Time
  5309. </a>
  5310. </em>
  5311. </td>
  5312. <td>
  5313. <em>(Optional)</em>
  5314. </td>
  5315. </tr>
  5316. </tbody>
  5317. </table>
  5318. <h3 id="external-secrets.io/v1.ExternalSecretTarget">ExternalSecretTarget
  5319. </h3>
  5320. <p>
  5321. (<em>Appears on:</em>
  5322. <a href="#external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec</a>)
  5323. </p>
  5324. <p>
  5325. <p>ExternalSecretTarget defines the Kubernetes Secret to be created
  5326. There can be only one target per ExternalSecret.</p>
  5327. </p>
  5328. <table>
  5329. <thead>
  5330. <tr>
  5331. <th>Field</th>
  5332. <th>Description</th>
  5333. </tr>
  5334. </thead>
  5335. <tbody>
  5336. <tr>
  5337. <td>
  5338. <code>name</code></br>
  5339. <em>
  5340. string
  5341. </em>
  5342. </td>
  5343. <td>
  5344. <em>(Optional)</em>
  5345. <p>The name of the Secret resource to be managed.
  5346. Defaults to the .metadata.name of the ExternalSecret resource</p>
  5347. </td>
  5348. </tr>
  5349. <tr>
  5350. <td>
  5351. <code>creationPolicy</code></br>
  5352. <em>
  5353. <a href="#external-secrets.io/v1.ExternalSecretCreationPolicy">
  5354. ExternalSecretCreationPolicy
  5355. </a>
  5356. </em>
  5357. </td>
  5358. <td>
  5359. <em>(Optional)</em>
  5360. <p>CreationPolicy defines rules on how to create the resulting Secret.
  5361. Defaults to &ldquo;Owner&rdquo;</p>
  5362. </td>
  5363. </tr>
  5364. <tr>
  5365. <td>
  5366. <code>deletionPolicy</code></br>
  5367. <em>
  5368. <a href="#external-secrets.io/v1.ExternalSecretDeletionPolicy">
  5369. ExternalSecretDeletionPolicy
  5370. </a>
  5371. </em>
  5372. </td>
  5373. <td>
  5374. <em>(Optional)</em>
  5375. <p>DeletionPolicy defines rules on how to delete the resulting Secret.
  5376. Defaults to &ldquo;Retain&rdquo;</p>
  5377. </td>
  5378. </tr>
  5379. <tr>
  5380. <td>
  5381. <code>template</code></br>
  5382. <em>
  5383. <a href="#external-secrets.io/v1.ExternalSecretTemplate">
  5384. ExternalSecretTemplate
  5385. </a>
  5386. </em>
  5387. </td>
  5388. <td>
  5389. <em>(Optional)</em>
  5390. <p>Template defines a blueprint for the created Secret resource.</p>
  5391. </td>
  5392. </tr>
  5393. <tr>
  5394. <td>
  5395. <code>immutable</code></br>
  5396. <em>
  5397. bool
  5398. </em>
  5399. </td>
  5400. <td>
  5401. <em>(Optional)</em>
  5402. <p>Immutable defines if the final secret will be immutable</p>
  5403. </td>
  5404. </tr>
  5405. </tbody>
  5406. </table>
  5407. <h3 id="external-secrets.io/v1.ExternalSecretTemplate">ExternalSecretTemplate
  5408. </h3>
  5409. <p>
  5410. (<em>Appears on:</em>
  5411. <a href="#external-secrets.io/v1.ExternalSecretTarget">ExternalSecretTarget</a>)
  5412. </p>
  5413. <p>
  5414. <p>ExternalSecretTemplate defines a blueprint for the created Secret resource.
  5415. we can not use native corev1.Secret, it will have empty ObjectMeta values: <a href="https://github.com/kubernetes-sigs/controller-tools/issues/448">https://github.com/kubernetes-sigs/controller-tools/issues/448</a></p>
  5416. </p>
  5417. <table>
  5418. <thead>
  5419. <tr>
  5420. <th>Field</th>
  5421. <th>Description</th>
  5422. </tr>
  5423. </thead>
  5424. <tbody>
  5425. <tr>
  5426. <td>
  5427. <code>type</code></br>
  5428. <em>
  5429. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#secrettype-v1-core">
  5430. Kubernetes core/v1.SecretType
  5431. </a>
  5432. </em>
  5433. </td>
  5434. <td>
  5435. <em>(Optional)</em>
  5436. </td>
  5437. </tr>
  5438. <tr>
  5439. <td>
  5440. <code>engineVersion</code></br>
  5441. <em>
  5442. <a href="#external-secrets.io/v1.TemplateEngineVersion">
  5443. TemplateEngineVersion
  5444. </a>
  5445. </em>
  5446. </td>
  5447. <td>
  5448. <p>EngineVersion specifies the template engine version
  5449. that should be used to compile/execute the
  5450. template specified in .data and .templateFrom[].</p>
  5451. </td>
  5452. </tr>
  5453. <tr>
  5454. <td>
  5455. <code>metadata</code></br>
  5456. <em>
  5457. <a href="#external-secrets.io/v1.ExternalSecretTemplateMetadata">
  5458. ExternalSecretTemplateMetadata
  5459. </a>
  5460. </em>
  5461. </td>
  5462. <td>
  5463. <em>(Optional)</em>
  5464. </td>
  5465. </tr>
  5466. <tr>
  5467. <td>
  5468. <code>mergePolicy</code></br>
  5469. <em>
  5470. <a href="#external-secrets.io/v1.TemplateMergePolicy">
  5471. TemplateMergePolicy
  5472. </a>
  5473. </em>
  5474. </td>
  5475. <td>
  5476. </td>
  5477. </tr>
  5478. <tr>
  5479. <td>
  5480. <code>data</code></br>
  5481. <em>
  5482. map[string]string
  5483. </em>
  5484. </td>
  5485. <td>
  5486. <em>(Optional)</em>
  5487. </td>
  5488. </tr>
  5489. <tr>
  5490. <td>
  5491. <code>templateFrom</code></br>
  5492. <em>
  5493. <a href="#external-secrets.io/v1.TemplateFrom">
  5494. []TemplateFrom
  5495. </a>
  5496. </em>
  5497. </td>
  5498. <td>
  5499. <em>(Optional)</em>
  5500. </td>
  5501. </tr>
  5502. </tbody>
  5503. </table>
  5504. <h3 id="external-secrets.io/v1.ExternalSecretTemplateMetadata">ExternalSecretTemplateMetadata
  5505. </h3>
  5506. <p>
  5507. (<em>Appears on:</em>
  5508. <a href="#external-secrets.io/v1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  5509. </p>
  5510. <p>
  5511. <p>ExternalSecretTemplateMetadata defines metadata fields for the Secret blueprint.</p>
  5512. </p>
  5513. <table>
  5514. <thead>
  5515. <tr>
  5516. <th>Field</th>
  5517. <th>Description</th>
  5518. </tr>
  5519. </thead>
  5520. <tbody>
  5521. <tr>
  5522. <td>
  5523. <code>annotations</code></br>
  5524. <em>
  5525. map[string]string
  5526. </em>
  5527. </td>
  5528. <td>
  5529. <em>(Optional)</em>
  5530. </td>
  5531. </tr>
  5532. <tr>
  5533. <td>
  5534. <code>labels</code></br>
  5535. <em>
  5536. map[string]string
  5537. </em>
  5538. </td>
  5539. <td>
  5540. <em>(Optional)</em>
  5541. </td>
  5542. </tr>
  5543. </tbody>
  5544. </table>
  5545. <h3 id="external-secrets.io/v1.ExternalSecretValidator">ExternalSecretValidator
  5546. </h3>
  5547. <p>
  5548. </p>
  5549. <h3 id="external-secrets.io/v1.FakeProvider">FakeProvider
  5550. </h3>
  5551. <p>
  5552. (<em>Appears on:</em>
  5553. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  5554. </p>
  5555. <p>
  5556. <p>FakeProvider configures a fake provider that returns static values.</p>
  5557. </p>
  5558. <table>
  5559. <thead>
  5560. <tr>
  5561. <th>Field</th>
  5562. <th>Description</th>
  5563. </tr>
  5564. </thead>
  5565. <tbody>
  5566. <tr>
  5567. <td>
  5568. <code>data</code></br>
  5569. <em>
  5570. <a href="#external-secrets.io/v1.FakeProviderData">
  5571. []FakeProviderData
  5572. </a>
  5573. </em>
  5574. </td>
  5575. <td>
  5576. </td>
  5577. </tr>
  5578. </tbody>
  5579. </table>
  5580. <h3 id="external-secrets.io/v1.FakeProviderData">FakeProviderData
  5581. </h3>
  5582. <p>
  5583. (<em>Appears on:</em>
  5584. <a href="#external-secrets.io/v1.FakeProvider">FakeProvider</a>)
  5585. </p>
  5586. <p>
  5587. </p>
  5588. <table>
  5589. <thead>
  5590. <tr>
  5591. <th>Field</th>
  5592. <th>Description</th>
  5593. </tr>
  5594. </thead>
  5595. <tbody>
  5596. <tr>
  5597. <td>
  5598. <code>key</code></br>
  5599. <em>
  5600. string
  5601. </em>
  5602. </td>
  5603. <td>
  5604. </td>
  5605. </tr>
  5606. <tr>
  5607. <td>
  5608. <code>value</code></br>
  5609. <em>
  5610. string
  5611. </em>
  5612. </td>
  5613. <td>
  5614. </td>
  5615. </tr>
  5616. <tr>
  5617. <td>
  5618. <code>version</code></br>
  5619. <em>
  5620. string
  5621. </em>
  5622. </td>
  5623. <td>
  5624. </td>
  5625. </tr>
  5626. </tbody>
  5627. </table>
  5628. <h3 id="external-secrets.io/v1.FindName">FindName
  5629. </h3>
  5630. <p>
  5631. (<em>Appears on:</em>
  5632. <a href="#external-secrets.io/v1.ExternalSecretFind">ExternalSecretFind</a>)
  5633. </p>
  5634. <p>
  5635. </p>
  5636. <table>
  5637. <thead>
  5638. <tr>
  5639. <th>Field</th>
  5640. <th>Description</th>
  5641. </tr>
  5642. </thead>
  5643. <tbody>
  5644. <tr>
  5645. <td>
  5646. <code>regexp</code></br>
  5647. <em>
  5648. string
  5649. </em>
  5650. </td>
  5651. <td>
  5652. <em>(Optional)</em>
  5653. <p>Finds secrets base</p>
  5654. </td>
  5655. </tr>
  5656. </tbody>
  5657. </table>
  5658. <h3 id="external-secrets.io/v1.FortanixProvider">FortanixProvider
  5659. </h3>
  5660. <p>
  5661. (<em>Appears on:</em>
  5662. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  5663. </p>
  5664. <p>
  5665. </p>
  5666. <table>
  5667. <thead>
  5668. <tr>
  5669. <th>Field</th>
  5670. <th>Description</th>
  5671. </tr>
  5672. </thead>
  5673. <tbody>
  5674. <tr>
  5675. <td>
  5676. <code>apiUrl</code></br>
  5677. <em>
  5678. string
  5679. </em>
  5680. </td>
  5681. <td>
  5682. <p>APIURL is the URL of SDKMS API. Defaults to <code>sdkms.fortanix.com</code>.</p>
  5683. </td>
  5684. </tr>
  5685. <tr>
  5686. <td>
  5687. <code>apiKey</code></br>
  5688. <em>
  5689. <a href="#external-secrets.io/v1.FortanixProviderSecretRef">
  5690. FortanixProviderSecretRef
  5691. </a>
  5692. </em>
  5693. </td>
  5694. <td>
  5695. <p>APIKey is the API token to access SDKMS Applications.</p>
  5696. </td>
  5697. </tr>
  5698. </tbody>
  5699. </table>
  5700. <h3 id="external-secrets.io/v1.FortanixProviderSecretRef">FortanixProviderSecretRef
  5701. </h3>
  5702. <p>
  5703. (<em>Appears on:</em>
  5704. <a href="#external-secrets.io/v1.FortanixProvider">FortanixProvider</a>)
  5705. </p>
  5706. <p>
  5707. </p>
  5708. <table>
  5709. <thead>
  5710. <tr>
  5711. <th>Field</th>
  5712. <th>Description</th>
  5713. </tr>
  5714. </thead>
  5715. <tbody>
  5716. <tr>
  5717. <td>
  5718. <code>secretRef</code></br>
  5719. <em>
  5720. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  5721. External Secrets meta/v1.SecretKeySelector
  5722. </a>
  5723. </em>
  5724. </td>
  5725. <td>
  5726. <p>SecretRef is a reference to a secret containing the SDKMS API Key.</p>
  5727. </td>
  5728. </tr>
  5729. </tbody>
  5730. </table>
  5731. <h3 id="external-secrets.io/v1.GCPSMAuth">GCPSMAuth
  5732. </h3>
  5733. <p>
  5734. (<em>Appears on:</em>
  5735. <a href="#external-secrets.io/v1.GCPSMProvider">GCPSMProvider</a>)
  5736. </p>
  5737. <p>
  5738. </p>
  5739. <table>
  5740. <thead>
  5741. <tr>
  5742. <th>Field</th>
  5743. <th>Description</th>
  5744. </tr>
  5745. </thead>
  5746. <tbody>
  5747. <tr>
  5748. <td>
  5749. <code>secretRef</code></br>
  5750. <em>
  5751. <a href="#external-secrets.io/v1.GCPSMAuthSecretRef">
  5752. GCPSMAuthSecretRef
  5753. </a>
  5754. </em>
  5755. </td>
  5756. <td>
  5757. <em>(Optional)</em>
  5758. </td>
  5759. </tr>
  5760. <tr>
  5761. <td>
  5762. <code>workloadIdentity</code></br>
  5763. <em>
  5764. <a href="#external-secrets.io/v1.GCPWorkloadIdentity">
  5765. GCPWorkloadIdentity
  5766. </a>
  5767. </em>
  5768. </td>
  5769. <td>
  5770. <em>(Optional)</em>
  5771. </td>
  5772. </tr>
  5773. </tbody>
  5774. </table>
  5775. <h3 id="external-secrets.io/v1.GCPSMAuthSecretRef">GCPSMAuthSecretRef
  5776. </h3>
  5777. <p>
  5778. (<em>Appears on:</em>
  5779. <a href="#external-secrets.io/v1.GCPSMAuth">GCPSMAuth</a>)
  5780. </p>
  5781. <p>
  5782. </p>
  5783. <table>
  5784. <thead>
  5785. <tr>
  5786. <th>Field</th>
  5787. <th>Description</th>
  5788. </tr>
  5789. </thead>
  5790. <tbody>
  5791. <tr>
  5792. <td>
  5793. <code>secretAccessKeySecretRef</code></br>
  5794. <em>
  5795. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  5796. External Secrets meta/v1.SecretKeySelector
  5797. </a>
  5798. </em>
  5799. </td>
  5800. <td>
  5801. <em>(Optional)</em>
  5802. <p>The SecretAccessKey is used for authentication</p>
  5803. </td>
  5804. </tr>
  5805. </tbody>
  5806. </table>
  5807. <h3 id="external-secrets.io/v1.GCPSMProvider">GCPSMProvider
  5808. </h3>
  5809. <p>
  5810. (<em>Appears on:</em>
  5811. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  5812. </p>
  5813. <p>
  5814. <p>GCPSMProvider Configures a store to sync secrets using the GCP Secret Manager provider.</p>
  5815. </p>
  5816. <table>
  5817. <thead>
  5818. <tr>
  5819. <th>Field</th>
  5820. <th>Description</th>
  5821. </tr>
  5822. </thead>
  5823. <tbody>
  5824. <tr>
  5825. <td>
  5826. <code>auth</code></br>
  5827. <em>
  5828. <a href="#external-secrets.io/v1.GCPSMAuth">
  5829. GCPSMAuth
  5830. </a>
  5831. </em>
  5832. </td>
  5833. <td>
  5834. <em>(Optional)</em>
  5835. <p>Auth defines the information necessary to authenticate against GCP</p>
  5836. </td>
  5837. </tr>
  5838. <tr>
  5839. <td>
  5840. <code>projectID</code></br>
  5841. <em>
  5842. string
  5843. </em>
  5844. </td>
  5845. <td>
  5846. <p>ProjectID project where secret is located</p>
  5847. </td>
  5848. </tr>
  5849. <tr>
  5850. <td>
  5851. <code>location</code></br>
  5852. <em>
  5853. string
  5854. </em>
  5855. </td>
  5856. <td>
  5857. <p>Location optionally defines a location for a secret</p>
  5858. </td>
  5859. </tr>
  5860. </tbody>
  5861. </table>
  5862. <h3 id="external-secrets.io/v1.GCPWorkloadIdentity">GCPWorkloadIdentity
  5863. </h3>
  5864. <p>
  5865. (<em>Appears on:</em>
  5866. <a href="#external-secrets.io/v1.GCPSMAuth">GCPSMAuth</a>)
  5867. </p>
  5868. <p>
  5869. </p>
  5870. <table>
  5871. <thead>
  5872. <tr>
  5873. <th>Field</th>
  5874. <th>Description</th>
  5875. </tr>
  5876. </thead>
  5877. <tbody>
  5878. <tr>
  5879. <td>
  5880. <code>serviceAccountRef</code></br>
  5881. <em>
  5882. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  5883. External Secrets meta/v1.ServiceAccountSelector
  5884. </a>
  5885. </em>
  5886. </td>
  5887. <td>
  5888. </td>
  5889. </tr>
  5890. <tr>
  5891. <td>
  5892. <code>clusterLocation</code></br>
  5893. <em>
  5894. string
  5895. </em>
  5896. </td>
  5897. <td>
  5898. <em>(Optional)</em>
  5899. <p>ClusterLocation is the location of the cluster
  5900. If not specified, it fetches information from the metadata server</p>
  5901. </td>
  5902. </tr>
  5903. <tr>
  5904. <td>
  5905. <code>clusterName</code></br>
  5906. <em>
  5907. string
  5908. </em>
  5909. </td>
  5910. <td>
  5911. <em>(Optional)</em>
  5912. <p>ClusterName is the name of the cluster
  5913. If not specified, it fetches information from the metadata server</p>
  5914. </td>
  5915. </tr>
  5916. <tr>
  5917. <td>
  5918. <code>clusterProjectID</code></br>
  5919. <em>
  5920. string
  5921. </em>
  5922. </td>
  5923. <td>
  5924. <em>(Optional)</em>
  5925. <p>ClusterProjectID is the project ID of the cluster
  5926. If not specified, it fetches information from the metadata server</p>
  5927. </td>
  5928. </tr>
  5929. </tbody>
  5930. </table>
  5931. <h3 id="external-secrets.io/v1.GeneratorRef">GeneratorRef
  5932. </h3>
  5933. <p>
  5934. (<em>Appears on:</em>
  5935. <a href="#external-secrets.io/v1.StoreGeneratorSourceRef">StoreGeneratorSourceRef</a>,
  5936. <a href="#external-secrets.io/v1.StoreSourceRef">StoreSourceRef</a>)
  5937. </p>
  5938. <p>
  5939. <p>GeneratorRef points to a generator custom resource.</p>
  5940. </p>
  5941. <table>
  5942. <thead>
  5943. <tr>
  5944. <th>Field</th>
  5945. <th>Description</th>
  5946. </tr>
  5947. </thead>
  5948. <tbody>
  5949. <tr>
  5950. <td>
  5951. <code>apiVersion</code></br>
  5952. <em>
  5953. string
  5954. </em>
  5955. </td>
  5956. <td>
  5957. <p>Specify the apiVersion of the generator resource</p>
  5958. </td>
  5959. </tr>
  5960. <tr>
  5961. <td>
  5962. <code>kind</code></br>
  5963. <em>
  5964. string
  5965. </em>
  5966. </td>
  5967. <td>
  5968. <p>Specify the Kind of the generator resource</p>
  5969. </td>
  5970. </tr>
  5971. <tr>
  5972. <td>
  5973. <code>name</code></br>
  5974. <em>
  5975. string
  5976. </em>
  5977. </td>
  5978. <td>
  5979. <p>Specify the name of the generator resource</p>
  5980. </td>
  5981. </tr>
  5982. </tbody>
  5983. </table>
  5984. <h3 id="external-secrets.io/v1.GenericStore">GenericStore
  5985. </h3>
  5986. <p>
  5987. <p>GenericStore is a common interface for interacting with ClusterSecretStore
  5988. or a namespaced SecretStore.</p>
  5989. </p>
  5990. <h3 id="external-secrets.io/v1.GenericStoreValidator">GenericStoreValidator
  5991. </h3>
  5992. <p>
  5993. </p>
  5994. <h3 id="external-secrets.io/v1.GithubAppAuth">GithubAppAuth
  5995. </h3>
  5996. <p>
  5997. (<em>Appears on:</em>
  5998. <a href="#external-secrets.io/v1.GithubProvider">GithubProvider</a>)
  5999. </p>
  6000. <p>
  6001. </p>
  6002. <table>
  6003. <thead>
  6004. <tr>
  6005. <th>Field</th>
  6006. <th>Description</th>
  6007. </tr>
  6008. </thead>
  6009. <tbody>
  6010. <tr>
  6011. <td>
  6012. <code>privateKey</code></br>
  6013. <em>
  6014. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6015. External Secrets meta/v1.SecretKeySelector
  6016. </a>
  6017. </em>
  6018. </td>
  6019. <td>
  6020. </td>
  6021. </tr>
  6022. </tbody>
  6023. </table>
  6024. <h3 id="external-secrets.io/v1.GithubProvider">GithubProvider
  6025. </h3>
  6026. <p>
  6027. (<em>Appears on:</em>
  6028. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6029. </p>
  6030. <p>
  6031. <p>Configures a store to push secrets to Github Actions.</p>
  6032. </p>
  6033. <table>
  6034. <thead>
  6035. <tr>
  6036. <th>Field</th>
  6037. <th>Description</th>
  6038. </tr>
  6039. </thead>
  6040. <tbody>
  6041. <tr>
  6042. <td>
  6043. <code>url</code></br>
  6044. <em>
  6045. string
  6046. </em>
  6047. </td>
  6048. <td>
  6049. <p>URL configures the Github instance URL. Defaults to <a href="https://github.com/">https://github.com/</a>.</p>
  6050. </td>
  6051. </tr>
  6052. <tr>
  6053. <td>
  6054. <code>uploadURL</code></br>
  6055. <em>
  6056. string
  6057. </em>
  6058. </td>
  6059. <td>
  6060. <em>(Optional)</em>
  6061. <p>Upload URL for enterprise instances. Default to URL.</p>
  6062. </td>
  6063. </tr>
  6064. <tr>
  6065. <td>
  6066. <code>auth</code></br>
  6067. <em>
  6068. <a href="#external-secrets.io/v1.GithubAppAuth">
  6069. GithubAppAuth
  6070. </a>
  6071. </em>
  6072. </td>
  6073. <td>
  6074. <p>auth configures how secret-manager authenticates with a Github instance.</p>
  6075. </td>
  6076. </tr>
  6077. <tr>
  6078. <td>
  6079. <code>appID</code></br>
  6080. <em>
  6081. int64
  6082. </em>
  6083. </td>
  6084. <td>
  6085. <p>appID specifies the Github APP that will be used to authenticate the client</p>
  6086. </td>
  6087. </tr>
  6088. <tr>
  6089. <td>
  6090. <code>installationID</code></br>
  6091. <em>
  6092. int64
  6093. </em>
  6094. </td>
  6095. <td>
  6096. <p>installationID specifies the Github APP installation that will be used to authenticate the client</p>
  6097. </td>
  6098. </tr>
  6099. <tr>
  6100. <td>
  6101. <code>organization</code></br>
  6102. <em>
  6103. string
  6104. </em>
  6105. </td>
  6106. <td>
  6107. <p>organization will be used to fetch secrets from the Github organization</p>
  6108. </td>
  6109. </tr>
  6110. <tr>
  6111. <td>
  6112. <code>repository</code></br>
  6113. <em>
  6114. string
  6115. </em>
  6116. </td>
  6117. <td>
  6118. <em>(Optional)</em>
  6119. <p>repository will be used to fetch secrets from the Github repository within an organization</p>
  6120. </td>
  6121. </tr>
  6122. <tr>
  6123. <td>
  6124. <code>environment</code></br>
  6125. <em>
  6126. string
  6127. </em>
  6128. </td>
  6129. <td>
  6130. <em>(Optional)</em>
  6131. <p>environment will be used to fetch secrets from a particular environment within a github repository</p>
  6132. </td>
  6133. </tr>
  6134. </tbody>
  6135. </table>
  6136. <h3 id="external-secrets.io/v1.GitlabAuth">GitlabAuth
  6137. </h3>
  6138. <p>
  6139. (<em>Appears on:</em>
