clustergenerator-v1alpha1.yaml 9.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357
  1. apiVersion: generators.external-secrets.io/v1alpha1
  2. kind: ClusterGenerator
  3. metadata: {}
  4. spec:
  5. generator:
  6. acrAccessTokenSpec:
  7. auth:
  8. managedIdentity:
  9. identityId: string
  10. servicePrincipal:
  11. secretRef:
  12. clientId:
  13. key: string
  14. name: string
  15. namespace: string
  16. clientSecret:
  17. key: string
  18. name: string
  19. namespace: string
  20. workloadIdentity:
  21. serviceAccountRef:
  22. audiences: [] # minItems 0 of type string
  23. name: string
  24. namespace: string
  25. environmentType: "PublicCloud"
  26. registry: string
  27. scope: string
  28. tenantId: string
  29. cloudsmithAccessTokenSpec:
  30. apiUrl: string
  31. orgSlug: string
  32. serviceAccountRef:
  33. audiences: [] # minItems 0 of type string
  34. name: string
  35. namespace: string
  36. serviceSlug: string
  37. ecrAuthorizationTokenSpec:
  38. auth:
  39. jwt:
  40. serviceAccountRef:
  41. audiences: [] # minItems 0 of type string
  42. name: string
  43. namespace: string
  44. secretRef:
  45. accessKeyIDSecretRef:
  46. key: string
  47. name: string
  48. namespace: string
  49. secretAccessKeySecretRef:
  50. key: string
  51. name: string
  52. namespace: string
  53. sessionTokenSecretRef:
  54. key: string
  55. name: string
  56. namespace: string
  57. region: string
  58. role: string
  59. scope: string
  60. fakeSpec:
  61. controller: string
  62. data: {}
  63. gcrAccessTokenSpec:
  64. auth:
  65. secretRef:
  66. secretAccessKeySecretRef:
  67. key: string
  68. name: string
  69. namespace: string
  70. workloadIdentity:
  71. clusterLocation: string
  72. clusterName: string
  73. clusterProjectID: string
  74. serviceAccountRef:
  75. audiences: [] # minItems 0 of type string
  76. name: string
  77. namespace: string
  78. workloadIdentityFederation:
  79. audience: string
  80. awsSecurityCredentials:
  81. awsCredentialsSecretRef:
  82. name: string
  83. namespace: string
  84. region: "ap-south-1"
  85. credConfig:
  86. key: string
  87. name: string
  88. namespace: string
  89. externalTokenEndpoint: string
  90. gcpServiceAccountEmail: "my-gsa@my-project.iam.gserviceaccount.com"
  91. serviceAccountRef:
  92. audiences: [] # minItems 0 of type string
  93. name: string
  94. namespace: string
  95. projectID: string
  96. githubAccessTokenSpec:
  97. appID: string
  98. auth:
  99. privateKey:
  100. secretRef:
  101. key: string
  102. name: string
  103. namespace: string
  104. installID: string
  105. permissions: {}
  106. repositories: [] # minItems 0 of type string
  107. url: string
  108. grafanaSpec:
  109. auth:
  110. basic:
  111. password:
  112. key: string
  113. name: string
  114. username: string
  115. token:
  116. key: string
  117. name: string
  118. serviceAccount:
  119. name: string
  120. role: string
  121. url: string
  122. mfaSpec:
  123. algorithm: string
  124. length: 1
  125. secret:
  126. key: string
  127. name: string
  128. namespace: string
  129. timePeriod: 1
  130. when: 2024-10-11T12:48:44Z
  131. passwordSpec:
  132. allowRepeat: false
  133. digits: 1
  134. encoding: "raw"
  135. length: 24
  136. noUpper: false
  137. secretKeys: [string] # minItems 1 of type string
  138. symbolCharacters: string
  139. symbols: 1
  140. quayAccessTokenSpec:
  141. robotAccount: string
  142. serviceAccountRef:
  143. audiences: [] # minItems 0 of type string
  144. name: string
  145. namespace: string
  146. url: string
  147. sshKeySpec:
  148. comment: string
  149. keySize: 256
  150. keyType: "rsa"
  151. stsSessionTokenSpec:
  152. auth:
  153. jwt:
  154. serviceAccountRef:
  155. audiences: [] # minItems 0 of type string
  156. name: string
  157. namespace: string
  158. secretRef:
  159. accessKeyIDSecretRef:
  160. key: string
  161. name: string
  162. namespace: string
  163. secretAccessKeySecretRef:
  164. key: string
  165. name: string
  166. namespace: string
  167. sessionTokenSecretRef:
  168. key: string
  169. name: string
  170. namespace: string
  171. region: string
  172. requestParameters:
  173. serialNumber: string
  174. sessionDuration: 1
  175. tokenCode: string
  176. role: string
  177. uuidSpec: {}
  178. vaultDynamicSecretSpec:
