eso

Documentation

Index

• type Eso
  • func (in *Eso) DeepCopy() *Eso
  • func (in *Eso) DeepCopyInto(out *Eso)
• type SecretsStore
  • func (in *SecretsStore) DeepCopy() *SecretsStore
  • func (in *SecretsStore) DeepCopyInto(out *SecretsStore)
• type TenantCluster
  • func (in *TenantCluster) DeepCopy() *TenantCluster
  • func (in *TenantCluster) DeepCopyInto(out *TenantCluster)

Types

type Eso

type Eso struct {
	// Enabled Whether or not to enable `external-secrets-operator` object
	// deployments using `provider-kubernetes.
	//
	// +optional
	// +default=true
	Enabled *bool `json:"enabled,omitempty"`

	// FluxSSASecretName is the name of the secret that contains SSA details
	// for each project built with infrastructure components.
	//
	// This secret will be updated with the name of the current project with
	// all hyphens, underscores and dots replaced with an empty string.
	//
	// This secret must exist in the same namespace as the current project.
	//
	// +optional
	FluxSSASecretName *string `json:"fluxSSASecretName,omitempty"`

	// KubernetesSecretStore is the Kubernetes secret store to use.
	//
	// The kubernetes secret store is expected to be namespace scoped to prevent
	// secrets leaking across namespaces.
	//
	// +optional
	// +default="default"
	KubernetesSecretStore *string `json:"kubernetesSecretStore,omitempty"`

	// Tenant Cluster details
	//
	// +optional
	TenantCluster TenantCluster `json:"tenantCluster,omitempty"`

	// Stores is a list of secret stores to use for push secrets.
	//
	// +optional
	Stores []SecretsStore `json:"stores,omitempty"`
}

ExternalSecretsOperator (ESO) is the configuration for the external secrets operator.

If enabled will duplicate the RDS connection secret to a secret managed by external secrets operator which standardises the fields for use with provider-sql.

Additionally, PushSecrets can be automatically created to push the secret to external secrets stores.

+kubebuilder:object:root=false +kubebuilder:object:generate=true

func (*Eso) DeepCopy

func (in *Eso) DeepCopy() *Eso

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Eso.

func (*Eso) DeepCopyInto

func (in *Eso) DeepCopyInto(out *Eso)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SecretsStore

type SecretsStore struct {
	// Enabled is whether the secrets store is enabled.
	//
	// +optional
	// +default=true
	Enabled *bool `json:"enabled,omitempty"`

	// Name is the name of the secret store.
	//
	// +required
	Name *string `json:"name"`

	// IsClusterSecretStore is whether the secret store is a cluster secret store.
	//
	// +optional
	// +default=false
	IsClusterSecretStore *bool `json:"isClusterSecretStore,omitempty"`
}

SecretsStore is a reference to a secrets store to be passed to External Secrets Operator for creating PushSecrets

+kubebuilder:object:root=false +kubebuilder:object:generate=true

func (*SecretsStore) DeepCopy

func (in *SecretsStore) DeepCopy() *SecretsStore

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecretsStore.

func (*SecretsStore) DeepCopyInto

func (in *SecretsStore) DeepCopyInto(out *SecretsStore)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TenantCluster

type TenantCluster struct {
	// Enabled Whether or not to enable `external-secrets-operator` object
	// deployments using `provider-kubernetes.
	//
	// +optional
	// +default=false
	Enabled *bool `json:"enabled"`

	// The namespace on the tenant cluster to deploy secrets to. If not set
	// will default to the `default` namespace.
	//
	// +optional
	Namespace string `json:"namespace,omitempty"`

	// The API endpoint for the tenant cluster.
	//
	// +optional
	ApiServerEndpoint string `json:"apiServerEndpoint,omitempty"`

	// The name of the tenant cluster.
	//
	// +optional
	ClusterName string `json:"clusterName,omitempty"`
}

TenantCluster is the configuration for the tenant cluster.

+kubebuilder:object:root=false +kubebuilder:object:generate=true

func (*TenantCluster) DeepCopy

func (in *TenantCluster) DeepCopy() *TenantCluster

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TenantCluster.

func (*TenantCluster) DeepCopyInto

func (in *TenantCluster) DeepCopyInto(out *TenantCluster)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.