  6140. <a href="#external-secrets.io/v1.GitlabProvider">GitlabProvider</a>)
  6141. </p>
  6142. <p>
  6143. </p>
  6144. <table>
  6145. <thead>
  6146. <tr>
  6147. <th>Field</th>
  6148. <th>Description</th>
  6149. </tr>
  6150. </thead>
  6151. <tbody>
  6152. <tr>
  6153. <td>
  6154. <code>SecretRef</code></br>
  6155. <em>
  6156. <a href="#external-secrets.io/v1.GitlabSecretRef">
  6157. GitlabSecretRef
  6158. </a>
  6159. </em>
  6160. </td>
  6161. <td>
  6162. </td>
  6163. </tr>
  6164. </tbody>
  6165. </table>
  6166. <h3 id="external-secrets.io/v1.GitlabProvider">GitlabProvider
  6167. </h3>
  6168. <p>
  6169. (<em>Appears on:</em>
  6170. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6171. </p>
  6172. <p>
  6173. <p>Configures a store to sync secrets with a GitLab instance.</p>
  6174. </p>
  6175. <table>
  6176. <thead>
  6177. <tr>
  6178. <th>Field</th>
  6179. <th>Description</th>
  6180. </tr>
  6181. </thead>
  6182. <tbody>
  6183. <tr>
  6184. <td>
  6185. <code>url</code></br>
  6186. <em>
  6187. string
  6188. </em>
  6189. </td>
  6190. <td>
  6191. <p>URL configures the GitLab instance URL. Defaults to <a href="https://gitlab.com/">https://gitlab.com/</a>.</p>
  6192. </td>
  6193. </tr>
  6194. <tr>
  6195. <td>
  6196. <code>auth</code></br>
  6197. <em>
  6198. <a href="#external-secrets.io/v1.GitlabAuth">
  6199. GitlabAuth
  6200. </a>
  6201. </em>
  6202. </td>
  6203. <td>
  6204. <p>Auth configures how secret-manager authenticates with a GitLab instance.</p>
  6205. </td>
  6206. </tr>
  6207. <tr>
  6208. <td>
  6209. <code>projectID</code></br>
  6210. <em>
  6211. string
  6212. </em>
  6213. </td>
  6214. <td>
  6215. <p>ProjectID specifies a project where secrets are located.</p>
  6216. </td>
  6217. </tr>
  6218. <tr>
  6219. <td>
  6220. <code>inheritFromGroups</code></br>
  6221. <em>
  6222. bool
  6223. </em>
  6224. </td>
  6225. <td>
  6226. <p>InheritFromGroups specifies whether parent groups should be discovered and checked for secrets.</p>
  6227. </td>
  6228. </tr>
  6229. <tr>
  6230. <td>
  6231. <code>groupIDs</code></br>
  6232. <em>
  6233. []string
  6234. </em>
  6235. </td>
  6236. <td>
  6237. <p>GroupIDs specify, which gitlab groups to pull secrets from. Group secrets are read from left to right followed by the project variables.</p>
  6238. </td>
  6239. </tr>
  6240. <tr>
  6241. <td>
  6242. <code>environment</code></br>
  6243. <em>
  6244. string
  6245. </em>
  6246. </td>
  6247. <td>
  6248. <p>Environment environment_scope of gitlab CI/CD variables (Please see <a href="https://docs.gitlab.com/ee/ci/environments/#create-a-static-environment">https://docs.gitlab.com/ee/ci/environments/#create-a-static-environment</a> on how to create environments)</p>
  6249. </td>
  6250. </tr>
  6251. </tbody>
  6252. </table>
  6253. <h3 id="external-secrets.io/v1.GitlabSecretRef">GitlabSecretRef
  6254. </h3>
  6255. <p>
  6256. (<em>Appears on:</em>
  6257. <a href="#external-secrets.io/v1.GitlabAuth">GitlabAuth</a>)
  6258. </p>
  6259. <p>
  6260. </p>
  6261. <table>
  6262. <thead>
  6263. <tr>
  6264. <th>Field</th>
  6265. <th>Description</th>
  6266. </tr>
  6267. </thead>
  6268. <tbody>
  6269. <tr>
  6270. <td>
  6271. <code>accessToken</code></br>
  6272. <em>
  6273. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6274. External Secrets meta/v1.SecretKeySelector
  6275. </a>
  6276. </em>
  6277. </td>
  6278. <td>
  6279. <p>AccessToken is used for authentication.</p>
  6280. </td>
  6281. </tr>
  6282. </tbody>
  6283. </table>
  6284. <h3 id="external-secrets.io/v1.IBMAuth">IBMAuth
  6285. </h3>
  6286. <p>
  6287. (<em>Appears on:</em>
  6288. <a href="#external-secrets.io/v1.IBMProvider">IBMProvider</a>)
  6289. </p>
  6290. <p>
  6291. </p>
  6292. <table>
  6293. <thead>
  6294. <tr>
  6295. <th>Field</th>
  6296. <th>Description</th>
  6297. </tr>
  6298. </thead>
  6299. <tbody>
  6300. <tr>
  6301. <td>
  6302. <code>secretRef</code></br>
  6303. <em>
  6304. <a href="#external-secrets.io/v1.IBMAuthSecretRef">
  6305. IBMAuthSecretRef
  6306. </a>
  6307. </em>
  6308. </td>
  6309. <td>
  6310. </td>
  6311. </tr>
  6312. <tr>
  6313. <td>
  6314. <code>containerAuth</code></br>
  6315. <em>
  6316. <a href="#external-secrets.io/v1.IBMAuthContainerAuth">
  6317. IBMAuthContainerAuth
  6318. </a>
  6319. </em>
  6320. </td>
  6321. <td>
  6322. </td>
  6323. </tr>
  6324. </tbody>
  6325. </table>
  6326. <h3 id="external-secrets.io/v1.IBMAuthContainerAuth">IBMAuthContainerAuth
  6327. </h3>
  6328. <p>
  6329. (<em>Appears on:</em>
  6330. <a href="#external-secrets.io/v1.IBMAuth">IBMAuth</a>)
  6331. </p>
  6332. <p>
  6333. <p>IBM Container-based auth with IAM Trusted Profile.</p>
  6334. </p>
  6335. <table>
  6336. <thead>
  6337. <tr>
  6338. <th>Field</th>
  6339. <th>Description</th>
  6340. </tr>
  6341. </thead>
  6342. <tbody>
  6343. <tr>
  6344. <td>
  6345. <code>profile</code></br>
  6346. <em>
  6347. string
  6348. </em>
  6349. </td>
  6350. <td>
  6351. <p>the IBM Trusted Profile</p>
  6352. </td>
  6353. </tr>
  6354. <tr>
  6355. <td>
  6356. <code>tokenLocation</code></br>
  6357. <em>
  6358. string
  6359. </em>
  6360. </td>
  6361. <td>
  6362. <p>Location the token is mounted on the pod</p>
  6363. </td>
  6364. </tr>
  6365. <tr>
  6366. <td>
  6367. <code>iamEndpoint</code></br>
  6368. <em>
  6369. string
  6370. </em>
  6371. </td>
  6372. <td>
  6373. </td>
  6374. </tr>
  6375. </tbody>
  6376. </table>
  6377. <h3 id="external-secrets.io/v1.IBMAuthSecretRef">IBMAuthSecretRef
  6378. </h3>
  6379. <p>
  6380. (<em>Appears on:</em>
  6381. <a href="#external-secrets.io/v1.IBMAuth">IBMAuth</a>)
  6382. </p>
  6383. <p>
  6384. </p>
  6385. <table>
  6386. <thead>
  6387. <tr>
  6388. <th>Field</th>
  6389. <th>Description</th>
  6390. </tr>
  6391. </thead>
  6392. <tbody>
  6393. <tr>
  6394. <td>
  6395. <code>secretApiKeySecretRef</code></br>
  6396. <em>
  6397. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6398. External Secrets meta/v1.SecretKeySelector
  6399. </a>
  6400. </em>
  6401. </td>
  6402. <td>
  6403. <p>The SecretAccessKey is used for authentication</p>
  6404. </td>
  6405. </tr>
  6406. </tbody>
  6407. </table>
  6408. <h3 id="external-secrets.io/v1.IBMProvider">IBMProvider
  6409. </h3>
  6410. <p>
  6411. (<em>Appears on:</em>
  6412. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6413. </p>
  6414. <p>
  6415. <p>Configures an store to sync secrets using a IBM Cloud Secrets Manager
  6416. backend.</p>
  6417. </p>
  6418. <table>
  6419. <thead>
  6420. <tr>
  6421. <th>Field</th>
  6422. <th>Description</th>
  6423. </tr>
  6424. </thead>
  6425. <tbody>
  6426. <tr>
  6427. <td>
  6428. <code>auth</code></br>
  6429. <em>
  6430. <a href="#external-secrets.io/v1.IBMAuth">
  6431. IBMAuth
  6432. </a>
  6433. </em>
  6434. </td>
  6435. <td>
  6436. <p>Auth configures how secret-manager authenticates with the IBM secrets manager.</p>
  6437. </td>
  6438. </tr>
  6439. <tr>
  6440. <td>
  6441. <code>serviceUrl</code></br>
  6442. <em>
  6443. string
  6444. </em>
  6445. </td>
  6446. <td>
  6447. <p>ServiceURL is the Endpoint URL that is specific to the Secrets Manager service instance</p>
  6448. </td>
  6449. </tr>
  6450. </tbody>
  6451. </table>
  6452. <h3 id="external-secrets.io/v1.InfisicalAuth">InfisicalAuth
  6453. </h3>
  6454. <p>
  6455. (<em>Appears on:</em>
  6456. <a href="#external-secrets.io/v1.InfisicalProvider">InfisicalProvider</a>)
  6457. </p>
  6458. <p>
  6459. </p>
  6460. <table>
  6461. <thead>
  6462. <tr>
  6463. <th>Field</th>
  6464. <th>Description</th>
  6465. </tr>
  6466. </thead>
  6467. <tbody>
  6468. <tr>
  6469. <td>
  6470. <code>universalAuthCredentials</code></br>
  6471. <em>
  6472. <a href="#external-secrets.io/v1.UniversalAuthCredentials">
  6473. UniversalAuthCredentials
  6474. </a>
  6475. </em>
  6476. </td>
  6477. <td>
  6478. <em>(Optional)</em>
  6479. </td>
  6480. </tr>
  6481. </tbody>
  6482. </table>
  6483. <h3 id="external-secrets.io/v1.InfisicalProvider">InfisicalProvider
  6484. </h3>
  6485. <p>
  6486. (<em>Appears on:</em>
  6487. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6488. </p>
  6489. <p>
  6490. <p>InfisicalProvider configures a store to sync secrets using the Infisical provider.</p>
  6491. </p>
  6492. <table>
  6493. <thead>
  6494. <tr>
  6495. <th>Field</th>
  6496. <th>Description</th>
  6497. </tr>
  6498. </thead>
  6499. <tbody>
  6500. <tr>
  6501. <td>
  6502. <code>auth</code></br>
  6503. <em>
  6504. <a href="#external-secrets.io/v1.InfisicalAuth">
  6505. InfisicalAuth
  6506. </a>
  6507. </em>
  6508. </td>
  6509. <td>
  6510. <p>Auth configures how the Operator authenticates with the Infisical API</p>
  6511. </td>
  6512. </tr>
  6513. <tr>
  6514. <td>
  6515. <code>secretsScope</code></br>
  6516. <em>
  6517. <a href="#external-secrets.io/v1.MachineIdentityScopeInWorkspace">
  6518. MachineIdentityScopeInWorkspace
  6519. </a>
  6520. </em>
  6521. </td>
  6522. <td>
  6523. <p>SecretsScope defines the scope of the secrets within the workspace</p>
  6524. </td>
  6525. </tr>
  6526. <tr>
  6527. <td>
  6528. <code>hostAPI</code></br>
  6529. <em>
  6530. string
  6531. </em>
  6532. </td>
  6533. <td>
  6534. <em>(Optional)</em>
  6535. <p>HostAPI specifies the base URL of the Infisical API. If not provided, it defaults to &ldquo;<a href="https://app.infisical.com/api&quot;">https://app.infisical.com/api&rdquo;</a>.</p>
  6536. </td>
  6537. </tr>
  6538. </tbody>
  6539. </table>
  6540. <h3 id="external-secrets.io/v1.KeeperSecurityProvider">KeeperSecurityProvider
  6541. </h3>
  6542. <p>
  6543. (<em>Appears on:</em>
  6544. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6545. </p>
  6546. <p>
  6547. <p>KeeperSecurityProvider Configures a store to sync secrets using Keeper Security.</p>
  6548. </p>
  6549. <table>
  6550. <thead>
  6551. <tr>
  6552. <th>Field</th>
  6553. <th>Description</th>
  6554. </tr>
  6555. </thead>
  6556. <tbody>
  6557. <tr>
  6558. <td>
  6559. <code>authRef</code></br>
  6560. <em>
  6561. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6562. External Secrets meta/v1.SecretKeySelector
  6563. </a>
  6564. </em>
  6565. </td>
  6566. <td>
  6567. </td>
  6568. </tr>
  6569. <tr>
  6570. <td>
  6571. <code>folderID</code></br>
  6572. <em>
  6573. string
  6574. </em>
  6575. </td>
  6576. <td>
  6577. </td>
  6578. </tr>
  6579. </tbody>
  6580. </table>
  6581. <h3 id="external-secrets.io/v1.KubernetesAuth">KubernetesAuth
  6582. </h3>
  6583. <p>
  6584. (<em>Appears on:</em>
  6585. <a href="#external-secrets.io/v1.KubernetesProvider">KubernetesProvider</a>)
  6586. </p>
  6587. <p>
  6588. </p>
  6589. <table>
  6590. <thead>
  6591. <tr>
  6592. <th>Field</th>
  6593. <th>Description</th>
  6594. </tr>
  6595. </thead>
  6596. <tbody>
  6597. <tr>
  6598. <td>
  6599. <code>cert</code></br>
  6600. <em>
  6601. <a href="#external-secrets.io/v1.CertAuth">
  6602. CertAuth
  6603. </a>
  6604. </em>
  6605. </td>
  6606. <td>
  6607. <em>(Optional)</em>
  6608. <p>has both clientCert and clientKey as secretKeySelector</p>
  6609. </td>
  6610. </tr>
  6611. <tr>
  6612. <td>
  6613. <code>token</code></br>
  6614. <em>
  6615. <a href="#external-secrets.io/v1.TokenAuth">
  6616. TokenAuth
  6617. </a>
  6618. </em>
  6619. </td>
  6620. <td>
  6621. <em>(Optional)</em>
  6622. <p>use static token to authenticate with</p>
  6623. </td>
  6624. </tr>
  6625. <tr>
  6626. <td>
  6627. <code>serviceAccount</code></br>
  6628. <em>
  6629. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  6630. External Secrets meta/v1.ServiceAccountSelector
  6631. </a>
  6632. </em>
  6633. </td>
  6634. <td>
  6635. <em>(Optional)</em>
  6636. <p>points to a service account that should be used for authentication</p>
  6637. </td>
  6638. </tr>
  6639. </tbody>
  6640. </table>
  6641. <h3 id="external-secrets.io/v1.KubernetesProvider">KubernetesProvider
  6642. </h3>
  6643. <p>
  6644. (<em>Appears on:</em>
  6645. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6646. </p>
  6647. <p>
  6648. <p>Configures a store to sync secrets with a Kubernetes instance.</p>
  6649. </p>
  6650. <table>
  6651. <thead>
  6652. <tr>
  6653. <th>Field</th>
  6654. <th>Description</th>
  6655. </tr>
  6656. </thead>
  6657. <tbody>
  6658. <tr>
  6659. <td>
  6660. <code>server</code></br>
  6661. <em>
  6662. <a href="#external-secrets.io/v1.KubernetesServer">
  6663. KubernetesServer
  6664. </a>
  6665. </em>
  6666. </td>
  6667. <td>
  6668. <em>(Optional)</em>
  6669. <p>configures the Kubernetes server Address.</p>
  6670. </td>
  6671. </tr>
  6672. <tr>
  6673. <td>
  6674. <code>auth</code></br>
  6675. <em>
  6676. <a href="#external-secrets.io/v1.KubernetesAuth">
  6677. KubernetesAuth
  6678. </a>
  6679. </em>
  6680. </td>
  6681. <td>
  6682. <em>(Optional)</em>
  6683. <p>Auth configures how secret-manager authenticates with a Kubernetes instance.</p>
  6684. </td>
  6685. </tr>
  6686. <tr>
  6687. <td>
  6688. <code>authRef</code></br>
  6689. <em>
  6690. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6691. External Secrets meta/v1.SecretKeySelector
  6692. </a>
  6693. </em>
  6694. </td>
  6695. <td>
  6696. <em>(Optional)</em>
  6697. <p>A reference to a secret that contains the auth information.</p>
  6698. </td>
  6699. </tr>
  6700. <tr>
  6701. <td>
  6702. <code>remoteNamespace</code></br>
  6703. <em>
  6704. string
  6705. </em>
  6706. </td>
  6707. <td>
  6708. <em>(Optional)</em>
  6709. <p>Remote namespace to fetch the secrets from</p>
  6710. </td>
  6711. </tr>
  6712. </tbody>
  6713. </table>
  6714. <h3 id="external-secrets.io/v1.KubernetesServer">KubernetesServer
  6715. </h3>
  6716. <p>
  6717. (<em>Appears on:</em>
  6718. <a href="#external-secrets.io/v1.KubernetesProvider">KubernetesProvider</a>)
  6719. </p>
  6720. <p>
  6721. </p>
  6722. <table>
  6723. <thead>
  6724. <tr>
  6725. <th>Field</th>
  6726. <th>Description</th>
  6727. </tr>
  6728. </thead>
  6729. <tbody>
  6730. <tr>
  6731. <td>
  6732. <code>url</code></br>
  6733. <em>
  6734. string
  6735. </em>
  6736. </td>
  6737. <td>
  6738. <em>(Optional)</em>
  6739. <p>configures the Kubernetes server Address.</p>
  6740. </td>
  6741. </tr>
  6742. <tr>
  6743. <td>
  6744. <code>caBundle</code></br>
  6745. <em>
  6746. []byte
  6747. </em>
  6748. </td>
  6749. <td>
  6750. <em>(Optional)</em>
  6751. <p>CABundle is a base64-encoded CA certificate</p>
  6752. </td>
  6753. </tr>
  6754. <tr>
  6755. <td>
  6756. <code>caProvider</code></br>
  6757. <em>
  6758. <a href="#external-secrets.io/v1.CAProvider">
  6759. CAProvider
  6760. </a>
  6761. </em>
  6762. </td>
  6763. <td>
  6764. <em>(Optional)</em>
  6765. <p>see: <a href="https://external-secrets.io/v0.4.1/spec/#external-secrets.io/v1alpha1.CAProvider">https://external-secrets.io/v0.4.1/spec/#external-secrets.io/v1alpha1.CAProvider</a></p>
  6766. </td>
  6767. </tr>
  6768. </tbody>
  6769. </table>
  6770. <h3 id="external-secrets.io/v1.MachineIdentityScopeInWorkspace">MachineIdentityScopeInWorkspace
  6771. </h3>
  6772. <p>
  6773. (<em>Appears on:</em>
  6774. <a href="#external-secrets.io/v1.InfisicalProvider">InfisicalProvider</a>)
  6775. </p>
  6776. <p>
  6777. </p>
  6778. <table>
  6779. <thead>
  6780. <tr>
  6781. <th>Field</th>
  6782. <th>Description</th>
  6783. </tr>
  6784. </thead>
  6785. <tbody>
  6786. <tr>
  6787. <td>
  6788. <code>secretsPath</code></br>
  6789. <em>
  6790. string
  6791. </em>
  6792. </td>
  6793. <td>
  6794. <em>(Optional)</em>
  6795. <p>SecretsPath specifies the path to the secrets within the workspace. Defaults to &ldquo;/&rdquo; if not provided.</p>
  6796. </td>
  6797. </tr>
  6798. <tr>
  6799. <td>
  6800. <code>recursive</code></br>
  6801. <em>
  6802. bool
  6803. </em>
  6804. </td>
  6805. <td>
  6806. <em>(Optional)</em>
  6807. <p>Recursive indicates whether the secrets should be fetched recursively. Defaults to false if not provided.</p>
  6808. </td>
  6809. </tr>
  6810. <tr>
  6811. <td>
  6812. <code>environmentSlug</code></br>
  6813. <em>
  6814. string
  6815. </em>
  6816. </td>
  6817. <td>
  6818. <p>EnvironmentSlug is the required slug identifier for the environment.</p>
  6819. </td>
  6820. </tr>
  6821. <tr>
  6822. <td>
  6823. <code>projectSlug</code></br>
  6824. <em>
  6825. string
  6826. </em>
  6827. </td>
  6828. <td>
  6829. <p>ProjectSlug is the required slug identifier for the project.</p>
  6830. </td>
  6831. </tr>
  6832. <tr>
  6833. <td>
  6834. <code>expandSecretReferences</code></br>
  6835. <em>
  6836. bool
  6837. </em>
  6838. </td>
  6839. <td>
  6840. <em>(Optional)</em>
  6841. <p>ExpandSecretReferences indicates whether secret references should be expanded. Defaults to true if not provided.</p>
  6842. </td>
  6843. </tr>
  6844. </tbody>
  6845. </table>
  6846. <h3 id="external-secrets.io/v1.MaintenanceStatus">MaintenanceStatus
  6847. (<code>bool</code> alias)</p></h3>
  6848. <p>
  6849. </p>
  6850. <table>
  6851. <thead>
  6852. <tr>
  6853. <th>Value</th>
  6854. <th>Description</th>
  6855. </tr>
  6856. </thead>
  6857. <tbody><tr><td><p>true</p></td>
  6858. <td></td>
  6859. </tr><tr><td><p>false</p></td>
  6860. <td></td>
  6861. </tr></tbody>
  6862. </table>
  6863. <h3 id="external-secrets.io/v1.NTLMProtocol">NTLMProtocol
  6864. </h3>
  6865. <p>
  6866. (<em>Appears on:</em>
  6867. <a href="#external-secrets.io/v1.AuthorizationProtocol">AuthorizationProtocol</a>)
  6868. </p>
  6869. <p>
  6870. <p>NTLMProtocol contains the NTLM-specific configuration.</p>
  6871. </p>
  6872. <table>
  6873. <thead>
  6874. <tr>
  6875. <th>Field</th>
  6876. <th>Description</th>
  6877. </tr>
  6878. </thead>
  6879. <tbody>
  6880. <tr>
  6881. <td>
  6882. <code>usernameSecret</code></br>
  6883. <em>
  6884. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6885. External Secrets meta/v1.SecretKeySelector
  6886. </a>
  6887. </em>
  6888. </td>
  6889. <td>
  6890. </td>
  6891. </tr>
  6892. <tr>
  6893. <td>
  6894. <code>passwordSecret</code></br>
  6895. <em>
  6896. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6897. External Secrets meta/v1.SecretKeySelector
  6898. </a>
  6899. </em>
  6900. </td>
  6901. <td>
  6902. </td>
  6903. </tr>
  6904. </tbody>
  6905. </table>
  6906. <h3 id="external-secrets.io/v1.NoSecretError">NoSecretError
  6907. </h3>
  6908. <p>
  6909. <p>NoSecretError shall be returned when a GetSecret can not find the
  6910. desired secret. This is used for deletionPolicy.</p>
  6911. </p>
  6912. <h3 id="external-secrets.io/v1.NotModifiedError">NotModifiedError
  6913. </h3>
  6914. <p>
  6915. <p>NotModifiedError to signal that the webhook received no changes,
  6916. and it should just return without doing anything.</p>
  6917. </p>
  6918. <h3 id="external-secrets.io/v1.OnboardbaseAuthSecretRef">OnboardbaseAuthSecretRef
  6919. </h3>
  6920. <p>
  6921. (<em>Appears on:</em>
  6922. <a href="#external-secrets.io/v1.OnboardbaseProvider">OnboardbaseProvider</a>)
  6923. </p>
  6924. <p>
  6925. <p>OnboardbaseAuthSecretRef holds secret references for onboardbase API Key credentials.</p>
  6926. </p>
  6927. <table>
  6928. <thead>
  6929. <tr>
  6930. <th>Field</th>
  6931. <th>Description</th>
  6932. </tr>
  6933. </thead>
  6934. <tbody>
  6935. <tr>
  6936. <td>
  6937. <code>apiKeyRef</code></br>
  6938. <em>
  6939. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6940. External Secrets meta/v1.SecretKeySelector
  6941. </a>
  6942. </em>
  6943. </td>
  6944. <td>
  6945. <p>OnboardbaseAPIKey is the APIKey generated by an admin account.
