clustergenerator-v1alpha1.yaml 9.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. cloudsmithAccessTokenSpec:
  30. apiUrl: string
  31. orgSlug: string
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. serviceSlug: string
  37. ecrAuthorizationTokenSpec:
  38. auth:
  39. jwt:
  40. serviceAccountRef:
  41. audiences: [] # minItems 0 of type string
  42. name: string
  43. namespace: string
  44. secretRef:
  45. accessKeyIDSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. secretAccessKeySecretRef:
  50. key: string
  51. name: string
  52. namespace: string
  53. sessionTokenSecretRef:
  54. key: string
  55. name: string
  56. namespace: string
  57. region: string
  58. role: string
  59. scope: string
  60. fakeSpec:
  61. controller: string
  62. data: {}
  63. gcrAccessTokenSpec:
  64. auth:
  65. secretRef:
  66. secretAccessKeySecretRef:
  67. key: string
  68. name: string
  69. namespace: string
  70. workloadIdentity:
  71. clusterLocation: string
  72. clusterName: string
  73. clusterProjectID: string
  74. serviceAccountRef:
  75. audiences: [] # minItems 0 of type string
  76. name: string
  77. namespace: string
  78. workloadIdentityFederation:
  79. audience: string
  80. awsSecurityCredentials:
  81. awsCredentialsSecretRef:
  82. name: string
  83. namespace: string
  84. region: "ap-south-1"
  85. credConfig:
  86. key: string
  87. name: string
  88. namespace: string
  89. externalTokenEndpoint: string
  90. serviceAccountRef:
  91. audiences: [] # minItems 0 of type string
  92. name: string
  93. namespace: string
  94. projectID: string
  95. githubAccessTokenSpec:
  96. appID: string
  97. auth:
  98. privateKey:
  99. secretRef:
  100. key: string
  101. name: string
  102. namespace: string
  103. installID: string
  104. permissions: {}
  105. repositories: [] # minItems 0 of type string
  106. url: string
  107. grafanaSpec:
  108. auth:
  109. basic:
  110. password:
  111. key: string
  112. name: string
  113. username: string
  114. token:
  115. key: string
  116. name: string
  117. serviceAccount:
  118. name: string
  119. role: string
  120. url: string
  121. mfaSpec:
  122. algorithm: string
  123. length: 1
  124. secret:
  125. key: string
  126. name: string
  127. namespace: string
  128. timePeriod: 1
  129. when: 2024-10-11T12:48:44Z
  130. passwordSpec:
  131. allowRepeat: false
  132. digits: 1
  133. encoding: "raw"
  134. length: 24
  135. noUpper: false
  136. secretKeys: [string] # minItems 1 of type string
  137. symbolCharacters: string
  138. symbols: 1
  139. quayAccessTokenSpec:
  140. robotAccount: string
  141. serviceAccountRef:
  142. audiences: [] # minItems 0 of type string
  143. name: string
  144. namespace: string
  145. url: string
  146. sshKeySpec:
  147. comment: string
  148. keySize: 256
  149. keyType: "rsa"
  150. stsSessionTokenSpec:
  151. auth:
  152. jwt:
  153. serviceAccountRef:
  154. audiences: [] # minItems 0 of type string
  155. name: string
  156. namespace: string
  157. secretRef:
  158. accessKeyIDSecretRef:
  159. key: string
  160. name: string
  161. namespace: string
  162. secretAccessKeySecretRef:
  163. key: string
  164. name: string
  165. namespace: string
  166. sessionTokenSecretRef:
  167. key: string
  168. name: string
  169. namespace: string
  170. region: string
  171. requestParameters:
  172. serialNumber: string
  173. sessionDuration: 1
  174. tokenCode: string
  175. role: string
  176. uuidSpec: {}
  177. vaultDynamicSecretSpec:
  178. allowEmptyResponse: false
  179. controller: string
  180. getParameters: {}
  181. method: string
  182. parameters:
  183. path: string
  184. provider:
  185. auth:
  186. appRole:
  187. path: "approle"
  188. roleId: string
  189. roleRef:
  190. key: string
  191. name: string
  192. namespace: string
  193. secretRef:
