awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-10 08:28:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(k8-operator): push secrets

Browse Source
This commit is contained in:
Daniel Hougaard
2024-12-08 21:30:09 +04:00
parent 5ad8dab250
commit 0d35273857
2 changed files with 232 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8-operator/config/crd/bases/secrets.infisical.com_infisicalpushsecrets.yaml
+171 -6
View File
@@ -190,21 +190,183 @@ spec:
// +listType=map // +listMapKey=type Conditions []metav1.Condition // +listType=map // +listMapKey=type Conditions []metav1.Condition
`json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
properties:
awsIamAuth:
properties:
identityId:
type: string
required:
- identityId
type: object
azureAuth:
properties:
identityId:
type: string
resource:
type: string
required:
- identityId
type: object
gcpIamAuth:
properties:
identityId:
type: string
serviceAccountKeyFilePath:
type: string
required:
- identityId
- serviceAccountKeyFilePath
type: object
gcpIdTokenAuth:
properties:
identityId:
type: string
required:
- identityId
type: object
kubernetesAuth:
description: Rest of your types should be defined similarly...
properties:
identityId:
type: string
serviceAccountRef:
properties:
name:
type: string
namespace:
type: string
required:
- name
- namespace
type: object
required:
- identityId
- serviceAccountRef
type: object
universalAuth:
description: PushSecretUniversalAuth defines universal authentication
properties:
credentialsRef:
properties:
secretName:
description: The name of the Kubernetes Secret
type: string
secretNamespace:
description:
The name space where the Kubernetes Secret
is located
type: string
required:
- secretName
- secretNamespace
type: object
required:
- credentialsRef
type: object
type: object
deletionPolicy:
type: string
destination:
properties:
EnvironmentSlug:
type: string
projectId:
type: string
secretsPath:
type: string
required:
- EnvironmentSlug
- projectId
- secretsPath
type: object
hostAPI:
description: Infisical host to pull secrets from
type: string
push:
properties:
secret:
properties:
secretName:
description: The name of the Kubernetes Secret
type: string
secretNamespace:
description:
The name space where the Kubernetes Secret is
located
type: string
required:
- secretName
- secretNamespace
type: object
required:
- secret
type: object
resyncInterval:
type: string
tls:
properties:
caRef:
description: Reference to secret containing CA cert
properties:
key:
description:
The name of the secret property with the CA certificate
value
type: string
secretName:
description: The name of the Kubernetes Secret
type: string
secretNamespace:
description:
The namespace where the Kubernetes Secret is
located
type: string
required:
- key
- secretName
- secretNamespace
type: object
type: object
updatePolicy:
type: string
required:
- destination
- push
- resyncInterval
type: object
status:
description: InfisicalPushSecretStatus defines the observed state of InfisicalPushSecret
properties:
conditions:
items:
description:
"Condition contains details for one aspect of the current
state of this API Resource. --- This struct is intended for direct
use as an array at the field path .status.conditions. For example,
\n type FooStatus struct{ // Represents the observations of a
foo's current state. // Known .status.conditions.type are: \"Available\",
\"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
// +listType=map // +listMapKey=type Conditions []metav1.Condition
`json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
properties: properties:
lastTransitionTime: lastTransitionTime:
description: lastTransitionTime is the last time the condition description:
lastTransitionTime is the last time the condition
transitioned from one status to another. This should be when transitioned from one status to another. This should be when
the underlying condition changed. If that is not known, then the underlying condition changed. If that is not known, then
using the time when the API field changed is acceptable. using the time when the API field changed is acceptable.
format: date-time format: date-time
type: string type: string
message: message:
description: message is a human readable message indicating description:
message is a human readable message indicating
details about the transition. This may be an empty string. details about the transition. This may be an empty string.
maxLength: 32768 maxLength: 32768
type: string type: string
observedGeneration: observedGeneration:
description: observedGeneration represents the .metadata.generation description:
observedGeneration represents the .metadata.generation
that the condition was set based upon. For instance, if .metadata.generation that the condition was set based upon. For instance, if .metadata.generation
is currently 12, but the .status.conditions[x].observedGeneration is currently 12, but the .status.conditions[x].observedGeneration
is 9, the condition is out of date with respect to the current is 9, the condition is out of date with respect to the current
@@ -213,7 +375,8 @@ spec:
minimum: 0 minimum: 0
type: integer type: integer
reason: reason:
description: reason contains a programmatic identifier indicating description:
reason contains a programmatic identifier indicating
the reason for the condition's last transition. Producers the reason for the condition's last transition. Producers
of specific condition types may define expected values and of specific condition types may define expected values and
meanings for this field, and whether the values are considered meanings for this field, and whether the values are considered
@@ -231,7 +394,8 @@ spec:
- Unknown - Unknown
type: string type: string
type: type:
description: type of condition in CamelCase or in foo.example.com/CamelCase. description:
type of condition in CamelCase or in foo.example.com/CamelCase.
--- Many .condition.type values are consistent across resources --- Many .condition.type values are consistent across resources
like Available, but because arbitrary conditions can be useful like Available, but because arbitrary conditions can be useful
(see .node.status.conditions), the ability to deconflict is (see .node.status.conditions), the ability to deconflict is
@@ -250,7 +414,8 @@ spec:
managedSecrets: managedSecrets:
additionalProperties: additionalProperties:
type: string type: string
description: managed secrets is a map where the key is the ID, and description:
managed secrets is a map where the key is the ID, and
the value is the secret key (string[id], string[key] ) the value is the secret key (string[id], string[key] )
type: object type: object
required: required:
k8-operator/controllers/infisicalsecret/infisicalsecret_controller.go
+2
View File
@@ -35,6 +35,8 @@ func (r *InfisicalSecretReconciler) GetLogger(req ctrl.Request) logr.Logger {
return r.BaseLogger.WithValues("infisicalsecret", req.NamespacedName) return r.BaseLogger.WithValues("infisicalsecret", req.NamespacedName)
} }
var resourceVariablesMap map[string]util.ResourceVariables = make(map[string]util.ResourceVariables)
//+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets,verbs=get;list;watch;create;update;patch;delete
//+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/status,verbs=get;update;patch //+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/status,verbs=get;update;patch
//+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/finalizers,verbs=update //+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/finalizers,verbs=update