allow host api in spec and update spec names

k8-operator/kubectl-install/install-secrets-operator.yaml

@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/name: namespace
     app.kubernetes.io/part-of: k8-operator
     control-plane: controller-manager
-  name: k8-operator-system
+  name: infisical-operator-system
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -46,19 +46,11 @@ spec:
               environment:
                 description: The Infisical environment such as dev, prod, testing
                 type: string
-              infisicalToken:
-                properties:
-                  secretName:
-                    description: The name of the Kubernetes Secret
-                    type: string
-                  secretNamespace:
-                    description: The name space where the Kubernetes Secret is located
-                    type: string
-                required:
-                - secretName
-                - secretNamespace
-                type: object
-              managedSecret:
+              hostAPI:
+                default: https://app.infisical.com/api
+                description: Infisical host to pull secrets from
+                type: string
+              managedSecretReference:
                 properties:
                   secretName:
                     description: The name of the Kubernetes Secret
@@ -73,6 +65,18 @@ spec:
               projectId:
                 description: The Infisical project id
                 type: string
+              tokenSecretReference:
+                properties:
+                  secretName:
+                    description: The name of the Kubernetes Secret
+                    type: string
+                  secretNamespace:
+                    description: The name space where the Kubernetes Secret is located
+                    type: string
+                required:
+                - secretName
+                - secretNamespace
+                type: object
             required:
             - environment
             - projectId
@@ -142,8 +146,8 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: serviceaccount
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-controller-manager
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager
+  namespace: infisical-operator-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -155,8 +159,8 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: role
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-leader-election-role
-  namespace: k8-operator-system
+  name: infisical-operator-leader-election-role
+  namespace: infisical-operator-system
 rules:
 - apiGroups:
   - ""
@@ -194,7 +198,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   creationTimestamp: null
-  name: k8-operator-manager-role
+  name: infisical-operator-manager-role
 rules:
 - apiGroups:
   - ""
@@ -253,7 +257,7 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: clusterrole
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-metrics-reader
+  name: infisical-operator-metrics-reader
 rules:
 - nonResourceURLs:
   - /metrics
@@ -270,7 +274,7 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: clusterrole
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-proxy-role
+  name: infisical-operator-proxy-role
 rules:
 - apiGroups:
   - authentication.k8s.io
@@ -295,16 +299,16 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: rolebinding
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-leader-election-rolebinding
-  namespace: k8-operator-system
+  name: infisical-operator-leader-election-rolebinding
+  namespace: infisical-operator-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: k8-operator-leader-election-role
+  name: infisical-operator-leader-election-role
 subjects:
 - kind: ServiceAccount
-  name: k8-operator-controller-manager
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager
+  namespace: infisical-operator-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -316,15 +320,15 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: clusterrolebinding
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-manager-rolebinding
+  name: infisical-operator-manager-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: k8-operator-manager-role
+  name: infisical-operator-manager-role
 subjects:
 - kind: ServiceAccount
-  name: k8-operator-controller-manager
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager
+  namespace: infisical-operator-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -336,15 +340,15 @@ metadata:
     app.kubernetes.io/managed-by: kustomize
     app.kubernetes.io/name: clusterrolebinding
     app.kubernetes.io/part-of: k8-operator
-  name: k8-operator-proxy-rolebinding
+  name: infisical-operator-proxy-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: k8-operator-proxy-role
+  name: infisical-operator-proxy-role
 subjects:
 - kind: ServiceAccount
-  name: k8-operator-controller-manager
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager
+  namespace: infisical-operator-system
 ---
 apiVersion: v1
 kind: Service
@@ -357,8 +361,8 @@ metadata:
     app.kubernetes.io/name: service
     app.kubernetes.io/part-of: k8-operator
     control-plane: controller-manager
-  name: k8-operator-controller-manager-metrics-service
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager-metrics-service
+  namespace: infisical-operator-system
 spec:
   ports:
   - name: https
@@ -379,8 +383,8 @@ metadata:
     app.kubernetes.io/name: deployment
     app.kubernetes.io/part-of: k8-operator
     control-plane: controller-manager
-  name: k8-operator-controller-manager
-  namespace: k8-operator-system
+  name: infisical-operator-controller-manager
+  namespace: infisical-operator-system
 spec:
   replicas: 1
   selector:
@@ -467,5 +471,5 @@ spec:
             - ALL
       securityContext:
         runAsNonRoot: true
-      serviceAccountName: k8-operator-controller-manager
+      serviceAccountName: infisical-operator-controller-manager
       terminationGracePeriodSeconds: 10