mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-05 22:26:41 +00:00
Update infisical-push-secret-crd.mdx
This commit is contained in:
@@ -241,7 +241,21 @@ After applying the InfisicalPushSecret CRD, you should notice that the secrets y
|
|||||||
DATABASE_URL: postgres://127.0.0.1:5432
|
DATABASE_URL: postgres://127.0.0.1:5432
|
||||||
ENCRYPTION_KEY: fabcc12-a22-facbaa4-11aa568aab
|
ENCRYPTION_KEY: fabcc12-a22-facbaa4-11aa568aab
|
||||||
```
|
```
|
||||||
|
</Accordion>
|
||||||
|
<Accordion title="generators[]">
|
||||||
|
The `generators[]` field is used to define the generators you want to use for your InfisicalPushSecret CRD.
|
||||||
|
You can follow the guide for [using generators to push secrets](#using-generators-to-push-secrets) for more information.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
push:
|
||||||
|
generators:
|
||||||
|
- destinationSecretName: password-generator-test
|
||||||
|
generatorRef:
|
||||||
|
kind: Password
|
||||||
|
name: password-generator
|
||||||
|
```
|
||||||
</Accordion>
|
</Accordion>
|
||||||
</Accordion>
|
</Accordion>
|
||||||
|
|
||||||
@@ -475,22 +489,36 @@ For this reason you may want to disable automatic reconciliation of the Infisica
|
|||||||
|
|
||||||
To use a generator, you must specify at least one generator in the `push.generators[]` field. An example of a generator usage can be seen here:
|
To use a generator, you must specify at least one generator in the `push.generators[]` field. An example of a generator usage can be seen here:
|
||||||
|
|
||||||
|
|
||||||
<Accordion title="push.generators[]">
|
<Accordion title="push.generators[]">
|
||||||
Define a generator in the `push.generators[]` field.
|
This field holds an array of the generators you want to use for your InfisicalPushSecret CRD.
|
||||||
|
|
||||||
<Accordion title="push.generators[].destinationSecretName">
|
|
||||||
The name of the secret that will be created in Infisical.
|
|
||||||
</Accordion>
|
|
||||||
|
|
||||||
<Accordion title="push.generators[].generatorRef">
|
|
||||||
The reference to the generator resource.
|
|
||||||
|
|
||||||
Valid fields:
|
|
||||||
- `kind`: The kind of the generator resource, must match the generator kind.
|
|
||||||
- `name`: The name of the generator resource.
|
|
||||||
</Accordion>
|
|
||||||
</Accordion>
|
</Accordion>
|
||||||
|
|
||||||
|
<Accordion title="push.generators[].destinationSecretName">
|
||||||
|
The name of the secret that will be created in Infisical.
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
<Accordion title="push.generators[].generatorRef">
|
||||||
|
The reference to the generator resource.
|
||||||
|
|
||||||
|
Valid fields:
|
||||||
|
- `kind`: The kind of the generator resource, must match the generator kind.
|
||||||
|
- `name`: The name of the generator resource.
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
<Accordion title="push.generators[].generatorRef.kind">
|
||||||
|
The kind of the generator resource, must match the generator kind.
|
||||||
|
|
||||||
|
Valid values:
|
||||||
|
- `Password`
|
||||||
|
- `UUID`
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
<Accordion title="push.generators[].generatorRef.name">
|
||||||
|
The name of the generator resource.
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
push:
|
push:
|
||||||
secret:
|
secret:
|
||||||
@@ -503,81 +531,94 @@ To use a generator, you must specify at least one generator in the `push.generat
|
|||||||
name: custom-generator # Name of the generator resource
|
name: custom-generator # Name of the generator resource
|
||||||
```
|
```
|
||||||
|
|
||||||
<Tabs>
|
|
||||||
<Tab title="Password Generator">
|
|
||||||
|
|
||||||
The Password generator is a custom resource that is installed on the cluster that defines the logic for generating a password.
|
### Supported Generators
|
||||||
<Accordion title="Spec definition">
|
Below are the currently supported generators for the InfisicalPushSecret CRD. Each generator has its own spec that can be used to customize the generated secret.
|
||||||
|
|
||||||
- `kind`: The kind of the generator resource, must match the generator kind. For the Password generator, the kind is `Password`.
|
|
||||||
- `generator.passwordSpec`: The spec of the password generator.
|
|
||||||
|
|
||||||
<Accordion title="generator.passwordSpec">
|
<Accordion title="Password Generator">
|
||||||
- `length`: The length of the password.
|
### Password Generator
|
||||||
- `digits`: The number of digits in the password.
|
|
||||||
- `symbols`: The number of symbols in the password.
|
The Password generator is a custom resource that is installed on the cluster that defines the logic for generating a password.
