Add CSI secrets-store with vault provider
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
5803f5f006
commit
158419cfbb
12 changed files with 357 additions and 0 deletions
|
|
@ -0,0 +1,99 @@
|
|||
apiVersion: apiextensions.k8s.io/v1beta1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.2.4
|
||||
creationTimestamp: null
|
||||
name: secretproviderclasses.secrets-store.csi.x-k8s.io
|
||||
spec:
|
||||
group: secrets-store.csi.x-k8s.io
|
||||
names:
|
||||
kind: SecretProviderClass
|
||||
listKind: SecretProviderClassList
|
||||
plural: secretproviderclasses
|
||||
singular: secretproviderclass
|
||||
scope: Namespaced
|
||||
validation:
|
||||
openAPIV3Schema:
|
||||
description: SecretProviderClass is the Schema for the secretproviderclasses
|
||||
API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: SecretProviderClassSpec defines the desired state of SecretProviderClass
|
||||
properties:
|
||||
parameters:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Configuration for specific provider
|
||||
type: object
|
||||
provider:
|
||||
description: Configuration for provider name
|
||||
type: string
|
||||
secretObjects:
|
||||
items:
|
||||
description: SecretObject defines the desired state of synced K8s
|
||||
secret objects
|
||||
properties:
|
||||
data:
|
||||
items:
|
||||
description: SecretObjectData defines the desired state of synced
|
||||
K8s secret object data
|
||||
properties:
|
||||
key:
|
||||
description: data field to populate
|
||||
type: string
|
||||
objectName:
|
||||
description: name of the object to sync
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
secretName:
|
||||
description: name of the K8s secret object
|
||||
type: string
|
||||
type:
|
||||
description: type of K8s secret object
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
status:
|
||||
description: SecretProviderClassStatus defines the observed state of SecretProviderClass
|
||||
properties:
|
||||
byPod:
|
||||
items:
|
||||
description: ByPodStatus defines the state of SecretProviderClass
|
||||
as seen by an individual controller
|
||||
properties:
|
||||
id:
|
||||
description: id of the pod that wrote the status
|
||||
type: string
|
||||
namespace:
|
||||
description: namespace of the pod that wrote the status
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
type: object
|
||||
version: v1alpha1
|
||||
versions:
|
||||
- name: v1alpha1
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
Loading…
Add table
Add a link
Reference in a new issue