diff --git "a/temp/freeleapssecret.yaml\\" "b/temp/freeleapssecret.yaml\\" new file mode 100644 index 00000000..e85ea392 --- /dev/null +++ "b/temp/freeleapssecret.yaml\\" @@ -0,0 +1,36 @@ +apiVersion: freeleaps.com/v1alpha1 +kind: FreeleapsSecret +metadata: + name: example-secret + namespace: freeleaps-prod +spec: + refreshInterval: 3m + secretStoreRef: + kind: FreeleapsSecretStore + name: example-secret-store + target: + name: secret-to-be-created + # Enum: Owner, Merge + # Default Value: Owner + # Owner creates the secret and sets .metadata.ownerReference of the resource + # Merge does not create the secret, but merges in the data fields to the target secret + creationPolicy: Owner + data: + - secretKey: nicolas-username-a + remoteRef: + key: username + type: Secret + - secretKey: nicolas-username-b + remoteRef: + key: username-b + type: Secret + +AzureKeyVaultSecret: username-b (username=nicolas@mathmast.com) + +AzureKeyVaultSecret: username (username=nicolas@mathmast.com) + ^ + | +FreeleapsSecret: example-secret + | + v +KubernetesSecret: secret-to-be-created (nicolas-username-a=nicolas@mathmast.com, nicolas-username-b=nicolas@mathmast.com) diff --git a/temp/freeleapssecretstore.yaml b/temp/freeleapssecretstore.yaml new file mode 100644 index 00000000..b429c73e --- /dev/null +++ b/temp/freeleapssecretstore.yaml @@ -0,0 +1,20 @@ +# The FreeleapsSecretStore object is cluster-wide +apiVersion: freeleaps.com/v1alpha1 +kind: FreeleapsSecretStore +metadata: + name: example-secret-store +spec: + provider: + azurekv: + tenantId: "{TENANT_ID}" + vaultUrl: "{VAULT_URL}" + vaultName: "{VAULT_NAME}" + subscriptionId: "{SUBSCRIPTION_ID}" + resourceGroup: "{RESOURCE_GROUP}" + authSecretRef: + clientId: + name: example-secret-store-azure-credentials + key: clientId + clientSecret: + name: example-secret-store-azure-credentials + key: clientSecret