  6946. It is used to recognize and authorize access to a project and environment within onboardbase</p>
  6947. </td>
  6948. </tr>
  6949. <tr>
  6950. <td>
  6951. <code>passcodeRef</code></br>
  6952. <em>
  6953. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  6954. External Secrets meta/v1.SecretKeySelector
  6955. </a>
  6956. </em>
  6957. </td>
  6958. <td>
  6959. <p>OnboardbasePasscode is the passcode attached to the API Key</p>
  6960. </td>
  6961. </tr>
  6962. </tbody>
  6963. </table>
  6964. <h3 id="external-secrets.io/v1.OnboardbaseProvider">OnboardbaseProvider
  6965. </h3>
  6966. <p>
  6967. (<em>Appears on:</em>
  6968. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  6969. </p>
  6970. <p>
  6971. <p>OnboardbaseProvider configures a store to sync secrets using the Onboardbase provider.
  6972. Project and Config are required if not using a Service Token.</p>
  6973. </p>
  6974. <table>
  6975. <thead>
  6976. <tr>
  6977. <th>Field</th>
  6978. <th>Description</th>
  6979. </tr>
  6980. </thead>
  6981. <tbody>
  6982. <tr>
  6983. <td>
  6984. <code>auth</code></br>
  6985. <em>
  6986. <a href="#external-secrets.io/v1.OnboardbaseAuthSecretRef">
  6987. OnboardbaseAuthSecretRef
  6988. </a>
  6989. </em>
  6990. </td>
  6991. <td>
  6992. <p>Auth configures how the Operator authenticates with the Onboardbase API</p>
  6993. </td>
  6994. </tr>
  6995. <tr>
  6996. <td>
  6997. <code>apiHost</code></br>
  6998. <em>
  6999. string
  7000. </em>
  7001. </td>
  7002. <td>
  7003. <p>APIHost use this to configure the host url for the API for selfhosted installation, default is <a href="https://public.onboardbase.com/api/v1/">https://public.onboardbase.com/api/v1/</a></p>
  7004. </td>
  7005. </tr>
  7006. <tr>
  7007. <td>
  7008. <code>project</code></br>
  7009. <em>
  7010. string
  7011. </em>
  7012. </td>
  7013. <td>
  7014. <p>Project is an onboardbase project that the secrets should be pulled from</p>
  7015. </td>
  7016. </tr>
  7017. <tr>
  7018. <td>
  7019. <code>environment</code></br>
  7020. <em>
  7021. string
  7022. </em>
  7023. </td>
  7024. <td>
  7025. <p>Environment is the name of an environmnent within a project to pull the secrets from</p>
  7026. </td>
  7027. </tr>
  7028. </tbody>
  7029. </table>
  7030. <h3 id="external-secrets.io/v1.OnePasswordAuth">OnePasswordAuth
  7031. </h3>
  7032. <p>
  7033. (<em>Appears on:</em>
  7034. <a href="#external-secrets.io/v1.OnePasswordProvider">OnePasswordProvider</a>)
  7035. </p>
  7036. <p>
  7037. <p>OnePasswordAuth contains a secretRef for credentials.</p>
  7038. </p>
  7039. <table>
  7040. <thead>
  7041. <tr>
  7042. <th>Field</th>
  7043. <th>Description</th>
  7044. </tr>
  7045. </thead>
  7046. <tbody>
  7047. <tr>
  7048. <td>
  7049. <code>secretRef</code></br>
  7050. <em>
  7051. <a href="#external-secrets.io/v1.OnePasswordAuthSecretRef">
  7052. OnePasswordAuthSecretRef
  7053. </a>
  7054. </em>
  7055. </td>
  7056. <td>
  7057. </td>
  7058. </tr>
  7059. </tbody>
  7060. </table>
  7061. <h3 id="external-secrets.io/v1.OnePasswordAuthSecretRef">OnePasswordAuthSecretRef
  7062. </h3>
  7063. <p>
  7064. (<em>Appears on:</em>
  7065. <a href="#external-secrets.io/v1.OnePasswordAuth">OnePasswordAuth</a>)
  7066. </p>
  7067. <p>
  7068. <p>OnePasswordAuthSecretRef holds secret references for 1Password credentials.</p>
  7069. </p>
  7070. <table>
  7071. <thead>
  7072. <tr>
  7073. <th>Field</th>
  7074. <th>Description</th>
  7075. </tr>
  7076. </thead>
  7077. <tbody>
  7078. <tr>
  7079. <td>
  7080. <code>connectTokenSecretRef</code></br>
  7081. <em>
  7082. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7083. External Secrets meta/v1.SecretKeySelector
  7084. </a>
  7085. </em>
  7086. </td>
  7087. <td>
  7088. <p>The ConnectToken is used for authentication to a 1Password Connect Server.</p>
  7089. </td>
  7090. </tr>
  7091. </tbody>
  7092. </table>
  7093. <h3 id="external-secrets.io/v1.OnePasswordProvider">OnePasswordProvider
  7094. </h3>
  7095. <p>
  7096. (<em>Appears on:</em>
  7097. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7098. </p>
  7099. <p>
  7100. <p>OnePasswordProvider configures a store to sync secrets using the 1Password Secret Manager provider.</p>
  7101. </p>
  7102. <table>
  7103. <thead>
  7104. <tr>
  7105. <th>Field</th>
  7106. <th>Description</th>
  7107. </tr>
  7108. </thead>
  7109. <tbody>
  7110. <tr>
  7111. <td>
  7112. <code>auth</code></br>
  7113. <em>
  7114. <a href="#external-secrets.io/v1.OnePasswordAuth">
  7115. OnePasswordAuth
  7116. </a>
  7117. </em>
  7118. </td>
  7119. <td>
  7120. <p>Auth defines the information necessary to authenticate against OnePassword Connect Server</p>
  7121. </td>
  7122. </tr>
  7123. <tr>
  7124. <td>
  7125. <code>connectHost</code></br>
  7126. <em>
  7127. string
  7128. </em>
  7129. </td>
  7130. <td>
  7131. <p>ConnectHost defines the OnePassword Connect Server to connect to</p>
  7132. </td>
  7133. </tr>
  7134. <tr>
  7135. <td>
  7136. <code>vaults</code></br>
  7137. <em>
  7138. map[string]int
  7139. </em>
  7140. </td>
  7141. <td>
  7142. <p>Vaults defines which OnePassword vaults to search in which order</p>
  7143. </td>
  7144. </tr>
  7145. </tbody>
  7146. </table>
  7147. <h3 id="external-secrets.io/v1.OracleAuth">OracleAuth
  7148. </h3>
  7149. <p>
  7150. (<em>Appears on:</em>
  7151. <a href="#external-secrets.io/v1.OracleProvider">OracleProvider</a>)
  7152. </p>
  7153. <p>
  7154. </p>
  7155. <table>
  7156. <thead>
  7157. <tr>
  7158. <th>Field</th>
  7159. <th>Description</th>
  7160. </tr>
  7161. </thead>
  7162. <tbody>
  7163. <tr>
  7164. <td>
  7165. <code>tenancy</code></br>
  7166. <em>
  7167. string
  7168. </em>
  7169. </td>
  7170. <td>
  7171. <p>Tenancy is the tenancy OCID where user is located.</p>
  7172. </td>
  7173. </tr>
  7174. <tr>
  7175. <td>
  7176. <code>user</code></br>
  7177. <em>
  7178. string
  7179. </em>
  7180. </td>
  7181. <td>
  7182. <p>User is an access OCID specific to the account.</p>
  7183. </td>
  7184. </tr>
  7185. <tr>
  7186. <td>
  7187. <code>secretRef</code></br>
  7188. <em>
  7189. <a href="#external-secrets.io/v1.OracleSecretRef">
  7190. OracleSecretRef
  7191. </a>
  7192. </em>
  7193. </td>
  7194. <td>
  7195. <p>SecretRef to pass through sensitive information.</p>
  7196. </td>
  7197. </tr>
  7198. </tbody>
  7199. </table>
  7200. <h3 id="external-secrets.io/v1.OraclePrincipalType">OraclePrincipalType
  7201. (<code>string</code> alias)</p></h3>
  7202. <p>
  7203. (<em>Appears on:</em>
  7204. <a href="#external-secrets.io/v1.OracleProvider">OracleProvider</a>)
  7205. </p>
  7206. <p>
  7207. </p>
  7208. <table>
  7209. <thead>
  7210. <tr>
  7211. <th>Value</th>
  7212. <th>Description</th>
  7213. </tr>
  7214. </thead>
  7215. <tbody><tr><td><p>&#34;InstancePrincipal&#34;</p></td>
  7216. <td><p>InstancePrincipal represents a instance principal.</p>
  7217. </td>
  7218. </tr><tr><td><p>&#34;UserPrincipal&#34;</p></td>
  7219. <td><p>UserPrincipal represents a user principal.</p>
  7220. </td>
  7221. </tr><tr><td><p>&#34;Workload&#34;</p></td>
  7222. <td><p>WorkloadPrincipal represents a workload principal.</p>
  7223. </td>
  7224. </tr></tbody>
  7225. </table>
  7226. <h3 id="external-secrets.io/v1.OracleProvider">OracleProvider
  7227. </h3>
  7228. <p>
  7229. (<em>Appears on:</em>
  7230. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7231. </p>
  7232. <p>
  7233. <p>Configures an store to sync secrets using a Oracle Vault
  7234. backend.</p>
  7235. </p>
  7236. <table>
  7237. <thead>
  7238. <tr>
  7239. <th>Field</th>
  7240. <th>Description</th>
  7241. </tr>
  7242. </thead>
  7243. <tbody>
  7244. <tr>
  7245. <td>
  7246. <code>region</code></br>
  7247. <em>
  7248. string
  7249. </em>
  7250. </td>
  7251. <td>
  7252. <p>Region is the region where vault is located.</p>
  7253. </td>
  7254. </tr>
  7255. <tr>
  7256. <td>
  7257. <code>vault</code></br>
  7258. <em>
  7259. string
  7260. </em>
  7261. </td>
  7262. <td>
  7263. <p>Vault is the vault&rsquo;s OCID of the specific vault where secret is located.</p>
  7264. </td>
  7265. </tr>
  7266. <tr>
  7267. <td>
  7268. <code>compartment</code></br>
  7269. <em>
  7270. string
  7271. </em>
  7272. </td>
  7273. <td>
  7274. <em>(Optional)</em>
  7275. <p>Compartment is the vault compartment OCID.
  7276. Required for PushSecret</p>
  7277. </td>
  7278. </tr>
  7279. <tr>
  7280. <td>
  7281. <code>encryptionKey</code></br>
  7282. <em>
  7283. string
  7284. </em>
  7285. </td>
  7286. <td>
  7287. <em>(Optional)</em>
  7288. <p>EncryptionKey is the OCID of the encryption key within the vault.
  7289. Required for PushSecret</p>
  7290. </td>
  7291. </tr>
  7292. <tr>
  7293. <td>
  7294. <code>principalType</code></br>
  7295. <em>
  7296. <a href="#external-secrets.io/v1.OraclePrincipalType">
  7297. OraclePrincipalType
  7298. </a>
  7299. </em>
  7300. </td>
  7301. <td>
  7302. <em>(Optional)</em>
  7303. <p>The type of principal to use for authentication. If left blank, the Auth struct will
  7304. determine the principal type. This optional field must be specified if using
  7305. workload identity.</p>
  7306. </td>
  7307. </tr>
  7308. <tr>
  7309. <td>
  7310. <code>auth</code></br>
  7311. <em>
  7312. <a href="#external-secrets.io/v1.OracleAuth">
  7313. OracleAuth
  7314. </a>
  7315. </em>
  7316. </td>
  7317. <td>
  7318. <em>(Optional)</em>
  7319. <p>Auth configures how secret-manager authenticates with the Oracle Vault.
  7320. If empty, use the instance principal, otherwise the user credentials specified in Auth.</p>
  7321. </td>
  7322. </tr>
  7323. <tr>
  7324. <td>
  7325. <code>serviceAccountRef</code></br>
  7326. <em>
  7327. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  7328. External Secrets meta/v1.ServiceAccountSelector
  7329. </a>
  7330. </em>
  7331. </td>
  7332. <td>
  7333. <em>(Optional)</em>
  7334. <p>ServiceAccountRef specified the service account
  7335. that should be used when authenticating with WorkloadIdentity.</p>
  7336. </td>
  7337. </tr>
  7338. </tbody>
  7339. </table>
  7340. <h3 id="external-secrets.io/v1.OracleSecretRef">OracleSecretRef
  7341. </h3>
  7342. <p>
  7343. (<em>Appears on:</em>
  7344. <a href="#external-secrets.io/v1.OracleAuth">OracleAuth</a>)
  7345. </p>
  7346. <p>
  7347. </p>
  7348. <table>
  7349. <thead>
  7350. <tr>
  7351. <th>Field</th>
  7352. <th>Description</th>
  7353. </tr>
  7354. </thead>
  7355. <tbody>
  7356. <tr>
  7357. <td>
  7358. <code>privatekey</code></br>
  7359. <em>
  7360. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7361. External Secrets meta/v1.SecretKeySelector
  7362. </a>
  7363. </em>
  7364. </td>
  7365. <td>
  7366. <p>PrivateKey is the user&rsquo;s API Signing Key in PEM format, used for authentication.</p>
  7367. </td>
  7368. </tr>
  7369. <tr>
  7370. <td>
  7371. <code>fingerprint</code></br>
  7372. <em>
  7373. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7374. External Secrets meta/v1.SecretKeySelector
  7375. </a>
  7376. </em>
  7377. </td>
  7378. <td>
  7379. <p>Fingerprint is the fingerprint of the API private key.</p>
  7380. </td>
  7381. </tr>
  7382. </tbody>
  7383. </table>
  7384. <h3 id="external-secrets.io/v1.PassboltAuth">PassboltAuth
  7385. </h3>
  7386. <p>
  7387. (<em>Appears on:</em>
  7388. <a href="#external-secrets.io/v1.PassboltProvider">PassboltProvider</a>)
  7389. </p>
  7390. <p>
  7391. <p>Passbolt contains a secretRef for the passbolt credentials.</p>
  7392. </p>
  7393. <table>
  7394. <thead>
  7395. <tr>
  7396. <th>Field</th>
  7397. <th>Description</th>
  7398. </tr>
  7399. </thead>
  7400. <tbody>
  7401. <tr>
  7402. <td>
  7403. <code>passwordSecretRef</code></br>
  7404. <em>
  7405. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7406. External Secrets meta/v1.SecretKeySelector
  7407. </a>
  7408. </em>
  7409. </td>
  7410. <td>
  7411. </td>
  7412. </tr>
  7413. <tr>
  7414. <td>
  7415. <code>privateKeySecretRef</code></br>
  7416. <em>
  7417. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7418. External Secrets meta/v1.SecretKeySelector
  7419. </a>
  7420. </em>
  7421. </td>
  7422. <td>
  7423. </td>
  7424. </tr>
  7425. </tbody>
  7426. </table>
  7427. <h3 id="external-secrets.io/v1.PassboltProvider">PassboltProvider
  7428. </h3>
  7429. <p>
  7430. (<em>Appears on:</em>
  7431. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7432. </p>
  7433. <p>
  7434. </p>
  7435. <table>
  7436. <thead>
  7437. <tr>
  7438. <th>Field</th>
  7439. <th>Description</th>
  7440. </tr>
  7441. </thead>
  7442. <tbody>
  7443. <tr>
  7444. <td>
  7445. <code>auth</code></br>
  7446. <em>
  7447. <a href="#external-secrets.io/v1.PassboltAuth">
  7448. PassboltAuth
  7449. </a>
  7450. </em>
  7451. </td>
  7452. <td>
  7453. <p>Auth defines the information necessary to authenticate against Passbolt Server</p>
  7454. </td>
  7455. </tr>
  7456. <tr>
  7457. <td>
  7458. <code>host</code></br>
  7459. <em>
  7460. string
  7461. </em>
  7462. </td>
  7463. <td>
  7464. <p>Host defines the Passbolt Server to connect to</p>
  7465. </td>
  7466. </tr>
  7467. </tbody>
  7468. </table>
  7469. <h3 id="external-secrets.io/v1.PasswordDepotAuth">PasswordDepotAuth
  7470. </h3>
  7471. <p>
  7472. (<em>Appears on:</em>
  7473. <a href="#external-secrets.io/v1.PasswordDepotProvider">PasswordDepotProvider</a>)
  7474. </p>
  7475. <p>
  7476. </p>
  7477. <table>
  7478. <thead>
  7479. <tr>
  7480. <th>Field</th>
  7481. <th>Description</th>
  7482. </tr>
  7483. </thead>
  7484. <tbody>
  7485. <tr>
  7486. <td>
  7487. <code>secretRef</code></br>
  7488. <em>
  7489. <a href="#external-secrets.io/v1.PasswordDepotSecretRef">
  7490. PasswordDepotSecretRef
  7491. </a>
  7492. </em>
  7493. </td>
  7494. <td>
  7495. </td>
  7496. </tr>
  7497. </tbody>
  7498. </table>
  7499. <h3 id="external-secrets.io/v1.PasswordDepotProvider">PasswordDepotProvider
  7500. </h3>
  7501. <p>
  7502. (<em>Appears on:</em>
  7503. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7504. </p>
  7505. <p>
  7506. <p>Configures a store to sync secrets with a Password Depot instance.</p>
  7507. </p>
  7508. <table>
  7509. <thead>
  7510. <tr>
  7511. <th>Field</th>
  7512. <th>Description</th>
  7513. </tr>
  7514. </thead>
  7515. <tbody>
  7516. <tr>
  7517. <td>
  7518. <code>host</code></br>
  7519. <em>
  7520. string
  7521. </em>
  7522. </td>
  7523. <td>
  7524. <p>URL configures the Password Depot instance URL.</p>
  7525. </td>
  7526. </tr>
  7527. <tr>
  7528. <td>
  7529. <code>database</code></br>
  7530. <em>
  7531. string
  7532. </em>
  7533. </td>
  7534. <td>
  7535. <p>Database to use as source</p>
  7536. </td>
  7537. </tr>
  7538. <tr>
  7539. <td>
  7540. <code>auth</code></br>
  7541. <em>
  7542. <a href="#external-secrets.io/v1.PasswordDepotAuth">
  7543. PasswordDepotAuth
  7544. </a>
  7545. </em>
  7546. </td>
  7547. <td>
  7548. <p>Auth configures how secret-manager authenticates with a Password Depot instance.</p>
  7549. </td>
  7550. </tr>
  7551. </tbody>
  7552. </table>
  7553. <h3 id="external-secrets.io/v1.PasswordDepotSecretRef">PasswordDepotSecretRef
  7554. </h3>
  7555. <p>
  7556. (<em>Appears on:</em>
  7557. <a href="#external-secrets.io/v1.PasswordDepotAuth">PasswordDepotAuth</a>)
  7558. </p>
  7559. <p>
  7560. </p>
  7561. <table>
  7562. <thead>
  7563. <tr>
  7564. <th>Field</th>
  7565. <th>Description</th>
  7566. </tr>
  7567. </thead>
  7568. <tbody>
  7569. <tr>
  7570. <td>
  7571. <code>credentials</code></br>
  7572. <em>
  7573. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7574. External Secrets meta/v1.SecretKeySelector
  7575. </a>
  7576. </em>
  7577. </td>
  7578. <td>
  7579. <em>(Optional)</em>
  7580. <p>Username / Password is used for authentication.</p>
  7581. </td>
  7582. </tr>
  7583. </tbody>
  7584. </table>
  7585. <h3 id="external-secrets.io/v1.PreviderAuth">PreviderAuth
  7586. </h3>
  7587. <p>
  7588. (<em>Appears on:</em>
  7589. <a href="#external-secrets.io/v1.PreviderProvider">PreviderProvider</a>)
  7590. </p>
  7591. <p>
  7592. <p>PreviderAuth contains a secretRef for credentials.</p>
  7593. </p>
  7594. <table>
  7595. <thead>
  7596. <tr>
  7597. <th>Field</th>
  7598. <th>Description</th>
  7599. </tr>
  7600. </thead>
  7601. <tbody>
  7602. <tr>
  7603. <td>
  7604. <code>secretRef</code></br>
  7605. <em>
  7606. <a href="#external-secrets.io/v1.PreviderAuthSecretRef">
  7607. PreviderAuthSecretRef
  7608. </a>
  7609. </em>
  7610. </td>
  7611. <td>
  7612. <em>(Optional)</em>
  7613. </td>
  7614. </tr>
  7615. </tbody>
  7616. </table>
  7617. <h3 id="external-secrets.io/v1.PreviderAuthSecretRef">PreviderAuthSecretRef
  7618. </h3>
  7619. <p>
  7620. (<em>Appears on:</em>
  7621. <a href="#external-secrets.io/v1.PreviderAuth">PreviderAuth</a>)
  7622. </p>
  7623. <p>
  7624. <p>PreviderAuthSecretRef holds secret references for Previder Vault credentials.</p>
  7625. </p>
  7626. <table>
  7627. <thead>
  7628. <tr>
  7629. <th>Field</th>
  7630. <th>Description</th>
  7631. </tr>
  7632. </thead>
  7633. <tbody>
  7634. <tr>
  7635. <td>
  7636. <code>accessToken</code></br>
  7637. <em>
  7638. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7639. External Secrets meta/v1.SecretKeySelector
  7640. </a>
  7641. </em>
  7642. </td>
  7643. <td>
  7644. <p>The AccessToken is used for authentication</p>
  7645. </td>
  7646. </tr>
  7647. </tbody>
  7648. </table>
  7649. <h3 id="external-secrets.io/v1.PreviderProvider">PreviderProvider
  7650. </h3>
  7651. <p>
  7652. (<em>Appears on:</em>
  7653. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7654. </p>
  7655. <p>
  7656. <p>PreviderProvider configures a store to sync secrets using the Previder Secret Manager provider.</p>
  7657. </p>
  7658. <table>
  7659. <thead>
  7660. <tr>
  7661. <th>Field</th>
  7662. <th>Description</th>
  7663. </tr>
  7664. </thead>
  7665. <tbody>
  7666. <tr>
  7667. <td>
  7668. <code>auth</code></br>
  7669. <em>
  7670. <a href="#external-secrets.io/v1.PreviderAuth">
  7671. PreviderAuth
  7672. </a>
  7673. </em>
  7674. </td>
  7675. <td>
  7676. </td>
  7677. </tr>
  7678. <tr>
  7679. <td>
  7680. <code>baseUri</code></br>
  7681. <em>
  7682. string
  7683. </em>
  7684. </td>
  7685. <td>
  7686. <em>(Optional)</em>
  7687. </td>
  7688. </tr>
  7689. </tbody>
  7690. </table>
  7691. <h3 id="external-secrets.io/v1.Provider">Provider
  7692. </h3>
  7693. <p>
  7694. <p>Provider is a common interface for interacting with secret backends.</p>
  7695. </p>
  7696. <h3 id="external-secrets.io/v1.PulumiProvider">PulumiProvider
  7697. </h3>
  7698. <p>
  7699. (<em>Appears on:</em>
  7700. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7701. </p>
  7702. <p>
  7703. </p>
  7704. <table>
  7705. <thead>
  7706. <tr>
  7707. <th>Field</th>
  7708. <th>Description</th>
  7709. </tr>
  7710. </thead>
  7711. <tbody>
  7712. <tr>
  7713. <td>
  7714. <code>apiUrl</code></br>
  7715. <em>
  7716. string
  7717. </em>
  7718. </td>
  7719. <td>
  7720. <p>APIURL is the URL of the Pulumi API.</p>
  7721. </td>
  7722. </tr>
  7723. <tr>
  7724. <td>
  7725. <code>accessToken</code></br>
  7726. <em>
  7727. <a href="#external-secrets.io/v1.PulumiProviderSecretRef">
  7728. PulumiProviderSecretRef
  7729. </a>
  7730. </em>
  7731. </td>
  7732. <td>
  7733. <p>AccessToken is the access tokens to sign in to the Pulumi Cloud Console.</p>
  7734. </td>
  7735. </tr>
  7736. <tr>
  7737. <td>
  7738. <code>organization</code></br>
  7739. <em>
  7740. string
  7741. </em>
  7742. </td>
  7743. <td>
  7744. <p>Organization are a space to collaborate on shared projects and stacks.