  194. key: string
  195. name: string
  196. namespace: string
  197. cert:
  198. clientCert:
  199. key: string
  200. name: string
  201. namespace: string
  202. path: "cert"
  203. secretRef:
  204. key: string
  205. name: string
  206. namespace: string
  207. vaultRole: string
  208. gcp:
  209. location: string
  210. path: "gcp"
  211. projectID: string
  212. role: string
  213. secretRef:
  214. secretAccessKeySecretRef:
  215. key: string
  216. name: string
  217. namespace: string
  218. serviceAccountRef:
  219. audiences: [] # minItems 0 of type string
  220. name: string
  221. namespace: string
  222. workloadIdentity:
  223. clusterLocation: string
  224. clusterName: string
  225. clusterProjectID: string
  226. serviceAccountRef:
  227. audiences: [] # minItems 0 of type string
  228. name: string
  229. namespace: string
  230. iam:
  231. externalID: string
  232. jwt:
  233. serviceAccountRef:
  234. audiences: [] # minItems 0 of type string
  235. name: string
  236. namespace: string
  237. path: string
  238. region: string
  239. role: string
  240. secretRef:
  241. accessKeyIDSecretRef:
  242. key: string
  243. name: string
  244. namespace: string
  245. secretAccessKeySecretRef:
  246. key: string
  247. name: string
  248. namespace: string
  249. sessionTokenSecretRef:
  250. key: string
  251. name: string
  252. namespace: string
  253. vaultAwsIamServerID: string
  254. vaultRole: string
  255. jwt:
  256. kubernetesServiceAccountToken:
  257. audiences: [] # minItems 0 of type string
  258. expirationSeconds: 1
  259. serviceAccountRef:
  260. audiences: [] # minItems 0 of type string
  261. name: string
  262. namespace: string
  263. path: "jwt"
  264. role: string
  265. secretRef:
  266. key: string
  267. name: string
  268. namespace: string
  269. kubernetes:
  270. mountPath: "kubernetes"
  271. role: string
  272. secretRef:
  273. key: string
  274. name: string
  275. namespace: string
  276. serviceAccountRef:
  277. audiences: [] # minItems 0 of type string
  278. name: string
  279. namespace: string
  280. ldap:
  281. path: "ldap"
  282. secretRef:
  283. key: string
  284. name: string
  285. namespace: string
  286. username: string
  287. namespace: string
  288. tokenSecretRef:
  289. key: string
  290. name: string
  291. namespace: string
  292. userPass:
  293. path: "userpass"
  294. secretRef:
  295. key: string
  296. name: string
  297. namespace: string
  298. username: string
  299. caBundle: c3RyaW5n
  300. caProvider:
  301. key: string
  302. name: string
  303. namespace: string
  304. type: "Secret" # "Secret", "ConfigMap"
  305. checkAndSet:
  306. required: true
  307. forwardInconsistent: true
  308. headers: {}
  309. namespace: string
  310. path: string
  311. readYourWrites: true
  312. server: string
  313. tls:
  314. certSecretRef:
  315. key: string
  316. name: string
  317. namespace: string
  318. keySecretRef:
  319. key: string
  320. name: string
  321. namespace: string
  322. version: "v2"
  323. resultType: "Data"
  324. retrySettings:
  325. maxRetries: 1
  326. retryInterval: string
  327. webhookSpec:
  328. auth:
  329. ntlm:
  330. passwordSecret:
  331. key: string
  332. name: string
  333. namespace: string
  334. usernameSecret:
  335. key: string
  336. name: string
  337. namespace: string
  338. body: string
  339. caBundle: c3RyaW5n
  340. caProvider:
  341. key: string
  342. name: string
  343. namespace: string
  344. type: "Secret" # "Secret", "ConfigMap"
  345. headers: {}
  346. method: string
  347. result:
  348. jsonPath: string
  349. secrets:
  350. - name: string
  351. secretRef:
  352. key: string
  353. name: string
  354. timeout: string
  355. url: string
  356. kind: "ACRAccessToken" # "ACRAccessToken", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"