  179. allowEmptyResponse: false
  180. controller: string
  181. getParameters: {}
  182. method: string
  183. parameters:
  184. path: string
  185. provider:
  186. auth:
  187. appRole:
  188. path: "approle"
  189. roleId: string
  190. roleRef:
  191. key: string
  192. name: string
  193. namespace: string
  194. secretRef:
  195. key: string
  196. name: string
  197. namespace: string
  198. cert:
  199. clientCert:
  200. key: string
  201. name: string
  202. namespace: string
  203. path: "cert"
  204. secretRef:
  205. key: string
  206. name: string
  207. namespace: string
  208. vaultRole: string
  209. gcp:
  210. location: string
  211. path: "gcp"
  212. projectID: string
  213. role: string
  214. secretRef:
  215. secretAccessKeySecretRef:
  216. key: string
  217. name: string
  218. namespace: string
  219. serviceAccountRef:
  220. audiences: [] # minItems 0 of type string
  221. name: string
  222. namespace: string
  223. workloadIdentity:
  224. clusterLocation: string
  225. clusterName: string
  226. clusterProjectID: string
  227. serviceAccountRef:
  228. audiences: [] # minItems 0 of type string
  229. name: string
  230. namespace: string
  231. iam:
  232. externalID: string
  233. jwt:
  234. serviceAccountRef:
  235. audiences: [] # minItems 0 of type string
  236. name: string
  237. namespace: string
  238. path: string
  239. region: string
  240. role: string
  241. secretRef:
  242. accessKeyIDSecretRef:
  243. key: string
  244. name: string
  245. namespace: string
  246. secretAccessKeySecretRef:
  247. key: string
  248. name: string
  249. namespace: string
  250. sessionTokenSecretRef:
  251. key: string
  252. name: string
  253. namespace: string
  254. vaultAwsIamServerID: string
  255. vaultRole: string
  256. jwt:
  257. kubernetesServiceAccountToken:
  258. audiences: [] # minItems 0 of type string
  259. expirationSeconds: 1
  260. serviceAccountRef:
  261. audiences: [] # minItems 0 of type string
  262. name: string
  263. namespace: string
  264. path: "jwt"
  265. role: string
  266. secretRef:
  267. key: string
  268. name: string
  269. namespace: string
  270. kubernetes:
  271. mountPath: "kubernetes"
  272. role: string
  273. secretRef:
  274. key: string
  275. name: string
  276. namespace: string
  277. serviceAccountRef:
  278. audiences: [] # minItems 0 of type string
  279. name: string
  280. namespace: string
  281. ldap:
  282. path: "ldap"
  283. secretRef:
  284. key: string
  285. name: string
  286. namespace: string
  287. username: string
  288. namespace: string
  289. tokenSecretRef:
  290. key: string
  291. name: string
  292. namespace: string
  293. userPass:
  294. path: "userpass"
  295. secretRef:
  296. key: string
  297. name: string
  298. namespace: string
  299. username: string
  300. caBundle: c3RyaW5n
  301. caProvider:
  302. key: string
  303. name: string
  304. namespace: string
  305. type: "Secret" # "Secret", "ConfigMap"
  306. checkAndSet:
  307. required: true
  308. forwardInconsistent: true
  309. headers: {}
  310. namespace: string
  311. path: string
  312. readYourWrites: true
  313. server: string
  314. tls:
  315. certSecretRef:
  316. key: string
  317. name: string
  318. namespace: string
  319. keySecretRef:
  320. key: string
  321. name: string
  322. namespace: string
  323. version: "v2"
  324. resultType: "Data"
  325. retrySettings:
  326. maxRetries: 1
  327. retryInterval: string
  328. webhookSpec:
  329. auth:
  330. ntlm:
  331. passwordSecret:
  332. key: string
  333. name: string
  334. namespace: string
  335. usernameSecret:
  336. key: string
  337. name: string
  338. namespace: string
  339. body: string
  340. caBundle: c3RyaW5n
  341. caProvider:
  342. key: string
  343. name: string
  344. namespace: string
  345. type: "Secret" # "Secret", "ConfigMap"
  346. headers: {}
  347. method: string
  348. result:
  349. jsonPath: string
  350. secrets:
  351. - name: string
  352. secretRef:
  353. key: string
  354. name: string
  355. timeout: string
  356. url: string
  357. kind: "ACRAccessToken" # "ACRAccessToken", "CloudsmithAccessToken", "ECRAuthorizationToken", "Fake", "GCRAccessToken", "GithubAccessToken", "QuayAccessToken", "Password", "SSHKey", "STSSessionToken", "UUID", "VaultDynamicSecret", "Webhook", "Grafana"