  7745. To create a new organization, visit <a href="https://app.pulumi.com/">https://app.pulumi.com/</a> and click &ldquo;New Organization&rdquo;.</p>
  7746. </td>
  7747. </tr>
  7748. <tr>
  7749. <td>
  7750. <code>project</code></br>
  7751. <em>
  7752. string
  7753. </em>
  7754. </td>
  7755. <td>
  7756. <p>Project is the name of the Pulumi ESC project the environment belongs to.</p>
  7757. </td>
  7758. </tr>
  7759. <tr>
  7760. <td>
  7761. <code>environment</code></br>
  7762. <em>
  7763. string
  7764. </em>
  7765. </td>
  7766. <td>
  7767. <p>Environment are YAML documents composed of static key-value pairs, programmatic expressions,
  7768. dynamically retrieved values from supported providers including all major clouds,
  7769. and other Pulumi ESC environments.
  7770. To create a new environment, visit <a href="https://www.pulumi.com/docs/esc/environments/">https://www.pulumi.com/docs/esc/environments/</a> for more information.</p>
  7771. </td>
  7772. </tr>
  7773. </tbody>
  7774. </table>
  7775. <h3 id="external-secrets.io/v1.PulumiProviderSecretRef">PulumiProviderSecretRef
  7776. </h3>
  7777. <p>
  7778. (<em>Appears on:</em>
  7779. <a href="#external-secrets.io/v1.PulumiProvider">PulumiProvider</a>)
  7780. </p>
  7781. <p>
  7782. </p>
  7783. <table>
  7784. <thead>
  7785. <tr>
  7786. <th>Field</th>
  7787. <th>Description</th>
  7788. </tr>
  7789. </thead>
  7790. <tbody>
  7791. <tr>
  7792. <td>
  7793. <code>secretRef</code></br>
  7794. <em>
  7795. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7796. External Secrets meta/v1.SecretKeySelector
  7797. </a>
  7798. </em>
  7799. </td>
  7800. <td>
  7801. <p>SecretRef is a reference to a secret containing the Pulumi API token.</p>
  7802. </td>
  7803. </tr>
  7804. </tbody>
  7805. </table>
  7806. <h3 id="external-secrets.io/v1.PushSecretData">PushSecretData
  7807. </h3>
  7808. <p>
  7809. <p>PushSecretData is an interface to allow using v1alpha1.PushSecretData content in Provider registered in v1.</p>
  7810. </p>
  7811. <h3 id="external-secrets.io/v1.PushSecretRemoteRef">PushSecretRemoteRef
  7812. </h3>
  7813. <p>
  7814. <p>PushSecretRemoteRef is an interface to allow using v1alpha1.PushSecretRemoteRef in Provider registered in v1.</p>
  7815. </p>
  7816. <h3 id="external-secrets.io/v1.ScalewayProvider">ScalewayProvider
  7817. </h3>
  7818. <p>
  7819. (<em>Appears on:</em>
  7820. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7821. </p>
  7822. <p>
  7823. </p>
  7824. <table>
  7825. <thead>
  7826. <tr>
  7827. <th>Field</th>
  7828. <th>Description</th>
  7829. </tr>
  7830. </thead>
  7831. <tbody>
  7832. <tr>
  7833. <td>
  7834. <code>apiUrl</code></br>
  7835. <em>
  7836. string
  7837. </em>
  7838. </td>
  7839. <td>
  7840. <em>(Optional)</em>
  7841. <p>APIURL is the url of the api to use. Defaults to <a href="https://api.scaleway.com">https://api.scaleway.com</a></p>
  7842. </td>
  7843. </tr>
  7844. <tr>
  7845. <td>
  7846. <code>region</code></br>
  7847. <em>
  7848. string
  7849. </em>
  7850. </td>
  7851. <td>
  7852. <p>Region where your secrets are located: <a href="https://developers.scaleway.com/en/quickstart/#region-and-zone">https://developers.scaleway.com/en/quickstart/#region-and-zone</a></p>
  7853. </td>
  7854. </tr>
  7855. <tr>
  7856. <td>
  7857. <code>projectId</code></br>
  7858. <em>
  7859. string
  7860. </em>
  7861. </td>
  7862. <td>
  7863. <p>ProjectID is the id of your project, which you can find in the console: <a href="https://console.scaleway.com/project/settings">https://console.scaleway.com/project/settings</a></p>
  7864. </td>
  7865. </tr>
  7866. <tr>
  7867. <td>
  7868. <code>accessKey</code></br>
  7869. <em>
  7870. <a href="#external-secrets.io/v1.ScalewayProviderSecretRef">
  7871. ScalewayProviderSecretRef
  7872. </a>
  7873. </em>
  7874. </td>
  7875. <td>
  7876. <p>AccessKey is the non-secret part of the api key.</p>
  7877. </td>
  7878. </tr>
  7879. <tr>
  7880. <td>
  7881. <code>secretKey</code></br>
  7882. <em>
  7883. <a href="#external-secrets.io/v1.ScalewayProviderSecretRef">
  7884. ScalewayProviderSecretRef
  7885. </a>
  7886. </em>
  7887. </td>
  7888. <td>
  7889. <p>SecretKey is the non-secret part of the api key.</p>
  7890. </td>
  7891. </tr>
  7892. </tbody>
  7893. </table>
  7894. <h3 id="external-secrets.io/v1.ScalewayProviderSecretRef">ScalewayProviderSecretRef
  7895. </h3>
  7896. <p>
  7897. (<em>Appears on:</em>
  7898. <a href="#external-secrets.io/v1.ScalewayProvider">ScalewayProvider</a>)
  7899. </p>
  7900. <p>
  7901. </p>
  7902. <table>
  7903. <thead>
  7904. <tr>
  7905. <th>Field</th>
  7906. <th>Description</th>
  7907. </tr>
  7908. </thead>
  7909. <tbody>
  7910. <tr>
  7911. <td>
  7912. <code>value</code></br>
  7913. <em>
  7914. string
  7915. </em>
  7916. </td>
  7917. <td>
  7918. <em>(Optional)</em>
  7919. <p>Value can be specified directly to set a value without using a secret.</p>
  7920. </td>
  7921. </tr>
  7922. <tr>
  7923. <td>
  7924. <code>secretRef</code></br>
  7925. <em>
  7926. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  7927. External Secrets meta/v1.SecretKeySelector
  7928. </a>
  7929. </em>
  7930. </td>
  7931. <td>
  7932. <em>(Optional)</em>
  7933. <p>SecretRef references a key in a secret that will be used as value.</p>
  7934. </td>
  7935. </tr>
  7936. </tbody>
  7937. </table>
  7938. <h3 id="external-secrets.io/v1.SecretServerProvider">SecretServerProvider
  7939. </h3>
  7940. <p>
  7941. (<em>Appears on:</em>
  7942. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  7943. </p>
  7944. <p>
  7945. <p>See <a href="https://github.com/DelineaXPM/tss-sdk-go/blob/main/server/server.go">https://github.com/DelineaXPM/tss-sdk-go/blob/main/server/server.go</a>.</p>
  7946. </p>
  7947. <table>
  7948. <thead>
  7949. <tr>
  7950. <th>Field</th>
  7951. <th>Description</th>
  7952. </tr>
  7953. </thead>
  7954. <tbody>
  7955. <tr>
  7956. <td>
  7957. <code>username</code></br>
  7958. <em>
  7959. <a href="#external-secrets.io/v1.SecretServerProviderRef">
  7960. SecretServerProviderRef
  7961. </a>
  7962. </em>
  7963. </td>
  7964. <td>
  7965. <p>Username is the secret server account username.</p>
  7966. </td>
  7967. </tr>
  7968. <tr>
  7969. <td>
  7970. <code>password</code></br>
  7971. <em>
  7972. <a href="#external-secrets.io/v1.SecretServerProviderRef">
  7973. SecretServerProviderRef
  7974. </a>
  7975. </em>
  7976. </td>
  7977. <td>
  7978. <p>Password is the secret server account password.</p>
  7979. </td>
  7980. </tr>
  7981. <tr>
  7982. <td>
  7983. <code>serverURL</code></br>
  7984. <em>
  7985. string
  7986. </em>
  7987. </td>
  7988. <td>
  7989. <p>ServerURL
  7990. URL to your secret server installation</p>
  7991. </td>
  7992. </tr>
  7993. </tbody>
  7994. </table>
  7995. <h3 id="external-secrets.io/v1.SecretServerProviderRef">SecretServerProviderRef
  7996. </h3>
  7997. <p>
  7998. (<em>Appears on:</em>
  7999. <a href="#external-secrets.io/v1.SecretServerProvider">SecretServerProvider</a>)
  8000. </p>
  8001. <p>
  8002. </p>
  8003. <table>
  8004. <thead>
  8005. <tr>
  8006. <th>Field</th>
  8007. <th>Description</th>
  8008. </tr>
  8009. </thead>
  8010. <tbody>
  8011. <tr>
  8012. <td>
  8013. <code>value</code></br>
  8014. <em>
  8015. string
  8016. </em>
  8017. </td>
  8018. <td>
  8019. <em>(Optional)</em>
  8020. <p>Value can be specified directly to set a value without using a secret.</p>
  8021. </td>
  8022. </tr>
  8023. <tr>
  8024. <td>
  8025. <code>secretRef</code></br>
  8026. <em>
  8027. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  8028. External Secrets meta/v1.SecretKeySelector
  8029. </a>
  8030. </em>
  8031. </td>
  8032. <td>
  8033. <em>(Optional)</em>
  8034. <p>SecretRef references a key in a secret that will be used as value.</p>
  8035. </td>
  8036. </tr>
  8037. </tbody>
  8038. </table>
  8039. <h3 id="external-secrets.io/v1.SecretStore">SecretStore
  8040. </h3>
  8041. <p>
  8042. <p>SecretStore represents a secure external location for storing secrets, which can be referenced as part of <code>storeRef</code> fields.</p>
  8043. </p>
  8044. <table>
  8045. <thead>
  8046. <tr>
  8047. <th>Field</th>
  8048. <th>Description</th>
  8049. </tr>
  8050. </thead>
  8051. <tbody>
  8052. <tr>
  8053. <td>
  8054. <code>metadata</code></br>
  8055. <em>
  8056. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#objectmeta-v1-meta">
  8057. Kubernetes meta/v1.ObjectMeta
  8058. </a>
  8059. </em>
  8060. </td>
  8061. <td>
  8062. Refer to the Kubernetes API documentation for the fields of the
  8063. <code>metadata</code> field.
  8064. </td>
  8065. </tr>
  8066. <tr>
  8067. <td>
  8068. <code>spec</code></br>
  8069. <em>
  8070. <a href="#external-secrets.io/v1.SecretStoreSpec">
  8071. SecretStoreSpec
  8072. </a>
  8073. </em>
  8074. </td>
  8075. <td>
  8076. <br/>
  8077. <br/>
  8078. <table>
  8079. <tr>
  8080. <td>
  8081. <code>controller</code></br>
  8082. <em>
  8083. string
  8084. </em>
  8085. </td>
  8086. <td>
  8087. <em>(Optional)</em>
  8088. <p>Used to select the correct ESO controller (think: ingress.ingressClassName)
  8089. The ESO controller is instantiated with a specific controller name and filters ES based on this property</p>
  8090. </td>
  8091. </tr>
  8092. <tr>
  8093. <td>
  8094. <code>provider</code></br>
  8095. <em>
  8096. <a href="#external-secrets.io/v1.SecretStoreProvider">
  8097. SecretStoreProvider
  8098. </a>
  8099. </em>
  8100. </td>
  8101. <td>
  8102. <p>Used to configure the provider. Only one provider may be set</p>
  8103. </td>
  8104. </tr>
  8105. <tr>
  8106. <td>
  8107. <code>retrySettings</code></br>
  8108. <em>
  8109. <a href="#external-secrets.io/v1.SecretStoreRetrySettings">
  8110. SecretStoreRetrySettings
  8111. </a>
  8112. </em>
  8113. </td>
  8114. <td>
  8115. <em>(Optional)</em>
  8116. <p>Used to configure http retries if failed</p>
  8117. </td>
  8118. </tr>
  8119. <tr>
  8120. <td>
  8121. <code>refreshInterval</code></br>
  8122. <em>
  8123. int
  8124. </em>
  8125. </td>
  8126. <td>
  8127. <em>(Optional)</em>
  8128. <p>Used to configure store refresh interval in seconds. Empty or 0 will default to the controller config.</p>
  8129. </td>
  8130. </tr>
  8131. <tr>
  8132. <td>
  8133. <code>conditions</code></br>
  8134. <em>
  8135. <a href="#external-secrets.io/v1.ClusterSecretStoreCondition">
  8136. []ClusterSecretStoreCondition
  8137. </a>
  8138. </em>
  8139. </td>
  8140. <td>
  8141. <em>(Optional)</em>
  8142. <p>Used to constraint a ClusterSecretStore to specific namespaces. Relevant only to ClusterSecretStore</p>
  8143. </td>
  8144. </tr>
  8145. </table>
  8146. </td>
  8147. </tr>
  8148. <tr>
  8149. <td>
  8150. <code>status</code></br>
  8151. <em>
  8152. <a href="#external-secrets.io/v1.SecretStoreStatus">
  8153. SecretStoreStatus
  8154. </a>
  8155. </em>
  8156. </td>
  8157. <td>
  8158. </td>
  8159. </tr>
  8160. </tbody>
  8161. </table>
  8162. <h3 id="external-secrets.io/v1.SecretStoreCapabilities">SecretStoreCapabilities
  8163. (<code>string</code> alias)</p></h3>
  8164. <p>
  8165. (<em>Appears on:</em>
  8166. <a href="#external-secrets.io/v1.SecretStoreStatus">SecretStoreStatus</a>)
  8167. </p>
  8168. <p>
  8169. <p>SecretStoreCapabilities defines the possible operations a SecretStore can do.</p>
  8170. </p>
  8171. <table>
  8172. <thead>
  8173. <tr>
  8174. <th>Value</th>
  8175. <th>Description</th>
  8176. </tr>
  8177. </thead>
  8178. <tbody><tr><td><p>&#34;ReadOnly&#34;</p></td>
  8179. <td></td>
  8180. </tr><tr><td><p>&#34;ReadWrite&#34;</p></td>
  8181. <td></td>
  8182. </tr><tr><td><p>&#34;WriteOnly&#34;</p></td>
  8183. <td></td>
  8184. </tr></tbody>
  8185. </table>
  8186. <h3 id="external-secrets.io/v1.SecretStoreConditionType">SecretStoreConditionType
  8187. (<code>string</code> alias)</p></h3>
  8188. <p>
  8189. (<em>Appears on:</em>
  8190. <a href="#external-secrets.io/v1.SecretStoreStatusCondition">SecretStoreStatusCondition</a>)
  8191. </p>
  8192. <p>
  8193. </p>
  8194. <table>
  8195. <thead>
  8196. <tr>
  8197. <th>Value</th>
  8198. <th>Description</th>
  8199. </tr>
  8200. </thead>
  8201. <tbody><tr><td><p>&#34;Ready&#34;</p></td>
  8202. <td></td>
  8203. </tr></tbody>
  8204. </table>
  8205. <h3 id="external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider
  8206. </h3>
  8207. <p>
  8208. (<em>Appears on:</em>
  8209. <a href="#external-secrets.io/v1.SecretStoreSpec">SecretStoreSpec</a>)
  8210. </p>
  8211. <p>
  8212. <p>SecretStoreProvider contains the provider-specific configuration.</p>
  8213. </p>
  8214. <table>
  8215. <thead>
  8216. <tr>
  8217. <th>Field</th>
  8218. <th>Description</th>
  8219. </tr>
  8220. </thead>
  8221. <tbody>
  8222. <tr>
  8223. <td>
  8224. <code>aws</code></br>
  8225. <em>
  8226. <a href="#external-secrets.io/v1.AWSProvider">
  8227. AWSProvider
  8228. </a>
  8229. </em>
  8230. </td>
  8231. <td>
  8232. <em>(Optional)</em>
  8233. <p>AWS configures this store to sync secrets using AWS Secret Manager provider</p>
  8234. </td>
  8235. </tr>
  8236. <tr>
  8237. <td>
  8238. <code>azurekv</code></br>
  8239. <em>
  8240. <a href="#external-secrets.io/v1.AzureKVProvider">
  8241. AzureKVProvider
  8242. </a>
  8243. </em>
  8244. </td>
  8245. <td>
  8246. <em>(Optional)</em>
  8247. <p>AzureKV configures this store to sync secrets using Azure Key Vault provider</p>
  8248. </td>
  8249. </tr>
  8250. <tr>
  8251. <td>
  8252. <code>akeyless</code></br>
  8253. <em>
  8254. <a href="#external-secrets.io/v1.AkeylessProvider">
  8255. AkeylessProvider
  8256. </a>
  8257. </em>
  8258. </td>
  8259. <td>
  8260. <em>(Optional)</em>
  8261. <p>Akeyless configures this store to sync secrets using Akeyless Vault provider</p>
  8262. </td>
  8263. </tr>
  8264. <tr>
  8265. <td>
  8266. <code>bitwardensecretsmanager</code></br>
  8267. <em>
  8268. <a href="#external-secrets.io/v1.BitwardenSecretsManagerProvider">
  8269. BitwardenSecretsManagerProvider
  8270. </a>
  8271. </em>
  8272. </td>
  8273. <td>
  8274. <em>(Optional)</em>
  8275. <p>BitwardenSecretsManager configures this store to sync secrets using BitwardenSecretsManager provider</p>
  8276. </td>
  8277. </tr>
  8278. <tr>
  8279. <td>
  8280. <code>vault</code></br>
  8281. <em>
  8282. <a href="#external-secrets.io/v1.VaultProvider">
  8283. VaultProvider
  8284. </a>
  8285. </em>
  8286. </td>
  8287. <td>
  8288. <em>(Optional)</em>
  8289. <p>Vault configures this store to sync secrets using Hashi provider</p>
  8290. </td>
  8291. </tr>
  8292. <tr>
  8293. <td>
  8294. <code>gcpsm</code></br>
  8295. <em>
  8296. <a href="#external-secrets.io/v1.GCPSMProvider">
  8297. GCPSMProvider
  8298. </a>
  8299. </em>
  8300. </td>
  8301. <td>
  8302. <em>(Optional)</em>
  8303. <p>GCPSM configures this store to sync secrets using Google Cloud Platform Secret Manager provider</p>
  8304. </td>
  8305. </tr>
  8306. <tr>
  8307. <td>
  8308. <code>oracle</code></br>
  8309. <em>
  8310. <a href="#external-secrets.io/v1.OracleProvider">
  8311. OracleProvider
  8312. </a>
  8313. </em>
  8314. </td>
  8315. <td>
  8316. <em>(Optional)</em>
  8317. <p>Oracle configures this store to sync secrets using Oracle Vault provider</p>
  8318. </td>
  8319. </tr>
  8320. <tr>
  8321. <td>
  8322. <code>ibm</code></br>
  8323. <em>
  8324. <a href="#external-secrets.io/v1.IBMProvider">
  8325. IBMProvider
  8326. </a>
  8327. </em>
  8328. </td>
  8329. <td>
  8330. <em>(Optional)</em>
  8331. <p>IBM configures this store to sync secrets using IBM Cloud provider</p>
  8332. </td>
  8333. </tr>
  8334. <tr>
  8335. <td>
  8336. <code>yandexcertificatemanager</code></br>
  8337. <em>
  8338. <a href="#external-secrets.io/v1.YandexCertificateManagerProvider">
  8339. YandexCertificateManagerProvider
  8340. </a>
  8341. </em>
  8342. </td>
  8343. <td>
  8344. <em>(Optional)</em>
  8345. <p>YandexCertificateManager configures this store to sync secrets using Yandex Certificate Manager provider</p>
  8346. </td>
  8347. </tr>
  8348. <tr>
  8349. <td>
  8350. <code>yandexlockbox</code></br>
  8351. <em>
  8352. <a href="#external-secrets.io/v1.YandexLockboxProvider">
  8353. YandexLockboxProvider
  8354. </a>
  8355. </em>
  8356. </td>
  8357. <td>
  8358. <em>(Optional)</em>
  8359. <p>YandexLockbox configures this store to sync secrets using Yandex Lockbox provider</p>
  8360. </td>
  8361. </tr>
  8362. <tr>
  8363. <td>
  8364. <code>github</code></br>
  8365. <em>
  8366. <a href="#external-secrets.io/v1.GithubProvider">
  8367. GithubProvider
  8368. </a>
  8369. </em>
  8370. </td>
  8371. <td>
  8372. <em>(Optional)</em>
  8373. <p>Github configures this store to push Github Action secrets using Github API provider</p>
  8374. </td>
  8375. </tr>
  8376. <tr>
  8377. <td>
  8378. <code>gitlab</code></br>
  8379. <em>
  8380. <a href="#external-secrets.io/v1.GitlabProvider">
  8381. GitlabProvider
  8382. </a>
  8383. </em>
  8384. </td>
  8385. <td>
  8386. <em>(Optional)</em>
  8387. <p>GitLab configures this store to sync secrets using GitLab Variables provider</p>
  8388. </td>
  8389. </tr>
  8390. <tr>
  8391. <td>
  8392. <code>alibaba</code></br>
  8393. <em>
  8394. <a href="#external-secrets.io/v1.AlibabaProvider">
  8395. AlibabaProvider
  8396. </a>
  8397. </em>
  8398. </td>
  8399. <td>
  8400. <em>(Optional)</em>
  8401. <p>Alibaba configures this store to sync secrets using Alibaba Cloud provider</p>
  8402. </td>
  8403. </tr>
  8404. <tr>
  8405. <td>
  8406. <code>onepassword</code></br>
  8407. <em>
  8408. <a href="#external-secrets.io/v1.OnePasswordProvider">
  8409. OnePasswordProvider
  8410. </a>
  8411. </em>
  8412. </td>
  8413. <td>
  8414. <em>(Optional)</em>
  8415. <p>OnePassword configures this store to sync secrets using the 1Password Cloud provider</p>
  8416. </td>
  8417. </tr>
  8418. <tr>
  8419. <td>
  8420. <code>webhook</code></br>
  8421. <em>
  8422. <a href="#external-secrets.io/v1.WebhookProvider">
  8423. WebhookProvider
  8424. </a>
  8425. </em>
  8426. </td>
  8427. <td>
  8428. <em>(Optional)</em>
  8429. <p>Webhook configures this store to sync secrets using a generic templated webhook</p>
  8430. </td>
  8431. </tr>
  8432. <tr>
  8433. <td>
  8434. <code>kubernetes</code></br>
  8435. <em>
  8436. <a href="#external-secrets.io/v1.KubernetesProvider">
  8437. KubernetesProvider
  8438. </a>
  8439. </em>
  8440. </td>
  8441. <td>
  8442. <em>(Optional)</em>
  8443. <p>Kubernetes configures this store to sync secrets using a Kubernetes cluster provider</p>
  8444. </td>
  8445. </tr>
  8446. <tr>
  8447. <td>
  8448. <code>fake</code></br>
  8449. <em>
  8450. <a href="#external-secrets.io/v1.FakeProvider">
  8451. FakeProvider
  8452. </a>
  8453. </em>
  8454. </td>
  8455. <td>
  8456. <em>(Optional)</em>
  8457. <p>Fake configures a store with static key/value pairs</p>
  8458. </td>
  8459. </tr>
  8460. <tr>
  8461. <td>
  8462. <code>senhasegura</code></br>
  8463. <em>
  8464. <a href="#external-secrets.io/v1.SenhaseguraProvider">
  8465. SenhaseguraProvider
  8466. </a>
  8467. </em>
  8468. </td>
  8469. <td>
  8470. <em>(Optional)</em>
