Feat: Expand secret references with Machine Identity

k8-operator/packages/api/api.go

@@ -163,6 +163,9 @@ func CallGetDecryptedSecretsV3(httpClient *resty.Client, request GetDecryptedSec
 	if request.Recursive {
 		req.SetQueryParam("recursive", "true")
 	}
+	if request.ExpandSecretReferences {
+		req.SetQueryParam("expandSecretReferences", "true")
+	}
 
 	response, err := req.Get(fmt.Sprintf("%v/v3/secrets/raw", API_HOST_URL))
 

k8-operator/packages/api/models.go

@@ -102,6 +102,7 @@ type GetDecryptedSecretsV3Request struct {
 	Environment            string `json:"environment"`
 	SecretPath             string `json:"secretPath"`
 	Recursive              bool   `json:"recursive"`
+	ExpandSecretReferences bool   `json:"expandSecretReferences"`
 	ETag                   string `json:"etag,omitempty"`
 }
 

k8-operator/packages/util/secrets.go

@@ -62,6 +62,7 @@ func GetPlainTextSecretsViaUniversalAuth(accessToken string, etag string, secret
 		Environment:            secretScope.EnvSlug,
 		Recursive:              secretScope.Recursive,
 		SecretPath:             secretScope.SecretsPath,
+		ExpandSecretReferences: true,
 		ETag:                   etag,
 	})