SecretSyncProperties interface
The properties of the SecretSync instance.
Properties
| force |
ForceSynchronization can be used to force the secret synchronization. The secret synchronization is triggered by changing the value in this field. This field is not used to resolve synchronization conflicts. |
| kubernetes |
Type specifies the type of the Kubernetes secret object, e.g. |
| object |
An array of SecretObjectData that maps secret data from the external secret provider to the Kubernetes secret. Each entry specifies the source secret in the external provider and the corresponding key in the Kubernetes secret. |
| provisioning |
Provisioning state of the SecretSync instance. |
| secret |
SecretProviderClassName specifies the name of the SecretProviderClass resource, which contains the information needed to access the cloud provider secret store. |
| service |
ServiceAccountName specifies the name of the service account used to access the cloud provider secret store. The audience field in the service account token must be passed as parameter in the controller configuration. The audience is used when requesting a token from the API server for the service account; the supported audiences are defined by each provider. |
| status | SecretSyncStatus defines the observed state of the secret synchronization process. |
Property Details
forceSynchronization
ForceSynchronization can be used to force the secret synchronization. The secret synchronization is triggered by changing the value in this field. This field is not used to resolve synchronization conflicts.
forceSynchronization?: string
Property Value
string
kubernetesSecretType
Type specifies the type of the Kubernetes secret object, e.g. Opaque or kubernetes.io/tls. The controller must have permission to create secrets of the specified type.
kubernetesSecretType: string
Property Value
string
objectSecretMapping
An array of SecretObjectData that maps secret data from the external secret provider to the Kubernetes secret. Each entry specifies the source secret in the external provider and the corresponding key in the Kubernetes secret.
objectSecretMapping: KubernetesSecretObjectMapping[]
Property Value
provisioningState
Provisioning state of the SecretSync instance.
provisioningState?: string
Property Value
string
secretProviderClassName
SecretProviderClassName specifies the name of the SecretProviderClass resource, which contains the information needed to access the cloud provider secret store.
secretProviderClassName: string
Property Value
string
serviceAccountName
ServiceAccountName specifies the name of the service account used to access the cloud provider secret store. The audience field in the service account token must be passed as parameter in the controller configuration. The audience is used when requesting a token from the API server for the service account; the supported audiences are defined by each provider.
serviceAccountName: string
Property Value
string
status
SecretSyncStatus defines the observed state of the secret synchronization process.
status?: SecretSyncStatus