SecretSyncProperties interface

The properties of the SecretSync instance.

Properties

forceSynchronization

ForceSynchronization can be used to force the secret synchronization. The secret synchronization is triggered by changing the value in this field. This field is not used to resolve synchronization conflicts.

kubernetesSecretType

Type specifies the type of the Kubernetes secret object, e.g. Opaque or kubernetes.io/tls. The controller must have permission to create secrets of the specified type.

objectSecretMapping

An array of SecretObjectData that maps secret data from the external secret provider to the Kubernetes secret. Each entry specifies the source secret in the external provider and the corresponding key in the Kubernetes secret.

provisioningState

Provisioning state of the SecretSync instance.

secretProviderClassName

SecretProviderClassName specifies the name of the SecretProviderClass resource, which contains the information needed to access the cloud provider secret store.

serviceAccountName

ServiceAccountName specifies the name of the service account used to access the cloud provider secret store. The audience field in the service account token must be passed as parameter in the controller configuration. The audience is used when requesting a token from the API server for the service account; the supported audiences are defined by each provider.

status

SecretSyncStatus defines the observed state of the secret synchronization process.

Property Details

forceSynchronization

ForceSynchronization can be used to force the secret synchronization. The secret synchronization is triggered by changing the value in this field. This field is not used to resolve synchronization conflicts.

forceSynchronization?: string

Property Value

string

kubernetesSecretType

Type specifies the type of the Kubernetes secret object, e.g. Opaque or kubernetes.io/tls. The controller must have permission to create secrets of the specified type.

kubernetesSecretType: string

Property Value

string

objectSecretMapping

An array of SecretObjectData that maps secret data from the external secret provider to the Kubernetes secret. Each entry specifies the source secret in the external provider and the corresponding key in the Kubernetes secret.

objectSecretMapping: KubernetesSecretObjectMapping[]

Property Value

provisioningState

Provisioning state of the SecretSync instance.

provisioningState?: string

Property Value

string

secretProviderClassName

SecretProviderClassName specifies the name of the SecretProviderClass resource, which contains the information needed to access the cloud provider secret store.

secretProviderClassName: string

Property Value

string

serviceAccountName

ServiceAccountName specifies the name of the service account used to access the cloud provider secret store. The audience field in the service account token must be passed as parameter in the controller configuration. The audience is used when requesting a token from the API server for the service account; the supported audiences are defined by each provider.

serviceAccountName: string

Property Value

string

status

SecretSyncStatus defines the observed state of the secret synchronization process.

status?: SecretSyncStatus

Property Value