  8471. <p>Senhasegura configures this store to sync secrets using senhasegura provider</p>
  8472. </td>
  8473. </tr>
  8474. <tr>
  8475. <td>
  8476. <code>scaleway</code></br>
  8477. <em>
  8478. <a href="#external-secrets.io/v1.ScalewayProvider">
  8479. ScalewayProvider
  8480. </a>
  8481. </em>
  8482. </td>
  8483. <td>
  8484. <em>(Optional)</em>
  8485. <p>Scaleway</p>
  8486. </td>
  8487. </tr>
  8488. <tr>
  8489. <td>
  8490. <code>doppler</code></br>
  8491. <em>
  8492. <a href="#external-secrets.io/v1.DopplerProvider">
  8493. DopplerProvider
  8494. </a>
  8495. </em>
  8496. </td>
  8497. <td>
  8498. <em>(Optional)</em>
  8499. <p>Doppler configures this store to sync secrets using the Doppler provider</p>
  8500. </td>
  8501. </tr>
  8502. <tr>
  8503. <td>
  8504. <code>previder</code></br>
  8505. <em>
  8506. <a href="#external-secrets.io/v1.PreviderProvider">
  8507. PreviderProvider
  8508. </a>
  8509. </em>
  8510. </td>
  8511. <td>
  8512. <em>(Optional)</em>
  8513. <p>Previder configures this store to sync secrets using the Previder provider</p>
  8514. </td>
  8515. </tr>
  8516. <tr>
  8517. <td>
  8518. <code>onboardbase</code></br>
  8519. <em>
  8520. <a href="#external-secrets.io/v1.OnboardbaseProvider">
  8521. OnboardbaseProvider
  8522. </a>
  8523. </em>
  8524. </td>
  8525. <td>
  8526. <em>(Optional)</em>
  8527. <p>Onboardbase configures this store to sync secrets using the Onboardbase provider</p>
  8528. </td>
  8529. </tr>
  8530. <tr>
  8531. <td>
  8532. <code>keepersecurity</code></br>
  8533. <em>
  8534. <a href="#external-secrets.io/v1.KeeperSecurityProvider">
  8535. KeeperSecurityProvider
  8536. </a>
  8537. </em>
  8538. </td>
  8539. <td>
  8540. <em>(Optional)</em>
  8541. <p>KeeperSecurity configures this store to sync secrets using the KeeperSecurity provider</p>
  8542. </td>
  8543. </tr>
  8544. <tr>
  8545. <td>
  8546. <code>conjur</code></br>
  8547. <em>
  8548. <a href="#external-secrets.io/v1.ConjurProvider">
  8549. ConjurProvider
  8550. </a>
  8551. </em>
  8552. </td>
  8553. <td>
  8554. <em>(Optional)</em>
  8555. <p>Conjur configures this store to sync secrets using conjur provider</p>
  8556. </td>
  8557. </tr>
  8558. <tr>
  8559. <td>
  8560. <code>delinea</code></br>
  8561. <em>
  8562. <a href="#external-secrets.io/v1.DelineaProvider">
  8563. DelineaProvider
  8564. </a>
  8565. </em>
  8566. </td>
  8567. <td>
  8568. <em>(Optional)</em>
  8569. <p>Delinea DevOps Secrets Vault
  8570. <a href="https://docs.delinea.com/online-help/products/devops-secrets-vault/current">https://docs.delinea.com/online-help/products/devops-secrets-vault/current</a></p>
  8571. </td>
  8572. </tr>
  8573. <tr>
  8574. <td>
  8575. <code>secretserver</code></br>
  8576. <em>
  8577. <a href="#external-secrets.io/v1.SecretServerProvider">
  8578. SecretServerProvider
  8579. </a>
  8580. </em>
  8581. </td>
  8582. <td>
  8583. <em>(Optional)</em>
  8584. <p>SecretServer configures this store to sync secrets using SecretServer provider
  8585. <a href="https://docs.delinea.com/online-help/secret-server/start.htm">https://docs.delinea.com/online-help/secret-server/start.htm</a></p>
  8586. </td>
  8587. </tr>
  8588. <tr>
  8589. <td>
  8590. <code>chef</code></br>
  8591. <em>
  8592. <a href="#external-secrets.io/v1.ChefProvider">
  8593. ChefProvider
  8594. </a>
  8595. </em>
  8596. </td>
  8597. <td>
  8598. <em>(Optional)</em>
  8599. <p>Chef configures this store to sync secrets with chef server</p>
  8600. </td>
  8601. </tr>
  8602. <tr>
  8603. <td>
  8604. <code>pulumi</code></br>
  8605. <em>
  8606. <a href="#external-secrets.io/v1.PulumiProvider">
  8607. PulumiProvider
  8608. </a>
  8609. </em>
  8610. </td>
  8611. <td>
  8612. <em>(Optional)</em>
  8613. <p>Pulumi configures this store to sync secrets using the Pulumi provider</p>
  8614. </td>
  8615. </tr>
  8616. <tr>
  8617. <td>
  8618. <code>fortanix</code></br>
  8619. <em>
  8620. <a href="#external-secrets.io/v1.FortanixProvider">
  8621. FortanixProvider
  8622. </a>
  8623. </em>
  8624. </td>
  8625. <td>
  8626. <em>(Optional)</em>
  8627. <p>Fortanix configures this store to sync secrets using the Fortanix provider</p>
  8628. </td>
  8629. </tr>
  8630. <tr>
  8631. <td>
  8632. <code>passworddepot</code></br>
  8633. <em>
  8634. <a href="#external-secrets.io/v1.PasswordDepotProvider">
  8635. PasswordDepotProvider
  8636. </a>
  8637. </em>
  8638. </td>
  8639. <td>
  8640. <em>(Optional)</em>
  8641. </td>
  8642. </tr>
  8643. <tr>
  8644. <td>
  8645. <code>passbolt</code></br>
  8646. <em>
  8647. <a href="#external-secrets.io/v1.PassboltProvider">
  8648. PassboltProvider
  8649. </a>
  8650. </em>
  8651. </td>
  8652. <td>
  8653. <em>(Optional)</em>
  8654. </td>
  8655. </tr>
  8656. <tr>
  8657. <td>
  8658. <code>device42</code></br>
  8659. <em>
  8660. <a href="#external-secrets.io/v1.Device42Provider">
  8661. Device42Provider
  8662. </a>
  8663. </em>
  8664. </td>
  8665. <td>
  8666. <em>(Optional)</em>
  8667. <p>Device42 configures this store to sync secrets using the Device42 provider</p>
  8668. </td>
  8669. </tr>
  8670. <tr>
  8671. <td>
  8672. <code>infisical</code></br>
  8673. <em>
  8674. <a href="#external-secrets.io/v1.InfisicalProvider">
  8675. InfisicalProvider
  8676. </a>
  8677. </em>
  8678. </td>
  8679. <td>
  8680. <em>(Optional)</em>
  8681. <p>Infisical configures this store to sync secrets using the Infisical provider</p>
  8682. </td>
  8683. </tr>
  8684. <tr>
  8685. <td>
  8686. <code>beyondtrust</code></br>
  8687. <em>
  8688. <a href="#external-secrets.io/v1.BeyondtrustProvider">
  8689. BeyondtrustProvider
  8690. </a>
  8691. </em>
  8692. </td>
  8693. <td>
  8694. <em>(Optional)</em>
  8695. <p>Beyondtrust configures this store to sync secrets using Password Safe provider.</p>
  8696. </td>
  8697. </tr>
  8698. <tr>
  8699. <td>
  8700. <code>cloudrusm</code></br>
  8701. <em>
  8702. <a href="#external-secrets.io/v1.CloudruSMProvider">
  8703. CloudruSMProvider
  8704. </a>
  8705. </em>
  8706. </td>
  8707. <td>
  8708. <em>(Optional)</em>
  8709. <p>CloudruSM configures this store to sync secrets using the Cloud.ru Secret Manager provider</p>
  8710. </td>
  8711. </tr>
  8712. </tbody>
  8713. </table>
  8714. <h3 id="external-secrets.io/v1.SecretStoreRef">SecretStoreRef
  8715. </h3>
  8716. <p>
  8717. (<em>Appears on:</em>
  8718. <a href="#external-secrets.io/v1.ExternalSecretSpec">ExternalSecretSpec</a>,
  8719. <a href="#external-secrets.io/v1.StoreGeneratorSourceRef">StoreGeneratorSourceRef</a>,
  8720. <a href="#external-secrets.io/v1.StoreSourceRef">StoreSourceRef</a>)
  8721. </p>
  8722. <p>
  8723. <p>SecretStoreRef defines which SecretStore to fetch the ExternalSecret data.</p>
  8724. </p>
  8725. <table>
  8726. <thead>
  8727. <tr>
  8728. <th>Field</th>
  8729. <th>Description</th>
  8730. </tr>
  8731. </thead>
  8732. <tbody>
  8733. <tr>
  8734. <td>
  8735. <code>name</code></br>
  8736. <em>
  8737. string
  8738. </em>
  8739. </td>
  8740. <td>
  8741. <p>Name of the SecretStore resource</p>
  8742. </td>
  8743. </tr>
  8744. <tr>
  8745. <td>
  8746. <code>kind</code></br>
  8747. <em>
  8748. string
  8749. </em>
  8750. </td>
  8751. <td>
  8752. <em>(Optional)</em>
  8753. <p>Kind of the SecretStore resource (SecretStore or ClusterSecretStore)
  8754. Defaults to <code>SecretStore</code></p>
  8755. </td>
  8756. </tr>
  8757. </tbody>
  8758. </table>
  8759. <h3 id="external-secrets.io/v1.SecretStoreRetrySettings">SecretStoreRetrySettings
  8760. </h3>
  8761. <p>
  8762. (<em>Appears on:</em>
  8763. <a href="#external-secrets.io/v1.SecretStoreSpec">SecretStoreSpec</a>)
  8764. </p>
  8765. <p>
  8766. </p>
  8767. <table>
  8768. <thead>
  8769. <tr>
  8770. <th>Field</th>
  8771. <th>Description</th>
  8772. </tr>
  8773. </thead>
  8774. <tbody>
  8775. <tr>
  8776. <td>
  8777. <code>maxRetries</code></br>
  8778. <em>
  8779. int32
  8780. </em>
  8781. </td>
  8782. <td>
  8783. </td>
  8784. </tr>
  8785. <tr>
  8786. <td>
  8787. <code>retryInterval</code></br>
  8788. <em>
  8789. string
  8790. </em>
  8791. </td>
  8792. <td>
  8793. </td>
  8794. </tr>
  8795. </tbody>
  8796. </table>
  8797. <h3 id="external-secrets.io/v1.SecretStoreSpec">SecretStoreSpec
  8798. </h3>
  8799. <p>
  8800. (<em>Appears on:</em>
  8801. <a href="#external-secrets.io/v1.ClusterSecretStore">ClusterSecretStore</a>,
  8802. <a href="#external-secrets.io/v1.SecretStore">SecretStore</a>)
  8803. </p>
  8804. <p>
  8805. <p>SecretStoreSpec defines the desired state of SecretStore.</p>
  8806. </p>
  8807. <table>
  8808. <thead>
  8809. <tr>
  8810. <th>Field</th>
  8811. <th>Description</th>
  8812. </tr>
  8813. </thead>
  8814. <tbody>
  8815. <tr>
  8816. <td>
  8817. <code>controller</code></br>
  8818. <em>
  8819. string
  8820. </em>
  8821. </td>
  8822. <td>
  8823. <em>(Optional)</em>
  8824. <p>Used to select the correct ESO controller (think: ingress.ingressClassName)
  8825. The ESO controller is instantiated with a specific controller name and filters ES based on this property</p>
  8826. </td>
  8827. </tr>
  8828. <tr>
  8829. <td>
  8830. <code>provider</code></br>
  8831. <em>
  8832. <a href="#external-secrets.io/v1.SecretStoreProvider">
  8833. SecretStoreProvider
  8834. </a>
  8835. </em>
  8836. </td>
  8837. <td>
  8838. <p>Used to configure the provider. Only one provider may be set</p>
  8839. </td>
  8840. </tr>
  8841. <tr>
  8842. <td>
  8843. <code>retrySettings</code></br>
  8844. <em>
  8845. <a href="#external-secrets.io/v1.SecretStoreRetrySettings">
  8846. SecretStoreRetrySettings
  8847. </a>
  8848. </em>
  8849. </td>
  8850. <td>
  8851. <em>(Optional)</em>
  8852. <p>Used to configure http retries if failed</p>
  8853. </td>
  8854. </tr>
  8855. <tr>
  8856. <td>
  8857. <code>refreshInterval</code></br>
  8858. <em>
  8859. int
  8860. </em>
  8861. </td>
  8862. <td>
  8863. <em>(Optional)</em>
  8864. <p>Used to configure store refresh interval in seconds. Empty or 0 will default to the controller config.</p>
  8865. </td>
  8866. </tr>
  8867. <tr>
  8868. <td>
  8869. <code>conditions</code></br>
  8870. <em>
  8871. <a href="#external-secrets.io/v1.ClusterSecretStoreCondition">
  8872. []ClusterSecretStoreCondition
  8873. </a>
  8874. </em>
  8875. </td>
  8876. <td>
  8877. <em>(Optional)</em>
  8878. <p>Used to constraint a ClusterSecretStore to specific namespaces. Relevant only to ClusterSecretStore</p>
  8879. </td>
  8880. </tr>
  8881. </tbody>
  8882. </table>
  8883. <h3 id="external-secrets.io/v1.SecretStoreStatus">SecretStoreStatus
  8884. </h3>
  8885. <p>
  8886. (<em>Appears on:</em>
  8887. <a href="#external-secrets.io/v1.ClusterSecretStore">ClusterSecretStore</a>,
  8888. <a href="#external-secrets.io/v1.SecretStore">SecretStore</a>)
  8889. </p>
  8890. <p>
  8891. <p>SecretStoreStatus defines the observed state of the SecretStore.</p>
  8892. </p>
  8893. <table>
  8894. <thead>
  8895. <tr>
  8896. <th>Field</th>
  8897. <th>Description</th>
  8898. </tr>
  8899. </thead>
  8900. <tbody>
  8901. <tr>
  8902. <td>
  8903. <code>conditions</code></br>
  8904. <em>
  8905. <a href="#external-secrets.io/v1.SecretStoreStatusCondition">
  8906. []SecretStoreStatusCondition
  8907. </a>
  8908. </em>
  8909. </td>
  8910. <td>
  8911. <em>(Optional)</em>
  8912. </td>
  8913. </tr>
  8914. <tr>
  8915. <td>
  8916. <code>capabilities</code></br>
  8917. <em>
  8918. <a href="#external-secrets.io/v1.SecretStoreCapabilities">
  8919. SecretStoreCapabilities
  8920. </a>
  8921. </em>
  8922. </td>
  8923. <td>
  8924. <em>(Optional)</em>
  8925. </td>
  8926. </tr>
  8927. </tbody>
  8928. </table>
  8929. <h3 id="external-secrets.io/v1.SecretStoreStatusCondition">SecretStoreStatusCondition
  8930. </h3>
  8931. <p>
  8932. (<em>Appears on:</em>
  8933. <a href="#external-secrets.io/v1.SecretStoreStatus">SecretStoreStatus</a>)
  8934. </p>
  8935. <p>
  8936. </p>
  8937. <table>
  8938. <thead>
  8939. <tr>
  8940. <th>Field</th>
  8941. <th>Description</th>
  8942. </tr>
  8943. </thead>
  8944. <tbody>
  8945. <tr>
  8946. <td>
  8947. <code>type</code></br>
  8948. <em>
  8949. <a href="#external-secrets.io/v1.SecretStoreConditionType">
  8950. SecretStoreConditionType
  8951. </a>
  8952. </em>
  8953. </td>
  8954. <td>
  8955. </td>
  8956. </tr>
  8957. <tr>
  8958. <td>
  8959. <code>status</code></br>
  8960. <em>
  8961. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#conditionstatus-v1-core">
  8962. Kubernetes core/v1.ConditionStatus
  8963. </a>
  8964. </em>
  8965. </td>
  8966. <td>
  8967. </td>
  8968. </tr>
  8969. <tr>
  8970. <td>
  8971. <code>reason</code></br>
  8972. <em>
  8973. string
  8974. </em>
  8975. </td>
  8976. <td>
  8977. <em>(Optional)</em>
  8978. </td>
  8979. </tr>
  8980. <tr>
  8981. <td>
  8982. <code>message</code></br>
  8983. <em>
  8984. string
  8985. </em>
  8986. </td>
  8987. <td>
  8988. <em>(Optional)</em>
  8989. </td>
  8990. </tr>
  8991. <tr>
  8992. <td>
  8993. <code>lastTransitionTime</code></br>
  8994. <em>
  8995. <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#time-v1-meta">
  8996. Kubernetes meta/v1.Time
  8997. </a>
  8998. </em>
  8999. </td>
  9000. <td>
  9001. <em>(Optional)</em>
  9002. </td>
  9003. </tr>
  9004. </tbody>
  9005. </table>
  9006. <h3 id="external-secrets.io/v1.SecretsClient">SecretsClient
  9007. </h3>
  9008. <p>
  9009. <p>SecretsClient provides access to secrets.</p>
  9010. </p>
  9011. <h3 id="external-secrets.io/v1.SecretsManager">SecretsManager
  9012. </h3>
  9013. <p>
  9014. (<em>Appears on:</em>
  9015. <a href="#external-secrets.io/v1.AWSProvider">AWSProvider</a>)
  9016. </p>
  9017. <p>
  9018. <p>SecretsManager defines how the provider behaves when interacting with AWS
  9019. SecretsManager. Some of these settings are only applicable to controlling how
  9020. secrets are deleted, and hence only apply to PushSecret (and only when
  9021. deletionPolicy is set to Delete).</p>
  9022. </p>
  9023. <table>
  9024. <thead>
  9025. <tr>
  9026. <th>Field</th>
  9027. <th>Description</th>
  9028. </tr>
  9029. </thead>
  9030. <tbody>
  9031. <tr>
  9032. <td>
  9033. <code>forceDeleteWithoutRecovery</code></br>
  9034. <em>
  9035. bool
  9036. </em>
  9037. </td>
  9038. <td>
  9039. <em>(Optional)</em>
  9040. <p>Specifies whether to delete the secret without any recovery window. You
  9041. can&rsquo;t use both this parameter and RecoveryWindowInDays in the same call.
  9042. If you don&rsquo;t use either, then by default Secrets Manager uses a 30 day
  9043. recovery window.
  9044. see: <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-ForceDeleteWithoutRecovery">https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-ForceDeleteWithoutRecovery</a></p>
  9045. </td>
  9046. </tr>
  9047. <tr>
  9048. <td>
  9049. <code>recoveryWindowInDays</code></br>
  9050. <em>
  9051. int64
  9052. </em>
  9053. </td>
  9054. <td>
  9055. <em>(Optional)</em>
  9056. <p>The number of days from 7 to 30 that Secrets Manager waits before
  9057. permanently deleting the secret. You can&rsquo;t use both this parameter and
  9058. ForceDeleteWithoutRecovery in the same call. If you don&rsquo;t use either,
  9059. then by default Secrets Manager uses a 30 day recovery window.
  9060. see: <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-RecoveryWindowInDays">https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html#SecretsManager-DeleteSecret-request-RecoveryWindowInDays</a></p>
  9061. </td>
  9062. </tr>
  9063. </tbody>
  9064. </table>
  9065. <h3 id="external-secrets.io/v1.SenhaseguraAuth">SenhaseguraAuth
  9066. </h3>
  9067. <p>
  9068. (<em>Appears on:</em>
  9069. <a href="#external-secrets.io/v1.SenhaseguraProvider">SenhaseguraProvider</a>)
  9070. </p>
  9071. <p>
  9072. <p>SenhaseguraAuth tells the controller how to do auth in senhasegura.</p>
  9073. </p>
  9074. <table>
  9075. <thead>
  9076. <tr>
  9077. <th>Field</th>
  9078. <th>Description</th>
  9079. </tr>
  9080. </thead>
  9081. <tbody>
  9082. <tr>
  9083. <td>
  9084. <code>clientId</code></br>
  9085. <em>
  9086. string
  9087. </em>
  9088. </td>
  9089. <td>
  9090. </td>
  9091. </tr>
  9092. <tr>
  9093. <td>
  9094. <code>clientSecretSecretRef</code></br>
  9095. <em>
  9096. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9097. External Secrets meta/v1.SecretKeySelector
  9098. </a>
  9099. </em>
  9100. </td>
  9101. <td>
  9102. </td>
  9103. </tr>
  9104. </tbody>
  9105. </table>
  9106. <h3 id="external-secrets.io/v1.SenhaseguraModuleType">SenhaseguraModuleType
  9107. (<code>string</code> alias)</p></h3>
  9108. <p>
  9109. (<em>Appears on:</em>
  9110. <a href="#external-secrets.io/v1.SenhaseguraProvider">SenhaseguraProvider</a>)
  9111. </p>
  9112. <p>
  9113. <p>SenhaseguraModuleType enum defines senhasegura target module to fetch secrets</p>
  9114. </p>
  9115. <table>
  9116. <thead>
  9117. <tr>
  9118. <th>Value</th>
  9119. <th>Description</th>
  9120. </tr>
  9121. </thead>
  9122. <tbody><tr><td><p>&#34;DSM&#34;</p></td>
  9123. <td><pre><code> SenhaseguraModuleDSM is the senhasegura DevOps Secrets Management module
  9124. see: https://senhasegura.com/devops
  9125. </code></pre>
  9126. </td>
  9127. </tr></tbody>
  9128. </table>
  9129. <h3 id="external-secrets.io/v1.SenhaseguraProvider">SenhaseguraProvider
  9130. </h3>
  9131. <p>
  9132. (<em>Appears on:</em>
  9133. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  9134. </p>
  9135. <p>
  9136. <p>SenhaseguraProvider setup a store to sync secrets with senhasegura.</p>
  9137. </p>
  9138. <table>
  9139. <thead>
  9140. <tr>
  9141. <th>Field</th>
  9142. <th>Description</th>
  9143. </tr>
  9144. </thead>
  9145. <tbody>
  9146. <tr>
  9147. <td>
  9148. <code>url</code></br>
  9149. <em>
  9150. string
  9151. </em>
  9152. </td>
  9153. <td>
  9154. <p>URL of senhasegura</p>
  9155. </td>
  9156. </tr>
  9157. <tr>
  9158. <td>
  9159. <code>module</code></br>
  9160. <em>
  9161. <a href="#external-secrets.io/v1.SenhaseguraModuleType">
  9162. SenhaseguraModuleType
  9163. </a>
  9164. </em>
  9165. </td>
  9166. <td>
  9167. <p>Module defines which senhasegura module should be used to get secrets</p>
  9168. </td>
  9169. </tr>
  9170. <tr>
  9171. <td>
  9172. <code>auth</code></br>
  9173. <em>
  9174. <a href="#external-secrets.io/v1.SenhaseguraAuth">
  9175. SenhaseguraAuth
  9176. </a>
  9177. </em>
  9178. </td>
  9179. <td>
  9180. <p>Auth defines parameters to authenticate in senhasegura</p>
  9181. </td>
  9182. </tr>
  9183. <tr>
  9184. <td>
  9185. <code>ignoreSslCertificate</code></br>
  9186. <em>
  9187. bool
  9188. </em>
  9189. </td>
  9190. <td>
  9191. <p>IgnoreSslCertificate defines if SSL certificate must be ignored</p>
  9192. </td>
  9193. </tr>
  9194. </tbody>
  9195. </table>
  9196. <h3 id="external-secrets.io/v1.StoreGeneratorSourceRef">StoreGeneratorSourceRef
  9197. </h3>
  9198. <p>
  9199. (<em>Appears on:</em>
  9200. <a href="#external-secrets.io/v1.ExternalSecretDataFromRemoteRef">ExternalSecretDataFromRemoteRef</a>)
  9201. </p>
  9202. <p>
  9203. <p>StoreGeneratorSourceRef allows you to override the source
  9204. from which the secret will be pulled from.
