From 09ad1cce96b669308cf0e9e0a714842cec6cbd36 Mon Sep 17 00:00:00 2001
From: Daniel Hougaard <daniel@infisical.com>
Date: Sat, 29 Mar 2025 03:29:43 +0400
Subject: [PATCH] fix: incorrect examples

---
 .../infisical-secret-crd-with-template.yml    | 28 +++++++++----------
 .../infisicalsecret/infisicalSecretCrd.yaml   |  5 +++-
 2 files changed, 17 insertions(+), 16 deletions(-)

diff --git a/k8-operator/config/samples/crd/infisicalsecret/infisical-secret-crd-with-template.yml b/k8-operator/config/samples/crd/infisicalsecret/infisical-secret-crd-with-template.yml
index c1e0c86b9..06086e93f 100644
--- a/k8-operator/config/samples/crd/infisicalsecret/infisical-secret-crd-with-template.yml
+++ b/k8-operator/config/samples/crd/infisicalsecret/infisical-secret-crd-with-template.yml
@@ -41,6 +41,9 @@ spec:
 
     # Native Kubernetes Auth
     kubernetesAuth:
+      serviceAccountRef:
+        name: <secret-name>
+        namespace: <secret-namespace>
       identityId: <machine-identity-id>
       serviceAccountTokenPath: "/path/to/your/service-account/token" # Optional, defaults to /var/run/secrets/kubernetes.io/serviceaccount/token
 
@@ -97,18 +100,13 @@ spec:
         secretsPath: "/path"
         recursive: true
 
-  managedSecretReference:
-    secretName: managed-secret
-    secretNamespace: default
-    template:
-      includeAllSecrets: true
-      data:
-        SSH_KEY: "{{ .KEY.SecretPath }} {{ .KEY.Value }}"
-        BINARY_KEY: "{{ decodeBase64ToBytes .BINARY_KEY_BASE64.Value }}"
-    creationPolicy: "Orphan" ## Owner | Orphan
-    # secretType: kubernetes.io/dockerconfigjson
-
-  # # To be depreciated soon
-  # tokenSecretReference:
-  #   secretName: service-token
-  #   secretNamespace: default
+  managedKubeSecretReferences:
+    - secretName: managed-secret
+      secretNamespace: default
+      creationPolicy: "Orphan" ## Owner | Orphan
+      # secretType: kubernetes.io/dockerconfigjson
+      template:
+        includeAllSecrets: true
+        data:
+          SSH_KEY: "{{ .KEY.SecretPath }} {{ .KEY.Value }}"
+          BINARY_KEY: "{{ decodeBase64ToBytes .BINARY_KEY_BASE64.Value }}"
diff --git a/k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml b/k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml
index 108b86e78..82bb8039c 100644
--- a/k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml
+++ b/k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml
@@ -41,6 +41,9 @@ spec:
 
     # Native Kubernetes Auth
     kubernetesAuth:
+      serviceAccountRef:
+        name: <secret-name>
+        namespace: <secret-namespace>
       identityId: <machine-identity-id>
       serviceAccountTokenPath: "/path/to/your/service-account/token" # Optional, defaults to /var/run/secrets/kubernetes.io/serviceaccount/token
 
@@ -97,7 +100,7 @@ spec:
         secretsPath: "/path"
         recursive: true
 
-  managedSecretReferences:
+  managedKubeSecretReferences:
     - secretName: managed-secret
       secretNamespace: default
       creationPolicy: "Orphan" ## Owner | Orphan