clusterexternalsecret-v1.yaml 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123
  1. apiVersion: external-secrets.io/v1
  2. kind: ClusterExternalSecret
  3. metadata: {}
  4. spec:
  5. externalSecretMetadata:
  6. annotations: {}
  7. labels: {}
  8. externalSecretName: string
  9. externalSecretSpec:
  10. data:
  11. - remoteRef:
  12. conversionStrategy: "Default"
  13. decodingStrategy: "None"
  14. key: string
  15. metadataPolicy: "None"
  16. nullBytePolicy: "Ignore"
  17. property: string
  18. version: string
  19. secretKey: string
  20. sourceRef:
  21. generatorRef:
  22. apiVersion: external-secrets.io/v1
  23. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  24. name: string
  25. storeRef:
  26. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  27. name: string
  28. dataFrom:
  29. - extract:
  30. conversionStrategy: "Default"
  31. decodingStrategy: "None"
  32. key: string
  33. metadataPolicy: "None"
  34. nullBytePolicy: "Ignore"
  35. property: string
  36. version: string
  37. find:
  38. conversionStrategy: "Default"
  39. decodingStrategy: "None"
  40. name:
  41. regexp: string
  42. nullBytePolicy: "Ignore"
  43. path: string
  44. tags: {}
  45. rewrite:
  46. - merge:
  47. conflictPolicy: "Error"
  48. into: ""
  49. priority: [] # minItems 0 of type string
  50. priorityPolicy: "Strict"
  51. strategy: "Extract"
  52. regexp:
  53. source: string
  54. target: string
  55. transform:
  56. template: string
  57. sourceRef:
  58. generatorRef:
  59. apiVersion: external-secrets.io/v1
  60. kind: "ACRAccessToken" # "ACRAccessToken", "ClusterGenerator", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana", "MFA"
  61. name: string
  62. storeRef:
  63. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  64. name: string
  65. refreshInterval: "1h0m0s"
  66. refreshPolicy: "CreatedOnce" # "CreatedOnce", "Periodic", "OnChange"
  67. secretStoreRef:
  68. kind: "SecretStore" # "SecretStore", "ClusterSecretStore"
  69. name: string
  70. target:
  71. creationPolicy: "Owner"
  72. deletionPolicy: "Retain"
  73. immutable: true
  74. manifest:
  75. apiVersion: external-secrets.io/v1
  76. kind: string
  77. name: string
  78. template:
  79. data: {}
  80. engineVersion: "v2"
  81. mergePolicy: "Replace"
  82. metadata:
  83. annotations: {}
  84. finalizers: [] # minItems 0 of type string
  85. labels: {}
  86. templateFrom:
  87. - configMap:
  88. items:
  89. - key: string
  90. templateAs: "Values"
  91. name: string
  92. literal: string
  93. secret:
  94. items:
  95. - key: string
  96. templateAs: "Values"
  97. name: string
  98. target: "Data"
  99. type: string
  100. namespaceSelector:
  101. matchExpressions:
  102. - key: string
  103. operator: string
  104. values: [] # minItems 0 of type string
  105. matchLabels: {}
  106. namespaceSelectors:
  107. - matchExpressions:
  108. - key: string
  109. operator: string
  110. values: [] # minItems 0 of type string
  111. matchLabels: {}
  112. namespaces: [] # minItems 0 of type string
  113. refreshTime: string
  114. status:
  115. conditions:
  116. - message: string
  117. status: string
  118. type: string
  119. externalSecretName: string
  120. failedNamespaces:
  121. - namespace: string
  122. reason: string
  123. provisionedNamespaces: [] # minItems 0 of type string