  9205. You can define at maximum one property.</p>
  9206. </p>
  9207. <table>
  9208. <thead>
  9209. <tr>
  9210. <th>Field</th>
  9211. <th>Description</th>
  9212. </tr>
  9213. </thead>
  9214. <tbody>
  9215. <tr>
  9216. <td>
  9217. <code>storeRef</code></br>
  9218. <em>
  9219. <a href="#external-secrets.io/v1.SecretStoreRef">
  9220. SecretStoreRef
  9221. </a>
  9222. </em>
  9223. </td>
  9224. <td>
  9225. <em>(Optional)</em>
  9226. </td>
  9227. </tr>
  9228. <tr>
  9229. <td>
  9230. <code>generatorRef</code></br>
  9231. <em>
  9232. <a href="#external-secrets.io/v1.GeneratorRef">
  9233. GeneratorRef
  9234. </a>
  9235. </em>
  9236. </td>
  9237. <td>
  9238. <em>(Optional)</em>
  9239. <p>GeneratorRef points to a generator custom resource.</p>
  9240. </td>
  9241. </tr>
  9242. </tbody>
  9243. </table>
  9244. <h3 id="external-secrets.io/v1.StoreSourceRef">StoreSourceRef
  9245. </h3>
  9246. <p>
  9247. (<em>Appears on:</em>
  9248. <a href="#external-secrets.io/v1.ExternalSecretData">ExternalSecretData</a>)
  9249. </p>
  9250. <p>
  9251. <p>StoreSourceRef allows you to override the SecretStore source
  9252. from which the secret will be pulled from.
  9253. You can define at maximum one property.</p>
  9254. </p>
  9255. <table>
  9256. <thead>
  9257. <tr>
  9258. <th>Field</th>
  9259. <th>Description</th>
  9260. </tr>
  9261. </thead>
  9262. <tbody>
  9263. <tr>
  9264. <td>
  9265. <code>storeRef</code></br>
  9266. <em>
  9267. <a href="#external-secrets.io/v1.SecretStoreRef">
  9268. SecretStoreRef
  9269. </a>
  9270. </em>
  9271. </td>
  9272. <td>
  9273. <em>(Optional)</em>
  9274. </td>
  9275. </tr>
  9276. <tr>
  9277. <td>
  9278. <code>generatorRef</code></br>
  9279. <em>
  9280. <a href="#external-secrets.io/v1.GeneratorRef">
  9281. GeneratorRef
  9282. </a>
  9283. </em>
  9284. </td>
  9285. <td>
  9286. <p>GeneratorRef points to a generator custom resource.</p>
  9287. <p>Deprecated: The generatorRef is not implemented in .data[].
  9288. this will be removed with v1.</p>
  9289. </td>
  9290. </tr>
  9291. </tbody>
  9292. </table>
  9293. <h3 id="external-secrets.io/v1.Tag">Tag
  9294. </h3>
  9295. <p>
  9296. </p>
  9297. <table>
  9298. <thead>
  9299. <tr>
  9300. <th>Field</th>
  9301. <th>Description</th>
  9302. </tr>
  9303. </thead>
  9304. <tbody>
  9305. <tr>
  9306. <td>
  9307. <code>key</code></br>
  9308. <em>
  9309. string
  9310. </em>
  9311. </td>
  9312. <td>
  9313. </td>
  9314. </tr>
  9315. <tr>
  9316. <td>
  9317. <code>value</code></br>
  9318. <em>
  9319. string
  9320. </em>
  9321. </td>
  9322. <td>
  9323. </td>
  9324. </tr>
  9325. </tbody>
  9326. </table>
  9327. <h3 id="external-secrets.io/v1.TemplateEngineVersion">TemplateEngineVersion
  9328. (<code>string</code> alias)</p></h3>
  9329. <p>
  9330. (<em>Appears on:</em>
  9331. <a href="#external-secrets.io/v1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  9332. </p>
  9333. <p>
  9334. </p>
  9335. <table>
  9336. <thead>
  9337. <tr>
  9338. <th>Value</th>
  9339. <th>Description</th>
  9340. </tr>
  9341. </thead>
  9342. <tbody><tr><td><p>&#34;v2&#34;</p></td>
  9343. <td></td>
  9344. </tr></tbody>
  9345. </table>
  9346. <h3 id="external-secrets.io/v1.TemplateFrom">TemplateFrom
  9347. </h3>
  9348. <p>
  9349. (<em>Appears on:</em>
  9350. <a href="#external-secrets.io/v1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  9351. </p>
  9352. <p>
  9353. </p>
  9354. <table>
  9355. <thead>
  9356. <tr>
  9357. <th>Field</th>
  9358. <th>Description</th>
  9359. </tr>
  9360. </thead>
  9361. <tbody>
  9362. <tr>
  9363. <td>
  9364. <code>configMap</code></br>
  9365. <em>
  9366. <a href="#external-secrets.io/v1.TemplateRef">
  9367. TemplateRef
  9368. </a>
  9369. </em>
  9370. </td>
  9371. <td>
  9372. </td>
  9373. </tr>
  9374. <tr>
  9375. <td>
  9376. <code>secret</code></br>
  9377. <em>
  9378. <a href="#external-secrets.io/v1.TemplateRef">
  9379. TemplateRef
  9380. </a>
  9381. </em>
  9382. </td>
  9383. <td>
  9384. </td>
  9385. </tr>
  9386. <tr>
  9387. <td>
  9388. <code>target</code></br>
  9389. <em>
  9390. <a href="#external-secrets.io/v1.TemplateTarget">
  9391. TemplateTarget
  9392. </a>
  9393. </em>
  9394. </td>
  9395. <td>
  9396. <em>(Optional)</em>
  9397. </td>
  9398. </tr>
  9399. <tr>
  9400. <td>
  9401. <code>literal</code></br>
  9402. <em>
  9403. string
  9404. </em>
  9405. </td>
  9406. <td>
  9407. <em>(Optional)</em>
  9408. </td>
  9409. </tr>
  9410. </tbody>
  9411. </table>
  9412. <h3 id="external-secrets.io/v1.TemplateMergePolicy">TemplateMergePolicy
  9413. (<code>string</code> alias)</p></h3>
  9414. <p>
  9415. (<em>Appears on:</em>
  9416. <a href="#external-secrets.io/v1.ExternalSecretTemplate">ExternalSecretTemplate</a>)
  9417. </p>
  9418. <p>
  9419. </p>
  9420. <table>
  9421. <thead>
  9422. <tr>
  9423. <th>Value</th>
  9424. <th>Description</th>
  9425. </tr>
  9426. </thead>
  9427. <tbody><tr><td><p>&#34;Merge&#34;</p></td>
  9428. <td></td>
  9429. </tr><tr><td><p>&#34;Replace&#34;</p></td>
  9430. <td></td>
  9431. </tr></tbody>
  9432. </table>
  9433. <h3 id="external-secrets.io/v1.TemplateRef">TemplateRef
  9434. </h3>
  9435. <p>
  9436. (<em>Appears on:</em>
  9437. <a href="#external-secrets.io/v1.TemplateFrom">TemplateFrom</a>)
  9438. </p>
  9439. <p>
  9440. </p>
  9441. <table>
  9442. <thead>
  9443. <tr>
  9444. <th>Field</th>
  9445. <th>Description</th>
  9446. </tr>
  9447. </thead>
  9448. <tbody>
  9449. <tr>
  9450. <td>
  9451. <code>name</code></br>
  9452. <em>
  9453. string
  9454. </em>
  9455. </td>
  9456. <td>
  9457. <p>The name of the ConfigMap/Secret resource</p>
  9458. </td>
  9459. </tr>
  9460. <tr>
  9461. <td>
  9462. <code>items</code></br>
  9463. <em>
  9464. <a href="#external-secrets.io/v1.TemplateRefItem">
  9465. []TemplateRefItem
  9466. </a>
  9467. </em>
  9468. </td>
  9469. <td>
  9470. <p>A list of keys in the ConfigMap/Secret to use as templates for Secret data</p>
  9471. </td>
  9472. </tr>
  9473. </tbody>
  9474. </table>
  9475. <h3 id="external-secrets.io/v1.TemplateRefItem">TemplateRefItem
  9476. </h3>
  9477. <p>
  9478. (<em>Appears on:</em>
  9479. <a href="#external-secrets.io/v1.TemplateRef">TemplateRef</a>)
  9480. </p>
  9481. <p>
  9482. </p>
  9483. <table>
  9484. <thead>
  9485. <tr>
  9486. <th>Field</th>
  9487. <th>Description</th>
  9488. </tr>
  9489. </thead>
  9490. <tbody>
  9491. <tr>
  9492. <td>
  9493. <code>key</code></br>
  9494. <em>
  9495. string
  9496. </em>
  9497. </td>
  9498. <td>
  9499. <p>A key in the ConfigMap/Secret</p>
  9500. </td>
  9501. </tr>
  9502. <tr>
  9503. <td>
  9504. <code>templateAs</code></br>
  9505. <em>
  9506. <a href="#external-secrets.io/v1.TemplateScope">
  9507. TemplateScope
  9508. </a>
  9509. </em>
  9510. </td>
  9511. <td>
  9512. </td>
  9513. </tr>
  9514. </tbody>
  9515. </table>
  9516. <h3 id="external-secrets.io/v1.TemplateScope">TemplateScope
  9517. (<code>string</code> alias)</p></h3>
  9518. <p>
  9519. (<em>Appears on:</em>
  9520. <a href="#external-secrets.io/v1.TemplateRefItem">TemplateRefItem</a>)
  9521. </p>
  9522. <p>
  9523. </p>
  9524. <table>
  9525. <thead>
  9526. <tr>
  9527. <th>Value</th>
  9528. <th>Description</th>
  9529. </tr>
  9530. </thead>
  9531. <tbody><tr><td><p>&#34;KeysAndValues&#34;</p></td>
  9532. <td></td>
  9533. </tr><tr><td><p>&#34;Values&#34;</p></td>
  9534. <td></td>
  9535. </tr></tbody>
  9536. </table>
  9537. <h3 id="external-secrets.io/v1.TemplateTarget">TemplateTarget
  9538. (<code>string</code> alias)</p></h3>
  9539. <p>
  9540. (<em>Appears on:</em>
  9541. <a href="#external-secrets.io/v1.TemplateFrom">TemplateFrom</a>)
  9542. </p>
  9543. <p>
  9544. </p>
  9545. <table>
  9546. <thead>
  9547. <tr>
  9548. <th>Value</th>
  9549. <th>Description</th>
  9550. </tr>
  9551. </thead>
  9552. <tbody><tr><td><p>&#34;Annotations&#34;</p></td>
  9553. <td></td>
  9554. </tr><tr><td><p>&#34;Data&#34;</p></td>
  9555. <td></td>
  9556. </tr><tr><td><p>&#34;Labels&#34;</p></td>
  9557. <td></td>
  9558. </tr></tbody>
  9559. </table>
  9560. <h3 id="external-secrets.io/v1.TokenAuth">TokenAuth
  9561. </h3>
  9562. <p>
  9563. (<em>Appears on:</em>
  9564. <a href="#external-secrets.io/v1.KubernetesAuth">KubernetesAuth</a>)
  9565. </p>
  9566. <p>
  9567. </p>
  9568. <table>
  9569. <thead>
  9570. <tr>
  9571. <th>Field</th>
  9572. <th>Description</th>
  9573. </tr>
  9574. </thead>
  9575. <tbody>
  9576. <tr>
  9577. <td>
  9578. <code>bearerToken</code></br>
  9579. <em>
  9580. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9581. External Secrets meta/v1.SecretKeySelector
  9582. </a>
  9583. </em>
  9584. </td>
  9585. <td>
  9586. </td>
  9587. </tr>
  9588. </tbody>
  9589. </table>
  9590. <h3 id="external-secrets.io/v1.UniversalAuthCredentials">UniversalAuthCredentials
  9591. </h3>
  9592. <p>
  9593. (<em>Appears on:</em>
  9594. <a href="#external-secrets.io/v1.InfisicalAuth">InfisicalAuth</a>)
  9595. </p>
  9596. <p>
  9597. </p>
  9598. <table>
  9599. <thead>
  9600. <tr>
  9601. <th>Field</th>
  9602. <th>Description</th>
  9603. </tr>
  9604. </thead>
  9605. <tbody>
  9606. <tr>
  9607. <td>
  9608. <code>clientId</code></br>
  9609. <em>
  9610. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9611. External Secrets meta/v1.SecretKeySelector
  9612. </a>
  9613. </em>
  9614. </td>
  9615. <td>
  9616. </td>
  9617. </tr>
  9618. <tr>
  9619. <td>
  9620. <code>clientSecret</code></br>
  9621. <em>
  9622. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9623. External Secrets meta/v1.SecretKeySelector
  9624. </a>
  9625. </em>
  9626. </td>
  9627. <td>
  9628. </td>
  9629. </tr>
  9630. </tbody>
  9631. </table>
  9632. <h3 id="external-secrets.io/v1.ValidationResult">ValidationResult
  9633. (<code>byte</code> alias)</p></h3>
  9634. <p>
  9635. </p>
  9636. <table>
  9637. <thead>
  9638. <tr>
  9639. <th>Value</th>
  9640. <th>Description</th>
  9641. </tr>
  9642. </thead>
  9643. <tbody><tr><td><p>2</p></td>
  9644. <td><p>Error indicates that there is a misconfiguration.</p>
  9645. </td>
  9646. </tr><tr><td><p>0</p></td>
  9647. <td><p>Ready indicates that the client is configured correctly
  9648. and can be used.</p>
  9649. </td>
  9650. </tr><tr><td><p>1</p></td>
  9651. <td><p>Unknown indicates that the client can be used
  9652. but information is missing and it can not be validated.</p>
  9653. </td>
  9654. </tr></tbody>
  9655. </table>
  9656. <h3 id="external-secrets.io/v1.VaultAppRole">VaultAppRole
  9657. </h3>
  9658. <p>
  9659. (<em>Appears on:</em>
  9660. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  9661. </p>
  9662. <p>
  9663. <p>VaultAppRole authenticates with Vault using the App Role auth mechanism,
  9664. with the role and secret stored in a Kubernetes Secret resource.</p>
  9665. </p>
  9666. <table>
  9667. <thead>
  9668. <tr>
  9669. <th>Field</th>
  9670. <th>Description</th>
  9671. </tr>
  9672. </thead>
  9673. <tbody>
  9674. <tr>
  9675. <td>
  9676. <code>path</code></br>
  9677. <em>
  9678. string
  9679. </em>
  9680. </td>
  9681. <td>
  9682. <p>Path where the App Role authentication backend is mounted
  9683. in Vault, e.g: &ldquo;approle&rdquo;</p>
  9684. </td>
  9685. </tr>
  9686. <tr>
  9687. <td>
  9688. <code>roleId</code></br>
  9689. <em>
  9690. string
  9691. </em>
  9692. </td>
  9693. <td>
  9694. <em>(Optional)</em>
  9695. <p>RoleID configured in the App Role authentication backend when setting
  9696. up the authentication backend in Vault.</p>
  9697. </td>
  9698. </tr>
  9699. <tr>
  9700. <td>
  9701. <code>roleRef</code></br>
  9702. <em>
  9703. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9704. External Secrets meta/v1.SecretKeySelector
  9705. </a>
  9706. </em>
  9707. </td>
  9708. <td>
  9709. <em>(Optional)</em>
  9710. <p>Reference to a key in a Secret that contains the App Role ID used
  9711. to authenticate with Vault.
  9712. The <code>key</code> field must be specified and denotes which entry within the Secret
  9713. resource is used as the app role id.</p>
  9714. </td>
  9715. </tr>
  9716. <tr>
  9717. <td>
  9718. <code>secretRef</code></br>
  9719. <em>
  9720. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9721. External Secrets meta/v1.SecretKeySelector
  9722. </a>
  9723. </em>
  9724. </td>
  9725. <td>
  9726. <p>Reference to a key in a Secret that contains the App Role secret used
  9727. to authenticate with Vault.
  9728. The <code>key</code> field must be specified and denotes which entry within the Secret
  9729. resource is used as the app role secret.</p>
  9730. </td>
  9731. </tr>
  9732. </tbody>
  9733. </table>
  9734. <h3 id="external-secrets.io/v1.VaultAuth">VaultAuth
  9735. </h3>
  9736. <p>
  9737. (<em>Appears on:</em>
  9738. <a href="#external-secrets.io/v1.VaultProvider">VaultProvider</a>)
  9739. </p>
  9740. <p>
  9741. <p>VaultAuth is the configuration used to authenticate with a Vault server.
  9742. Only one of <code>tokenSecretRef</code>, <code>appRole</code>, <code>kubernetes</code>, <code>ldap</code>, <code>userPass</code>, <code>jwt</code> or <code>cert</code>
  9743. can be specified. A namespace to authenticate against can optionally be specified.</p>
  9744. </p>
  9745. <table>
  9746. <thead>
  9747. <tr>
  9748. <th>Field</th>
  9749. <th>Description</th>
  9750. </tr>
  9751. </thead>
  9752. <tbody>
  9753. <tr>
  9754. <td>
  9755. <code>namespace</code></br>
  9756. <em>
  9757. string
  9758. </em>
  9759. </td>
  9760. <td>
  9761. <em>(Optional)</em>
  9762. <p>Name of the vault namespace to authenticate to. This can be different than the namespace your secret is in.
  9763. Namespaces is a set of features within Vault Enterprise that allows
  9764. Vault environments to support Secure Multi-tenancy. e.g: &ldquo;ns1&rdquo;.
  9765. More about namespaces can be found here <a href="https://www.vaultproject.io/docs/enterprise/namespaces">https://www.vaultproject.io/docs/enterprise/namespaces</a>
  9766. This will default to Vault.Namespace field if set, or empty otherwise</p>
  9767. </td>
  9768. </tr>
  9769. <tr>
  9770. <td>
  9771. <code>tokenSecretRef</code></br>
  9772. <em>
  9773. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9774. External Secrets meta/v1.SecretKeySelector
  9775. </a>
  9776. </em>
  9777. </td>
  9778. <td>
  9779. <em>(Optional)</em>
  9780. <p>TokenSecretRef authenticates with Vault by presenting a token.</p>
  9781. </td>
  9782. </tr>
  9783. <tr>
  9784. <td>
  9785. <code>appRole</code></br>
  9786. <em>
  9787. <a href="#external-secrets.io/v1.VaultAppRole">
  9788. VaultAppRole
  9789. </a>
  9790. </em>
  9791. </td>
  9792. <td>
  9793. <em>(Optional)</em>
  9794. <p>AppRole authenticates with Vault using the App Role auth mechanism,
  9795. with the role and secret stored in a Kubernetes Secret resource.</p>
  9796. </td>
  9797. </tr>
  9798. <tr>
  9799. <td>
  9800. <code>kubernetes</code></br>
  9801. <em>
  9802. <a href="#external-secrets.io/v1.VaultKubernetesAuth">
  9803. VaultKubernetesAuth
  9804. </a>
  9805. </em>
  9806. </td>
  9807. <td>
  9808. <em>(Optional)</em>
  9809. <p>Kubernetes authenticates with Vault by passing the ServiceAccount
  9810. token stored in the named Secret resource to the Vault server.</p>
  9811. </td>
  9812. </tr>
  9813. <tr>
  9814. <td>
  9815. <code>ldap</code></br>
  9816. <em>
  9817. <a href="#external-secrets.io/v1.VaultLdapAuth">
  9818. VaultLdapAuth
  9819. </a>
  9820. </em>
  9821. </td>
  9822. <td>
  9823. <em>(Optional)</em>
  9824. <p>Ldap authenticates with Vault by passing username/password pair using
  9825. the LDAP authentication method</p>
  9826. </td>
  9827. </tr>
  9828. <tr>
  9829. <td>
  9830. <code>jwt</code></br>
  9831. <em>
  9832. <a href="#external-secrets.io/v1.VaultJwtAuth">
  9833. VaultJwtAuth
  9834. </a>
  9835. </em>
  9836. </td>
  9837. <td>
  9838. <em>(Optional)</em>
  9839. <p>Jwt authenticates with Vault by passing role and JWT token using the
  9840. JWT/OIDC authentication method</p>
  9841. </td>
  9842. </tr>
  9843. <tr>
  9844. <td>
  9845. <code>cert</code></br>
  9846. <em>
  9847. <a href="#external-secrets.io/v1.VaultCertAuth">
  9848. VaultCertAuth
  9849. </a>
  9850. </em>
  9851. </td>
  9852. <td>
  9853. <em>(Optional)</em>
  9854. <p>Cert authenticates with TLS Certificates by passing client certificate, private key and ca certificate
  9855. Cert authentication method</p>
  9856. </td>
  9857. </tr>
  9858. <tr>
  9859. <td>
  9860. <code>iam</code></br>
  9861. <em>
  9862. <a href="#external-secrets.io/v1.VaultIamAuth">
  9863. VaultIamAuth
  9864. </a>
  9865. </em>
  9866. </td>
  9867. <td>
  9868. <em>(Optional)</em>
  9869. <p>Iam authenticates with vault by passing a special AWS request signed with AWS IAM credentials
  9870. AWS IAM authentication method</p>
  9871. </td>
  9872. </tr>
  9873. <tr>
  9874. <td>
  9875. <code>userPass</code></br>
  9876. <em>
  9877. <a href="#external-secrets.io/v1.VaultUserPassAuth">
  9878. VaultUserPassAuth
  9879. </a>
  9880. </em>
  9881. </td>
  9882. <td>
  9883. <em>(Optional)</em>
  9884. <p>UserPass authenticates with Vault by passing username/password pair</p>
  9885. </td>
  9886. </tr>
  9887. </tbody>
  9888. </table>
  9889. <h3 id="external-secrets.io/v1.VaultAwsAuth">VaultAwsAuth
  9890. </h3>
  9891. <p>
  9892. <p>VaultAwsAuth tells the controller how to do authentication with aws.
