crossplane

1
apiVersion: apiextensions.k8s.io/v1
2
kind: CustomResourceDefinition
3
metadata:
4
  annotations:
5
    controller-gen.kubebuilder.io/version: v0.14.0
6
  name: storeconfigs.secrets.crossplane.io
7
spec:
8
  group: secrets.crossplane.io
9
  names:
10
    categories:
11
    - crossplane
12
    - store
13
    kind: StoreConfig
14
    listKind: StoreConfigList
15
    plural: storeconfigs
16
    singular: storeconfig
17
  scope: Cluster
18
  versions:
19
  - additionalPrinterColumns:
20
    - jsonPath: .metadata.creationTimestamp
21
      name: AGE
22
      type: date
23
    - jsonPath: .spec.type
24
      name: TYPE
25
      type: string
26
    - jsonPath: .spec.defaultScope
27
      name: DEFAULT-SCOPE
28
      type: string
29
    name: v1alpha1
30
    schema:
31
      openAPIV3Schema:
32
        description: A StoreConfig configures how Crossplane controllers should store
33
          connection details.
34
        properties:
35
          apiVersion:
36
            description: |-
37
              APIVersion defines the versioned schema of this representation of an object.
38
              Servers should convert recognized schemas to the latest internal value, and
39
              may reject unrecognized values.
40
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
41
            type: string
42
          kind:
43
            description: |-
44
              Kind is a string value representing the REST resource this object represents.
45
              Servers may infer this from the endpoint the client submits requests to.
46
              Cannot be updated.
47
              In CamelCase.
48
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
49
            type: string
50
          metadata:
51
            type: object
52
          spec:
53
            description: A StoreConfigSpec defines the desired state of a StoreConfig.
54
            properties:
55
              defaultScope:
56
                description: |-
57
                  DefaultScope used for scoping secrets for "cluster-scoped" resources.
58
                  If store type is "Kubernetes", this would mean the default namespace to
59
                  store connection secrets for cluster scoped resources.
60
                  In case of "Vault", this would be used as the default parent path.
61
                  Typically, should be set as Crossplane installation namespace.
62
                type: string
63
              kubernetes:
64
                description: |-
65
                  Kubernetes configures a Kubernetes secret store.
66
                  If the "type" is "Kubernetes" but no config provided, in cluster config
67
                  will be used.
68
                properties:
69
                  auth:
70
                    description: Credentials used to connect to the Kubernetes API.
71
                    properties:
72
                      env:
73
                        description: |-
74
                          Env is a reference to an environment variable that contains credentials
75
                          that must be used to connect to the provider.
76
                        properties:
77
                          name:
78
                            description: Name is the name of an environment variable.
79
                            type: string
80
                        required:
81
                        - name
82
                        type: object
83
                      fs:
84
                        description: |-
85
                          Fs is a reference to a filesystem location that contains credentials that
86
                          must be used to connect to the provider.
87
                        properties:
88
                          path:
89
                            description: Path is a filesystem path.
90
                            type: string
91
                        required:
92
                        - path
93
                        type: object
94
                      secretRef:
95
                        description: |-
96
                          A SecretRef is a reference to a secret key that contains the credentials
97
                          that must be used to connect to the provider.
98
                        properties:
99
                          key:
100
                            description: The key to select.
101
                            type: string
102
                          name:
103
                            description: Name of the secret.
104
                            type: string
105
                          namespace:
106
                            description: Namespace of the secret.
107
                            type: string
108
                        required:
109
                        - key
110
                        - name
111
                        - namespace
112
                        type: object
113
                      source:
114
                        description: Source of the credentials.
115
                        enum:
116
                        - None
117
                        - Secret
118
                        - Environment
119
                        - Filesystem
120
                        type: string
121
                    required:
122
                    - source
123
                    type: object
124
                required:
125
                - auth
126
                type: object
127
              plugin:
128
                description: Plugin configures External secret store as a plugin.
129
                properties:
130
                  configRef:
131
                    description: ConfigRef contains store config reference info.
132
                    properties:
133
                      apiVersion:
134
                        description: APIVersion of the referenced config.
135
                        type: string
136
                      kind:
137
                        description: Kind of the referenced config.
138
                        type: string
139
                      name:
140
                        description: Name of the referenced config.
141
                        type: string
142
                    required:
143
                    - apiVersion
144
                    - kind
145
                    - name
146
                    type: object
147
                  endpoint:
148
                    description: Endpoint is the endpoint of the gRPC server.
149
                    type: string
150
                type: object
151
              type:
152
                default: Kubernetes
153
                description: |-
154
                  Type configures which secret store to be used. Only the configuration
155
                  block for this store will be used and others will be ignored if provided.
156
                  Default is Kubernetes.
157
                enum:
158
                - Kubernetes
159
                - Vault
160
                - Plugin
161
                type: string
162
            required:
163
            - defaultScope
164
            type: object
165
        required:
166
        - spec
167
        type: object
168
    served: true
169
    storage: true
170
    subresources: {}
171