  9893. Only one of secretRef or jwt can be specified.
  9894. if none is specified the controller will try to load credentials from its own service account assuming it is IRSA enabled.</p>
  9895. </p>
  9896. <table>
  9897. <thead>
  9898. <tr>
  9899. <th>Field</th>
  9900. <th>Description</th>
  9901. </tr>
  9902. </thead>
  9903. <tbody>
  9904. <tr>
  9905. <td>
  9906. <code>secretRef</code></br>
  9907. <em>
  9908. <a href="#external-secrets.io/v1.VaultAwsAuthSecretRef">
  9909. VaultAwsAuthSecretRef
  9910. </a>
  9911. </em>
  9912. </td>
  9913. <td>
  9914. <em>(Optional)</em>
  9915. </td>
  9916. </tr>
  9917. <tr>
  9918. <td>
  9919. <code>jwt</code></br>
  9920. <em>
  9921. <a href="#external-secrets.io/v1.VaultAwsJWTAuth">
  9922. VaultAwsJWTAuth
  9923. </a>
  9924. </em>
  9925. </td>
  9926. <td>
  9927. <em>(Optional)</em>
  9928. </td>
  9929. </tr>
  9930. </tbody>
  9931. </table>
  9932. <h3 id="external-secrets.io/v1.VaultAwsAuthSecretRef">VaultAwsAuthSecretRef
  9933. </h3>
  9934. <p>
  9935. (<em>Appears on:</em>
  9936. <a href="#external-secrets.io/v1.VaultAwsAuth">VaultAwsAuth</a>,
  9937. <a href="#external-secrets.io/v1.VaultIamAuth">VaultIamAuth</a>)
  9938. </p>
  9939. <p>
  9940. <p>VaultAWSAuthSecretRef holds secret references for AWS credentials
  9941. both AccessKeyID and SecretAccessKey must be defined in order to properly authenticate.</p>
  9942. </p>
  9943. <table>
  9944. <thead>
  9945. <tr>
  9946. <th>Field</th>
  9947. <th>Description</th>
  9948. </tr>
  9949. </thead>
  9950. <tbody>
  9951. <tr>
  9952. <td>
  9953. <code>accessKeyIDSecretRef</code></br>
  9954. <em>
  9955. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9956. External Secrets meta/v1.SecretKeySelector
  9957. </a>
  9958. </em>
  9959. </td>
  9960. <td>
  9961. <em>(Optional)</em>
  9962. <p>The AccessKeyID is used for authentication</p>
  9963. </td>
  9964. </tr>
  9965. <tr>
  9966. <td>
  9967. <code>secretAccessKeySecretRef</code></br>
  9968. <em>
  9969. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9970. External Secrets meta/v1.SecretKeySelector
  9971. </a>
  9972. </em>
  9973. </td>
  9974. <td>
  9975. <em>(Optional)</em>
  9976. <p>The SecretAccessKey is used for authentication</p>
  9977. </td>
  9978. </tr>
  9979. <tr>
  9980. <td>
  9981. <code>sessionTokenSecretRef</code></br>
  9982. <em>
  9983. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  9984. External Secrets meta/v1.SecretKeySelector
  9985. </a>
  9986. </em>
  9987. </td>
  9988. <td>
  9989. <em>(Optional)</em>
  9990. <p>The SessionToken used for authentication
  9991. This must be defined if AccessKeyID and SecretAccessKey are temporary credentials
  9992. see: <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html">https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html</a></p>
  9993. </td>
  9994. </tr>
  9995. </tbody>
  9996. </table>
  9997. <h3 id="external-secrets.io/v1.VaultAwsJWTAuth">VaultAwsJWTAuth
  9998. </h3>
  9999. <p>
  10000. (<em>Appears on:</em>
  10001. <a href="#external-secrets.io/v1.VaultAwsAuth">VaultAwsAuth</a>,
  10002. <a href="#external-secrets.io/v1.VaultIamAuth">VaultIamAuth</a>)
  10003. </p>
  10004. <p>
  10005. <p>VaultAwsJWTAuth Authenticate against AWS using service account tokens.</p>
  10006. </p>
  10007. <table>
  10008. <thead>
  10009. <tr>
  10010. <th>Field</th>
  10011. <th>Description</th>
  10012. </tr>
  10013. </thead>
  10014. <tbody>
  10015. <tr>
  10016. <td>
  10017. <code>serviceAccountRef</code></br>
  10018. <em>
  10019. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  10020. External Secrets meta/v1.ServiceAccountSelector
  10021. </a>
  10022. </em>
  10023. </td>
  10024. <td>
  10025. <em>(Optional)</em>
  10026. </td>
  10027. </tr>
  10028. </tbody>
  10029. </table>
  10030. <h3 id="external-secrets.io/v1.VaultCertAuth">VaultCertAuth
  10031. </h3>
  10032. <p>
  10033. (<em>Appears on:</em>
  10034. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10035. </p>
  10036. <p>
  10037. <p>VaultCertAuth authenticates with Vault using the JWT/OIDC authentication
  10038. method, with the role name and token stored in a Kubernetes Secret resource.</p>
  10039. </p>
  10040. <table>
  10041. <thead>
  10042. <tr>
  10043. <th>Field</th>
  10044. <th>Description</th>
  10045. </tr>
  10046. </thead>
  10047. <tbody>
  10048. <tr>
  10049. <td>
  10050. <code>clientCert</code></br>
  10051. <em>
  10052. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10053. External Secrets meta/v1.SecretKeySelector
  10054. </a>
  10055. </em>
  10056. </td>
  10057. <td>
  10058. <em>(Optional)</em>
  10059. <p>ClientCert is a certificate to authenticate using the Cert Vault
  10060. authentication method</p>
  10061. </td>
  10062. </tr>
  10063. <tr>
  10064. <td>
  10065. <code>secretRef</code></br>
  10066. <em>
  10067. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10068. External Secrets meta/v1.SecretKeySelector
  10069. </a>
  10070. </em>
  10071. </td>
  10072. <td>
  10073. <em>(Optional)</em>
  10074. <p>SecretRef to a key in a Secret resource containing client private key to
  10075. authenticate with Vault using the Cert authentication method</p>
  10076. </td>
  10077. </tr>
  10078. </tbody>
  10079. </table>
  10080. <h3 id="external-secrets.io/v1.VaultClientTLS">VaultClientTLS
  10081. </h3>
  10082. <p>
  10083. (<em>Appears on:</em>
  10084. <a href="#external-secrets.io/v1.VaultProvider">VaultProvider</a>)
  10085. </p>
  10086. <p>
  10087. <p>VaultClientTLS is the configuration used for client side related TLS communication,
  10088. when the Vault server requires mutual authentication.</p>
  10089. </p>
  10090. <table>
  10091. <thead>
  10092. <tr>
  10093. <th>Field</th>
  10094. <th>Description</th>
  10095. </tr>
  10096. </thead>
  10097. <tbody>
  10098. <tr>
  10099. <td>
  10100. <code>certSecretRef</code></br>
  10101. <em>
  10102. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10103. External Secrets meta/v1.SecretKeySelector
  10104. </a>
  10105. </em>
  10106. </td>
  10107. <td>
  10108. <em>(Optional)</em>
  10109. <p>CertSecretRef is a certificate added to the transport layer
  10110. when communicating with the Vault server.
  10111. If no key for the Secret is specified, external-secret will default to &lsquo;tls.crt&rsquo;.</p>
  10112. </td>
  10113. </tr>
  10114. <tr>
  10115. <td>
  10116. <code>keySecretRef</code></br>
  10117. <em>
  10118. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10119. External Secrets meta/v1.SecretKeySelector
  10120. </a>
  10121. </em>
  10122. </td>
  10123. <td>
  10124. <em>(Optional)</em>
  10125. <p>KeySecretRef to a key in a Secret resource containing client private key
  10126. added to the transport layer when communicating with the Vault server.
  10127. If no key for the Secret is specified, external-secret will default to &lsquo;tls.key&rsquo;.</p>
  10128. </td>
  10129. </tr>
  10130. </tbody>
  10131. </table>
  10132. <h3 id="external-secrets.io/v1.VaultIamAuth">VaultIamAuth
  10133. </h3>
  10134. <p>
  10135. (<em>Appears on:</em>
  10136. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10137. </p>
  10138. <p>
  10139. <p>VaultIamAuth authenticates with Vault using the Vault&rsquo;s AWS IAM authentication method. Refer: <a href="https://developer.hashicorp.com/vault/docs/auth/aws">https://developer.hashicorp.com/vault/docs/auth/aws</a></p>
  10140. </p>
  10141. <table>
  10142. <thead>
  10143. <tr>
  10144. <th>Field</th>
  10145. <th>Description</th>
  10146. </tr>
  10147. </thead>
  10148. <tbody>
  10149. <tr>
  10150. <td>
  10151. <code>path</code></br>
  10152. <em>
  10153. string
  10154. </em>
  10155. </td>
  10156. <td>
  10157. <em>(Optional)</em>
  10158. <p>Path where the AWS auth method is enabled in Vault, e.g: &ldquo;aws&rdquo;</p>
  10159. </td>
  10160. </tr>
  10161. <tr>
  10162. <td>
  10163. <code>region</code></br>
  10164. <em>
  10165. string
  10166. </em>
  10167. </td>
  10168. <td>
  10169. <em>(Optional)</em>
  10170. <p>AWS region</p>
  10171. </td>
  10172. </tr>
  10173. <tr>
  10174. <td>
  10175. <code>role</code></br>
  10176. <em>
  10177. string
  10178. </em>
  10179. </td>
  10180. <td>
  10181. <em>(Optional)</em>
  10182. <p>This is the AWS role to be assumed before talking to vault</p>
  10183. </td>
  10184. </tr>
  10185. <tr>
  10186. <td>
  10187. <code>vaultRole</code></br>
  10188. <em>
  10189. string
  10190. </em>
  10191. </td>
  10192. <td>
  10193. <p>Vault Role. In vault, a role describes an identity with a set of permissions, groups, or policies you want to attach a user of the secrets engine</p>
  10194. </td>
  10195. </tr>
  10196. <tr>
  10197. <td>
  10198. <code>externalID</code></br>
  10199. <em>
  10200. string
  10201. </em>
  10202. </td>
  10203. <td>
  10204. <p>AWS External ID set on assumed IAM roles</p>
  10205. </td>
  10206. </tr>
  10207. <tr>
  10208. <td>
  10209. <code>vaultAwsIamServerID</code></br>
  10210. <em>
  10211. string
  10212. </em>
  10213. </td>
  10214. <td>
  10215. <em>(Optional)</em>
  10216. <p>X-Vault-AWS-IAM-Server-ID is an additional header used by Vault IAM auth method to mitigate against different types of replay attacks. More details here: <a href="https://developer.hashicorp.com/vault/docs/auth/aws">https://developer.hashicorp.com/vault/docs/auth/aws</a></p>
  10217. </td>
  10218. </tr>
  10219. <tr>
  10220. <td>
  10221. <code>secretRef</code></br>
  10222. <em>
  10223. <a href="#external-secrets.io/v1.VaultAwsAuthSecretRef">
  10224. VaultAwsAuthSecretRef
  10225. </a>
  10226. </em>
  10227. </td>
  10228. <td>
  10229. <em>(Optional)</em>
  10230. <p>Specify credentials in a Secret object</p>
  10231. </td>
  10232. </tr>
  10233. <tr>
  10234. <td>
  10235. <code>jwt</code></br>
  10236. <em>
  10237. <a href="#external-secrets.io/v1.VaultAwsJWTAuth">
  10238. VaultAwsJWTAuth
  10239. </a>
  10240. </em>
  10241. </td>
  10242. <td>
  10243. <em>(Optional)</em>
  10244. <p>Specify a service account with IRSA enabled</p>
  10245. </td>
  10246. </tr>
  10247. </tbody>
  10248. </table>
  10249. <h3 id="external-secrets.io/v1.VaultJwtAuth">VaultJwtAuth
  10250. </h3>
  10251. <p>
  10252. (<em>Appears on:</em>
  10253. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10254. </p>
  10255. <p>
  10256. <p>VaultJwtAuth authenticates with Vault using the JWT/OIDC authentication
  10257. method, with the role name and a token stored in a Kubernetes Secret resource or
  10258. a Kubernetes service account token retrieved via <code>TokenRequest</code>.</p>
  10259. </p>
  10260. <table>
  10261. <thead>
  10262. <tr>
  10263. <th>Field</th>
  10264. <th>Description</th>
  10265. </tr>
  10266. </thead>
  10267. <tbody>
  10268. <tr>
  10269. <td>
  10270. <code>path</code></br>
  10271. <em>
  10272. string
  10273. </em>
  10274. </td>
  10275. <td>
  10276. <p>Path where the JWT authentication backend is mounted
  10277. in Vault, e.g: &ldquo;jwt&rdquo;</p>
  10278. </td>
  10279. </tr>
  10280. <tr>
  10281. <td>
  10282. <code>role</code></br>
  10283. <em>
  10284. string
  10285. </em>
  10286. </td>
  10287. <td>
  10288. <em>(Optional)</em>
  10289. <p>Role is a JWT role to authenticate using the JWT/OIDC Vault
  10290. authentication method</p>
  10291. </td>
  10292. </tr>
  10293. <tr>
  10294. <td>
  10295. <code>secretRef</code></br>
  10296. <em>
  10297. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10298. External Secrets meta/v1.SecretKeySelector
  10299. </a>
  10300. </em>
  10301. </td>
  10302. <td>
  10303. <em>(Optional)</em>
  10304. <p>Optional SecretRef that refers to a key in a Secret resource containing JWT token to
  10305. authenticate with Vault using the JWT/OIDC authentication method.</p>
  10306. </td>
  10307. </tr>
  10308. <tr>
  10309. <td>
  10310. <code>kubernetesServiceAccountToken</code></br>
  10311. <em>
  10312. <a href="#external-secrets.io/v1.VaultKubernetesServiceAccountTokenAuth">
  10313. VaultKubernetesServiceAccountTokenAuth
  10314. </a>
  10315. </em>
  10316. </td>
  10317. <td>
  10318. <em>(Optional)</em>
  10319. <p>Optional ServiceAccountToken specifies the Kubernetes service account for which to request
  10320. a token for with the <code>TokenRequest</code> API.</p>
  10321. </td>
  10322. </tr>
  10323. </tbody>
  10324. </table>
  10325. <h3 id="external-secrets.io/v1.VaultKVStoreVersion">VaultKVStoreVersion
  10326. (<code>string</code> alias)</p></h3>
  10327. <p>
  10328. (<em>Appears on:</em>
  10329. <a href="#external-secrets.io/v1.VaultProvider">VaultProvider</a>)
  10330. </p>
  10331. <p>
  10332. </p>
  10333. <table>
  10334. <thead>
  10335. <tr>
  10336. <th>Value</th>
  10337. <th>Description</th>
  10338. </tr>
  10339. </thead>
  10340. <tbody><tr><td><p>&#34;v1&#34;</p></td>
  10341. <td></td>
  10342. </tr><tr><td><p>&#34;v2&#34;</p></td>
  10343. <td></td>
  10344. </tr></tbody>
  10345. </table>
  10346. <h3 id="external-secrets.io/v1.VaultKubernetesAuth">VaultKubernetesAuth
  10347. </h3>
  10348. <p>
  10349. (<em>Appears on:</em>
  10350. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10351. </p>
  10352. <p>
  10353. <p>Authenticate against Vault using a Kubernetes ServiceAccount token stored in
  10354. a Secret.</p>
  10355. </p>
  10356. <table>
  10357. <thead>
  10358. <tr>
  10359. <th>Field</th>
  10360. <th>Description</th>
  10361. </tr>
  10362. </thead>
  10363. <tbody>
  10364. <tr>
  10365. <td>
  10366. <code>mountPath</code></br>
  10367. <em>
  10368. string
  10369. </em>
  10370. </td>
  10371. <td>
  10372. <p>Path where the Kubernetes authentication backend is mounted in Vault, e.g:
  10373. &ldquo;kubernetes&rdquo;</p>
  10374. </td>
  10375. </tr>
  10376. <tr>
  10377. <td>
  10378. <code>serviceAccountRef</code></br>
  10379. <em>
  10380. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  10381. External Secrets meta/v1.ServiceAccountSelector
  10382. </a>
  10383. </em>
  10384. </td>
  10385. <td>
  10386. <em>(Optional)</em>
  10387. <p>Optional service account field containing the name of a kubernetes ServiceAccount.
  10388. If the service account is specified, the service account secret token JWT will be used
  10389. for authenticating with Vault. If the service account selector is not supplied,
  10390. the secretRef will be used instead.</p>
  10391. </td>
  10392. </tr>
  10393. <tr>
  10394. <td>
  10395. <code>secretRef</code></br>
  10396. <em>
  10397. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10398. External Secrets meta/v1.SecretKeySelector
  10399. </a>
  10400. </em>
  10401. </td>
  10402. <td>
  10403. <em>(Optional)</em>
  10404. <p>Optional secret field containing a Kubernetes ServiceAccount JWT used
  10405. for authenticating with Vault. If a name is specified without a key,
  10406. <code>token</code> is the default. If one is not specified, the one bound to
  10407. the controller will be used.</p>
  10408. </td>
  10409. </tr>
  10410. <tr>
  10411. <td>
  10412. <code>role</code></br>
  10413. <em>
  10414. string
  10415. </em>
  10416. </td>
  10417. <td>
  10418. <p>A required field containing the Vault Role to assume. A Role binds a
  10419. Kubernetes ServiceAccount with a set of Vault policies.</p>
  10420. </td>
  10421. </tr>
  10422. </tbody>
  10423. </table>
  10424. <h3 id="external-secrets.io/v1.VaultKubernetesServiceAccountTokenAuth">VaultKubernetesServiceAccountTokenAuth
  10425. </h3>
  10426. <p>
  10427. (<em>Appears on:</em>
  10428. <a href="#external-secrets.io/v1.VaultJwtAuth">VaultJwtAuth</a>)
  10429. </p>
  10430. <p>
  10431. <p>VaultKubernetesServiceAccountTokenAuth authenticates with Vault using a temporary
  10432. Kubernetes service account token retrieved by the <code>TokenRequest</code> API.</p>
  10433. </p>
  10434. <table>
  10435. <thead>
  10436. <tr>
  10437. <th>Field</th>
  10438. <th>Description</th>
  10439. </tr>
  10440. </thead>
  10441. <tbody>
  10442. <tr>
  10443. <td>
  10444. <code>serviceAccountRef</code></br>
  10445. <em>
  10446. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#ServiceAccountSelector">
  10447. External Secrets meta/v1.ServiceAccountSelector
  10448. </a>
  10449. </em>
  10450. </td>
  10451. <td>
  10452. <p>Service account field containing the name of a kubernetes ServiceAccount.</p>
  10453. </td>
  10454. </tr>
  10455. <tr>
  10456. <td>
  10457. <code>audiences</code></br>
  10458. <em>
  10459. []string
  10460. </em>
  10461. </td>
  10462. <td>
  10463. <em>(Optional)</em>
  10464. <p>Optional audiences field that will be used to request a temporary Kubernetes service
  10465. account token for the service account referenced by <code>serviceAccountRef</code>.
  10466. Defaults to a single audience <code>vault</code> it not specified.
  10467. Deprecated: use serviceAccountRef.Audiences instead</p>
  10468. </td>
  10469. </tr>
  10470. <tr>
  10471. <td>
  10472. <code>expirationSeconds</code></br>
  10473. <em>
  10474. int64
  10475. </em>
  10476. </td>
  10477. <td>
  10478. <em>(Optional)</em>
  10479. <p>Optional expiration time in seconds that will be used to request a temporary
  10480. Kubernetes service account token for the service account referenced by
  10481. <code>serviceAccountRef</code>.
  10482. Deprecated: this will be removed in the future.
  10483. Defaults to 10 minutes.</p>
  10484. </td>
  10485. </tr>
  10486. </tbody>
  10487. </table>
  10488. <h3 id="external-secrets.io/v1.VaultLdapAuth">VaultLdapAuth
  10489. </h3>
  10490. <p>
  10491. (<em>Appears on:</em>
  10492. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10493. </p>
  10494. <p>
  10495. <p>VaultLdapAuth authenticates with Vault using the LDAP authentication method,
  10496. with the username and password stored in a Kubernetes Secret resource.</p>
  10497. </p>
  10498. <table>
  10499. <thead>
  10500. <tr>
  10501. <th>Field</th>
  10502. <th>Description</th>
  10503. </tr>
  10504. </thead>
  10505. <tbody>
  10506. <tr>
  10507. <td>
  10508. <code>path</code></br>
  10509. <em>
  10510. string
  10511. </em>
  10512. </td>
  10513. <td>
  10514. <p>Path where the LDAP authentication backend is mounted
  10515. in Vault, e.g: &ldquo;ldap&rdquo;</p>
  10516. </td>
  10517. </tr>
  10518. <tr>
  10519. <td>
  10520. <code>username</code></br>
  10521. <em>
  10522. string
  10523. </em>
  10524. </td>
  10525. <td>
  10526. <p>Username is an LDAP username used to authenticate using the LDAP Vault
  10527. authentication method</p>
  10528. </td>
  10529. </tr>
  10530. <tr>
  10531. <td>
  10532. <code>secretRef</code></br>
  10533. <em>
  10534. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10535. External Secrets meta/v1.SecretKeySelector
  10536. </a>
  10537. </em>
  10538. </td>
  10539. <td>
  10540. <em>(Optional)</em>
  10541. <p>SecretRef to a key in a Secret resource containing password for the LDAP
  10542. user used to authenticate with Vault using the LDAP authentication
  10543. method</p>
  10544. </td>
  10545. </tr>
  10546. </tbody>
  10547. </table>
  10548. <h3 id="external-secrets.io/v1.VaultProvider">VaultProvider
  10549. </h3>
  10550. <p>
  10551. (<em>Appears on:</em>
  10552. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  10553. </p>
  10554. <p>
  10555. <p>Configures an store to sync secrets using a HashiCorp Vault
  10556. KV backend.</p>
  10557. </p>
  10558. <table>
  10559. <thead>
  10560. <tr>
  10561. <th>Field</th>
  10562. <th>Description</th>
  10563. </tr>
  10564. </thead>
  10565. <tbody>
  10566. <tr>
  10567. <td>
  10568. <code>auth</code></br>
  10569. <em>
  10570. <a href="#external-secrets.io/v1.VaultAuth">
  10571. VaultAuth
  10572. </a>
  10573. </em>
  10574. </td>
  10575. <td>
  10576. <p>Auth configures how secret-manager authenticates with the Vault server.</p>
  10577. </td>
  10578. </tr>
  10579. <tr>
  10580. <td>
  10581. <code>server</code></br>
  10582. <em>
  10583. string
  10584. </em>
  10585. </td>
  10586. <td>
  10587. <p>Server is the connection address for the Vault server, e.g: &ldquo;<a href="https://vault.example.com:8200&quot;">https://vault.example.com:8200&rdquo;</a>.</p>
  10588. </td>
  10589. </tr>
  10590. <tr>
  10591. <td>
  10592. <code>path</code></br>
  10593. <em>
  10594. string
  10595. </em>
  10596. </td>
  10597. <td>
  10598. <em>(Optional)</em>
  10599. <p>Path is the mount path of the Vault KV backend endpoint, e.g:
  10600. &ldquo;secret&rdquo;. The v2 KV secret engine version specific &ldquo;/data&rdquo; path suffix
  10601. for fetching secrets from Vault is optional and will be appended
  10602. if not present in specified path.</p>
  10603. </td>
  10604. </tr>
  10605. <tr>
  10606. <td>
  10607. <code>version</code></br>
  10608. <em>
  10609. <a href="#external-secrets.io/v1.VaultKVStoreVersion">
  10610. VaultKVStoreVersion
  10611. </a>
  10612. </em>
  10613. </td>
  10614. <td>
  10615. <p>Version is the Vault KV secret engine version. This can be either &ldquo;v1&rdquo; or
  10616. &ldquo;v2&rdquo;. Version defaults to &ldquo;v2&rdquo;.</p>
  10617. </td>
  10618. </tr>
  10619. <tr>
  10620. <td>
  10621. <code>namespace</code></br>
  10622. <em>
  10623. string
  10624. </em>
  10625. </td>
  10626. <td>
  10627. <em>(Optional)</em>
  10628. <p>Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows
  10629. Vault environments to support Secure Multi-tenancy. e.g: &ldquo;ns1&rdquo;.
  10630. More about namespaces can be found here <a href="https://www.vaultproject.io/docs/enterprise/namespaces">https://www.vaultproject.io/docs/enterprise/namespaces</a></p>
  10631. </td>
  10632. </tr>
  10633. <tr>
  10634. <td>
  10635. <code>caBundle</code></br>
  10636. <em>
  10637. []byte
  10638. </em>
  10639. </td>
  10640. <td>
  10641. <em>(Optional)</em>
  10642. <p>PEM encoded CA bundle used to validate Vault server certificate. Only used
  10643. if the Server URL is using HTTPS protocol. This parameter is ignored for
  10644. plain HTTP protocol connection. If not set the system root certificates
  10645. are used to validate the TLS connection.</p>
  10646. </td>
  10647. </tr>
  10648. <tr>
  10649. <td>
  10650. <code>tls</code></br>
  10651. <em>
  10652. <a href="#external-secrets.io/v1.VaultClientTLS">
  10653. VaultClientTLS
  10654. </a>
  10655. </em>
  10656. </td>
  10657. <td>
  10658. <em>(Optional)</em>
  10659. <p>The configuration used for client side related TLS communication, when the Vault server
  10660. requires mutual authentication. Only used if the Server URL is using HTTPS protocol.
  10661. This parameter is ignored for plain HTTP protocol connection.
  10662. It&rsquo;s worth noting this configuration is different from the &ldquo;TLS certificates auth method&rdquo;,
  10663. which is available under the <code>auth.cert</code> section.</p>
  10664. </td>
  10665. </tr>
  10666. <tr>
  10667. <td>
  10668. <code>caProvider</code></br>
  10669. <em>
  10670. <a href="#external-secrets.io/v1.CAProvider">
  10671. CAProvider
  10672. </a>
  10673. </em>
  10674. </td>
  10675. <td>
  10676. <em>(Optional)</em>
  10677. <p>The provider for the CA bundle to use to validate Vault server certificate.</p>
  10678. </td>
  10679. </tr>
  10680. <tr>
  10681. <td>
  10682. <code>readYourWrites</code></br>
  10683. <em>
  10684. bool
  10685. </em>
  10686. </td>
  10687. <td>
  10688. <em>(Optional)</em>
  10689. <p>ReadYourWrites ensures isolated read-after-write semantics by
  10690. providing discovered cluster replication states in each request.
  10691. More information about eventual consistency in Vault can be found here
  10692. <a href="https://www.vaultproject.io/docs/enterprise/consistency">https://www.vaultproject.io/docs/enterprise/consistency</a></p>
  10693. </td>
  10694. </tr>
  10695. <tr>
  10696. <td>
  10697. <code>forwardInconsistent</code></br>
  10698. <em>
  10699. bool
  10700. </em>
  10701. </td>
  10702. <td>
  10703. <em>(Optional)</em>
  10704. <p>ForwardInconsistent tells Vault to forward read-after-write requests to the Vault
  10705. leader instead of simply retrying within a loop. This can increase performance if
  10706. the option is enabled serverside.
  10707. <a href="https://www.vaultproject.io/docs/configuration/replication#allow_forwarding_via_header">https://www.vaultproject.io/docs/configuration/replication#allow_forwarding_via_header</a></p>
  10708. </td>
  10709. </tr>
  10710. <tr>
  10711. <td>
  10712. <code>headers</code></br>
  10713. <em>
  10714. map[string]string
  10715. </em>
  10716. </td>
  10717. <td>
  10718. <em>(Optional)</em>
  10719. <p>Headers to be added in Vault request</p>
  10720. </td>
  10721. </tr>
  10722. </tbody>
  10723. </table>
  10724. <h3 id="external-secrets.io/v1.VaultUserPassAuth">VaultUserPassAuth
  10725. </h3>
  10726. <p>
  10727. (<em>Appears on:</em>
  10728. <a href="#external-secrets.io/v1.VaultAuth">VaultAuth</a>)
  10729. </p>
  10730. <p>
  10731. <p>VaultUserPassAuth authenticates with Vault using UserPass authentication method,
  10732. with the username and password stored in a Kubernetes Secret resource.</p>
  10733. </p>
  10734. <table>
  10735. <thead>
  10736. <tr>
  10737. <th>Field</th>
  10738. <th>Description</th>
  10739. </tr>
  10740. </thead>
  10741. <tbody>
  10742. <tr>
  10743. <td>
  10744. <code>path</code></br>
  10745. <em>
  10746. string
  10747. </em>
  10748. </td>
  10749. <td>
  10750. <p>Path where the UserPassword authentication backend is mounted
  10751. in Vault, e.g: &ldquo;userpass&rdquo;</p>
  10752. </td>
  10753. </tr>
  10754. <tr>
  10755. <td>
  10756. <code>username</code></br>
  10757. <em>
  10758. string
  10759. </em>
  10760. </td>
  10761. <td>
  10762. <p>Username is a username used to authenticate using the UserPass Vault
  10763. authentication method</p>
  10764. </td>
  10765. </tr>
  10766. <tr>
  10767. <td>
  10768. <code>secretRef</code></br>
  10769. <em>
  10770. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  10771. External Secrets meta/v1.SecretKeySelector
  10772. </a>
  10773. </em>
  10774. </td>
  10775. <td>
  10776. <em>(Optional)</em>
  10777. <p>SecretRef to a key in a Secret resource containing password for the
  10778. user used to authenticate with Vault using the UserPass authentication
  10779. method</p>
  10780. </td>
  10781. </tr>
  10782. </tbody>
  10783. </table>
  10784. <h3 id="external-secrets.io/v1.WebhookCAProvider">WebhookCAProvider
  10785. </h3>
  10786. <p>
  10787. (<em>Appears on:</em>
  10788. <a href="#external-secrets.io/v1.WebhookProvider">WebhookProvider</a>)
  10789. </p>
  10790. <p>
  10791. <p>Defines a location to fetch the cert for the webhook provider from.</p>
  10792. </p>
  10793. <table>
  10794. <thead>
  10795. <tr>
  10796. <th>Field</th>
  10797. <th>Description</th>
  10798. </tr>
  10799. </thead>
  10800. <tbody>
  10801. <tr>
  10802. <td>
  10803. <code>type</code></br>
  10804. <em>
  10805. <a href="#external-secrets.io/v1.WebhookCAProviderType">
  10806. WebhookCAProviderType
  10807. </a>
  10808. </em>
  10809. </td>
  10810. <td>
  10811. <p>The type of provider to use such as &ldquo;Secret&rdquo;, or &ldquo;ConfigMap&rdquo;.</p>
  10812. </td>
  10813. </tr>
  10814. <tr>
  10815. <td>
  10816. <code>name</code></br>
  10817. <em>
  10818. string
  10819. </em>
  10820. </td>
  10821. <td>
  10822. <p>The name of the object located at the provider type.</p>
  10823. </td>
  10824. </tr>
  10825. <tr>
  10826. <td>
  10827. <code>key</code></br>
  10828. <em>
  10829. string
  10830. </em>
  10831. </td>
  10832. <td>
  10833. <p>The key where the CA certificate can be found in the Secret or ConfigMap.</p>
  10834. </td>
  10835. </tr>
  10836. <tr>
  10837. <td>
  10838. <code>namespace</code></br>
  10839. <em>
  10840. string
  10841. </em>
  10842. </td>
  10843. <td>
  10844. <em>(Optional)</em>
  10845. <p>The namespace the Provider type is in.</p>
  10846. </td>
  10847. </tr>
  10848. </tbody>
  10849. </table>
  10850. <h3 id="external-secrets.io/v1.WebhookCAProviderType">WebhookCAProviderType
  10851. (<code>string</code> alias)</p></h3>
  10852. <p>
  10853. (<em>Appears on:</em>
  10854. <a href="#external-secrets.io/v1.WebhookCAProvider">WebhookCAProvider</a>)
  10855. </p>
  10856. <p>
  10857. </p>
  10858. <table>
  10859. <thead>
  10860. <tr>
  10861. <th>Value</th>
  10862. <th>Description</th>
  10863. </tr>
  10864. </thead>
  10865. <tbody><tr><td><p>&#34;ConfigMap&#34;</p></td>
  10866. <td></td>
  10867. </tr><tr><td><p>&#34;Secret&#34;</p></td>
  10868. <td></td>
  10869. </tr></tbody>
  10870. </table>
  10871. <h3 id="external-secrets.io/v1.WebhookProvider">WebhookProvider
  10872. </h3>
  10873. <p>
  10874. (<em>Appears on:</em>
  10875. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  10876. </p>
  10877. <p>
  10878. <p>WebHookProvider Configures an store to sync secrets from simple web apis.</p>
  10879. </p>
  10880. <table>
  10881. <thead>
  10882. <tr>
  10883. <th>Field</th>
  10884. <th>Description</th>
  10885. </tr>
  10886. </thead>
  10887. <tbody>
  10888. <tr>
  10889. <td>
  10890. <code>method</code></br>
  10891. <em>
  10892. string
  10893. </em>
  10894. </td>
  10895. <td>
  10896. <p>Webhook Method</p>
  10897. </td>
  10898. </tr>
  10899. <tr>
  10900. <td>
  10901. <code>url</code></br>
  10902. <em>
  10903. string
  10904. </em>
  10905. </td>
  10906. <td>
  10907. <p>Webhook url to call</p>
  10908. </td>
  10909. </tr>
  10910. <tr>
  10911. <td>
  10912. <code>headers</code></br>
  10913. <em>
  10914. map[string]string
  10915. </em>
  10916. </td>
  10917. <td>
  10918. <em>(Optional)</em>
  10919. <p>Headers</p>
  10920. </td>
  10921. </tr>
  10922. <tr>
  10923. <td>
  10924. <code>auth</code></br>
  10925. <em>
  10926. <a href="#external-secrets.io/v1.AuthorizationProtocol">
  10927. AuthorizationProtocol
  10928. </a>
  10929. </em>
  10930. </td>
  10931. <td>
  10932. <em>(Optional)</em>
  10933. <p>Auth specifies a authorization protocol. Only one protocol may be set.</p>
  10934. </td>
  10935. </tr>
  10936. <tr>
  10937. <td>
  10938. <code>body</code></br>
  10939. <em>
  10940. string
  10941. </em>
  10942. </td>
  10943. <td>
  10944. <em>(Optional)</em>
  10945. <p>Body</p>
  10946. </td>
  10947. </tr>
  10948. <tr>
  10949. <td>
  10950. <code>timeout</code></br>
  10951. <em>
  10952. <a href="https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Duration">
  10953. Kubernetes meta/v1.Duration
  10954. </a>
  10955. </em>
  10956. </td>
  10957. <td>
  10958. <em>(Optional)</em>
  10959. <p>Timeout</p>
  10960. </td>
  10961. </tr>
  10962. <tr>
  10963. <td>
  10964. <code>result</code></br>
  10965. <em>
  10966. <a href="#external-secrets.io/v1.WebhookResult">
  10967. WebhookResult
  10968. </a>
  10969. </em>
  10970. </td>
  10971. <td>
  10972. <p>Result formatting</p>
  10973. </td>
  10974. </tr>
  10975. <tr>
  10976. <td>
  10977. <code>secrets</code></br>
  10978. <em>
  10979. <a href="#external-secrets.io/v1.WebhookSecret">
  10980. []WebhookSecret
  10981. </a>
  10982. </em>
  10983. </td>
  10984. <td>
  10985. <em>(Optional)</em>
  10986. <p>Secrets to fill in templates
  10987. These secrets will be passed to the templating function as key value pairs under the given name</p>
  10988. </td>
  10989. </tr>
  10990. <tr>
  10991. <td>
  10992. <code>caBundle</code></br>
  10993. <em>
  10994. []byte
  10995. </em>
  10996. </td>
  10997. <td>
  10998. <em>(Optional)</em>
  10999. <p>PEM encoded CA bundle used to validate webhook server certificate. Only used
  11000. if the Server URL is using HTTPS protocol. This parameter is ignored for
  11001. plain HTTP protocol connection. If not set the system root certificates
  11002. are used to validate the TLS connection.</p>
  11003. </td>
  11004. </tr>
  11005. <tr>
  11006. <td>
  11007. <code>caProvider</code></br>
  11008. <em>
  11009. <a href="#external-secrets.io/v1.WebhookCAProvider">
  11010. WebhookCAProvider
  11011. </a>
  11012. </em>
  11013. </td>
  11014. <td>
  11015. <em>(Optional)</em>
  11016. <p>The provider for the CA bundle to use to validate webhook server certificate.</p>
  11017. </td>
  11018. </tr>
  11019. </tbody>
  11020. </table>
  11021. <h3 id="external-secrets.io/v1.WebhookResult">WebhookResult
  11022. </h3>
  11023. <p>
  11024. (<em>Appears on:</em>
  11025. <a href="#external-secrets.io/v1.WebhookProvider">WebhookProvider</a>)
  11026. </p>
  11027. <p>
  11028. </p>
  11029. <table>
  11030. <thead>
  11031. <tr>
  11032. <th>Field</th>
  11033. <th>Description</th>
  11034. </tr>
  11035. </thead>
  11036. <tbody>
  11037. <tr>
  11038. <td>
  11039. <code>jsonPath</code></br>
  11040. <em>
  11041. string
  11042. </em>
  11043. </td>
  11044. <td>
  11045. <em>(Optional)</em>
  11046. <p>Json path of return value</p>
  11047. </td>
  11048. </tr>
  11049. </tbody>
  11050. </table>
  11051. <h3 id="external-secrets.io/v1.WebhookSecret">WebhookSecret
  11052. </h3>
  11053. <p>
  11054. (<em>Appears on:</em>
  11055. <a href="#external-secrets.io/v1.WebhookProvider">WebhookProvider</a>)
  11056. </p>
  11057. <p>
  11058. </p>
  11059. <table>
  11060. <thead>
  11061. <tr>
  11062. <th>Field</th>
  11063. <th>Description</th>
  11064. </tr>
  11065. </thead>
  11066. <tbody>
  11067. <tr>
  11068. <td>
  11069. <code>name</code></br>
  11070. <em>
  11071. string
  11072. </em>
  11073. </td>
  11074. <td>
  11075. <p>Name of this secret in templates</p>
  11076. </td>
  11077. </tr>
  11078. <tr>
  11079. <td>
  11080. <code>secretRef</code></br>
  11081. <em>
  11082. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  11083. External Secrets meta/v1.SecretKeySelector
  11084. </a>
  11085. </em>
  11086. </td>
  11087. <td>
  11088. <p>Secret ref to fill in credentials</p>
  11089. </td>
  11090. </tr>
  11091. </tbody>
  11092. </table>
  11093. <h3 id="external-secrets.io/v1.YandexCertificateManagerAuth">YandexCertificateManagerAuth
  11094. </h3>
  11095. <p>
  11096. (<em>Appears on:</em>
  11097. <a href="#external-secrets.io/v1.YandexCertificateManagerProvider">YandexCertificateManagerProvider</a>)
  11098. </p>
  11099. <p>
  11100. </p>
  11101. <table>
  11102. <thead>
  11103. <tr>
  11104. <th>Field</th>
  11105. <th>Description</th>
  11106. </tr>
  11107. </thead>
  11108. <tbody>
  11109. <tr>
  11110. <td>
  11111. <code>authorizedKeySecretRef</code></br>
  11112. <em>
  11113. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  11114. External Secrets meta/v1.SecretKeySelector
  11115. </a>
  11116. </em>
  11117. </td>
  11118. <td>
  11119. <em>(Optional)</em>
  11120. <p>The authorized key used for authentication</p>
  11121. </td>
  11122. </tr>
  11123. </tbody>
  11124. </table>
  11125. <h3 id="external-secrets.io/v1.YandexCertificateManagerCAProvider">YandexCertificateManagerCAProvider
  11126. </h3>
  11127. <p>
  11128. (<em>Appears on:</em>
  11129. <a href="#external-secrets.io/v1.YandexCertificateManagerProvider">YandexCertificateManagerProvider</a>)
  11130. </p>
  11131. <p>
  11132. </p>
  11133. <table>
  11134. <thead>
  11135. <tr>
  11136. <th>Field</th>
  11137. <th>Description</th>
  11138. </tr>
  11139. </thead>
  11140. <tbody>
  11141. <tr>
  11142. <td>
  11143. <code>certSecretRef</code></br>
  11144. <em>
  11145. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  11146. External Secrets meta/v1.SecretKeySelector
  11147. </a>
  11148. </em>
  11149. </td>
  11150. <td>
  11151. </td>
  11152. </tr>
  11153. </tbody>
  11154. </table>
  11155. <h3 id="external-secrets.io/v1.YandexCertificateManagerProvider">YandexCertificateManagerProvider
  11156. </h3>
  11157. <p>
  11158. (<em>Appears on:</em>
  11159. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  11160. </p>
  11161. <p>
  11162. <p>YandexCertificateManagerProvider Configures a store to sync secrets using the Yandex Certificate Manager provider.</p>
  11163. </p>
  11164. <table>
  11165. <thead>
  11166. <tr>
  11167. <th>Field</th>
  11168. <th>Description</th>
  11169. </tr>
  11170. </thead>
  11171. <tbody>
  11172. <tr>
  11173. <td>
  11174. <code>apiEndpoint</code></br>
  11175. <em>
  11176. string
  11177. </em>
  11178. </td>
  11179. <td>
  11180. <em>(Optional)</em>
  11181. <p>Yandex.Cloud API endpoint (e.g. &lsquo;api.cloud.yandex.net:443&rsquo;)</p>
  11182. </td>
  11183. </tr>
  11184. <tr>
  11185. <td>
  11186. <code>auth</code></br>
  11187. <em>
  11188. <a href="#external-secrets.io/v1.YandexCertificateManagerAuth">
  11189. YandexCertificateManagerAuth
  11190. </a>
  11191. </em>
  11192. </td>
  11193. <td>
  11194. <p>Auth defines the information necessary to authenticate against Yandex Certificate Manager</p>
  11195. </td>
  11196. </tr>
  11197. <tr>
  11198. <td>
  11199. <code>caProvider</code></br>
  11200. <em>
  11201. <a href="#external-secrets.io/v1.YandexCertificateManagerCAProvider">
  11202. YandexCertificateManagerCAProvider
  11203. </a>
  11204. </em>
  11205. </td>
  11206. <td>
  11207. <em>(Optional)</em>
  11208. <p>The provider for the CA bundle to use to validate Yandex.Cloud server certificate.</p>
  11209. </td>
  11210. </tr>
  11211. </tbody>
  11212. </table>
  11213. <h3 id="external-secrets.io/v1.YandexLockboxAuth">YandexLockboxAuth
  11214. </h3>
  11215. <p>
  11216. (<em>Appears on:</em>
  11217. <a href="#external-secrets.io/v1.YandexLockboxProvider">YandexLockboxProvider</a>)
  11218. </p>
  11219. <p>
  11220. </p>
  11221. <table>
  11222. <thead>
  11223. <tr>
  11224. <th>Field</th>
  11225. <th>Description</th>
  11226. </tr>
  11227. </thead>
  11228. <tbody>
  11229. <tr>
  11230. <td>
  11231. <code>authorizedKeySecretRef</code></br>
  11232. <em>
  11233. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  11234. External Secrets meta/v1.SecretKeySelector
  11235. </a>
  11236. </em>
  11237. </td>
  11238. <td>
  11239. <em>(Optional)</em>
  11240. <p>The authorized key used for authentication</p>
  11241. </td>
  11242. </tr>
  11243. </tbody>
  11244. </table>
  11245. <h3 id="external-secrets.io/v1.YandexLockboxCAProvider">YandexLockboxCAProvider
  11246. </h3>
  11247. <p>
  11248. (<em>Appears on:</em>
  11249. <a href="#external-secrets.io/v1.YandexLockboxProvider">YandexLockboxProvider</a>)
  11250. </p>
  11251. <p>
  11252. </p>
  11253. <table>
  11254. <thead>
  11255. <tr>
  11256. <th>Field</th>
  11257. <th>Description</th>
  11258. </tr>
  11259. </thead>
  11260. <tbody>
  11261. <tr>
  11262. <td>
  11263. <code>certSecretRef</code></br>
  11264. <em>
  11265. <a href="https://pkg.go.dev/github.com/external-secrets/external-secrets/apis/meta/v1#SecretKeySelector">
  11266. External Secrets meta/v1.SecretKeySelector
  11267. </a>
  11268. </em>
  11269. </td>
  11270. <td>
  11271. </td>
  11272. </tr>
  11273. </tbody>
  11274. </table>
  11275. <h3 id="external-secrets.io/v1.YandexLockboxProvider">YandexLockboxProvider
  11276. </h3>
  11277. <p>
  11278. (<em>Appears on:</em>
  11279. <a href="#external-secrets.io/v1.SecretStoreProvider">SecretStoreProvider</a>)
  11280. </p>
  11281. <p>
  11282. <p>YandexLockboxProvider Configures a store to sync secrets using the Yandex Lockbox provider.</p>
  11283. </p>
  11284. <table>
  11285. <thead>
  11286. <tr>
  11287. <th>Field</th>
  11288. <th>Description</th>
  11289. </tr>
  11290. </thead>
  11291. <tbody>
  11292. <tr>
  11293. <td>
  11294. <code>apiEndpoint</code></br>
  11295. <em>
  11296. string
  11297. </em>
  11298. </td>
  11299. <td>
  11300. <em>(Optional)</em>
  11301. <p>Yandex.Cloud API endpoint (e.g. &lsquo;api.cloud.yandex.net:443&rsquo;)</p>
  11302. </td>
  11303. </tr>
  11304. <tr>
  11305. <td>
  11306. <code>auth</code></br>
  11307. <em>
  11308. <a href="#external-secrets.io/v1.YandexLockboxAuth">
  11309. YandexLockboxAuth
  11310. </a>
  11311. </em>
  11312. </td>
  11313. <td>
  11314. <p>Auth defines the information necessary to authenticate against Yandex Lockbox</p>
  11315. </td>
  11316. </tr>
  11317. <tr>
  11318. <td>
  11319. <code>caProvider</code></br>
  11320. <em>
  11321. <a href="#external-secrets.io/v1.YandexLockboxCAProvider">
  11322. YandexLockboxCAProvider
  11323. </a>
  11324. </em>
  11325. </td>
  11326. <td>
  11327. <em>(Optional)</em>
  11328. <p>The provider for the CA bundle to use to validate Yandex.Cloud server certificate.</p>
  11329. </td>
  11330. </tr>
  11331. </tbody>
  11332. </table>
  11333. <hr/>
  11334. <p><em>
  11335. Generated with <code>gen-crd-api-reference-docs</code>.
  11336. </em></p>
  11337. </article>
  11338. </div>
  11339. <script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
  11340. </div>
  11341. </main>
  11342. <img referrerpolicy="no-referrer-when-downgrade" src="https://static.scarf.sh/a.png?x-pxid=6658a9eb-067d-49f1-94f2-b8b00f21451e" alt=""/>
  11343. <footer class="md-footer">
  11344. <div class="md-footer-meta md-typeset">
  11345. <div class="md-footer-meta__inner md-grid">
  11346. <div class="md-copyright">
  11347. <div class="md-copyright__highlight">
  11348. &copy; 2025 The external-secrets Authors.<br/>
  11349. &copy; 2025 The Linux Foundation. All rights reserved.<br/><br/>
  11350. The Linux Foundation has registered trademarks and uses trademarks.<br/>
  11351. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage/">Trademark Usage page</a>.
  11352. </div>
  11353. Made with
  11354. <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
  11355. Material for MkDocs
  11356. </a>
  11357. </div>
  11358. </div>
  11359. </div>
  11360. </footer>
  11361. </div>
  11362. <div class="md-dialog" data-md-component="dialog">
  11363. <div class="md-dialog__inner md-typeset"></div>
  11364. </div>
  11365. <script id="__config" type="application/json">{"base": "../..", "features": ["navigation.tabs", "navigation.indexes", "navigation.expand"], "search": "../../assets/javascripts/workers/search.f8cc74c7.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"provider": "mike"}}</script>
  11366. <script src="../../assets/javascripts/bundle.c8b220af.min.js"></script>
  11367. </body>
  11368. </html>