|
||||||
- `symbolCharacters`: The characters to use for the symbols in the password.
|
- `kind`: The kind of the generator resource, must match the generator kind. For the Password generator, the kind is `Password`.
|
||||||
- `noUpper`: Whether to include uppercase letters in the password.
|
- `generator.passwordSpec`: The spec of the password generator.
|
||||||
- `allowRepeat`: Whether to allow repeating characters in the password.
|
|
||||||
</Accordion>
|
<Accordion title="generator.kind">
|
||||||
|
The `generator.kind` field must match the kind of the generator resource. For the Password generator, the kind should always be set to `Password`.
|
||||||
|
</Accordion>
|
||||||
|
<Accordion title="generator.passwordSpec">
|
||||||
|
- `length`: The length of the password.
|
||||||
|
- `digits`: The number of digits in the password.
|
||||||
|
- `symbols`: The number of symbols in the password.
|
||||||
|
- `symbolCharacters`: The characters to use for the symbols in the password.
|
||||||
|
- `noUpper`: Whether to include uppercase letters in the password.
|
||||||
|
- `allowRepeat`: Whether to allow repeating characters in the password.
|
||||||
</Accordion>
|
</Accordion>
|
||||||
|
|
||||||
```yaml password-cluster-generator.yaml
|
```yaml password-cluster-generator.yaml
|
||||||
|
apiVersion: secrets.infisical.com/v1alpha1
|
||||||
|
kind: ClusterGenerator
|
||||||
|
metadata:
|
||||||
|
name: password-generator
|
||||||
|
spec:
|
||||||
|
kind: Password
|
||||||
|
generator:
|
||||||
|
passwordSpec:
|
||||||
|
length: 10
|
||||||
|
digits: 5
|
||||||
|
symbols: 5
|
||||||
|
symbolCharacters: "-_$@"
|
||||||
|
noUpper: false
|
||||||
|
allowRepeat: true
|
||||||
|
```
|
||||||
|
|
||||||
|
Example InfisicalPushSecret CRD using the Password generator:
|
||||||
|
```yaml infisical-push-secret-crd.yaml
|
||||||
|
push:
|
||||||
|
generators:
|
||||||
|
- destinationSecretName: password-generator-test
|
||||||
|
generatorRef:
|
||||||
|
kind: Password
|
||||||
|
name: password-generator
|
||||||
|
```
|
||||||
|
</Accordion>
|
||||||
|
<Accordion title="UUID Generator">
|
||||||
|
### UUID Generator
|
||||||
|
|
||||||
|
The UUID generator is a custom resource that is installed on the cluster that defines the logic for generating a UUID.
|
||||||
|
- `kind`: The kind of the generator resource, must match the generator kind. For the UUID generator, the kind is `UUID`.
|
||||||
|
- `generator.uuidSpec`: The spec of the UUID generator. For UUID's, this can be left empty.
|
||||||
|
|
||||||
|
<Accordion title="generator.kind">
|
||||||
|
The `generator.kind` field must match the kind of the generator resource. For the UUID generator, the kind should always be set to `UUID`.
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
<Accordion title="generator.uuidSpec">
|
||||||
|
The spec of the UUID generator. For UUID's, this can be left empty.
|
||||||
|
</Accordion>
|
||||||
|
|
||||||
|
```yaml uuid-cluster-generator.yaml
|
||||||
apiVersion: secrets.infisical.com/v1alpha1
|
apiVersion: secrets.infisical.com/v1alpha1
|
||||||
kind: ClusterGenerator
|
kind: ClusterGenerator
|
||||||
metadata:
|
metadata:
|
||||||
name: password-generator
|
name: uuid-generator
|
||||||
spec:
|
spec:
|
||||||
kind: Password
|
kind: UUID
|
||||||
generator:
|
generator:
|
||||||
passwordSpec:
|
uuidSpec:
|
||||||
length: 10
|
```
|
||||||
digits: 5
|
|
||||||
symbols: 5
|
|
||||||
symbolCharacters: "-_$@"
|
|
||||||
noUpper: false
|
|
||||||
allowRepeat: true
|
|
||||||
```
|
|
||||||
|
|
||||||
Example InfisicalPushSecret CRD using the Password generator:
|
Example InfisicalPushSecret CRD using the UUID generator:
|
||||||
```yaml infisical-push-secret-crd.yaml
|
|
||||||
push:
|
|
||||||
generators:
|
|
||||||
- destinationSecretName: password-generator-test
|
|
||||||
generatorRef:
|
|
||||||
kind: Password
|
|
||||||
name: password-generator
|
|
||||||
```
|
|
||||||
</Tab>
|
|
||||||
<Tab title="UUID Generator">
|
|
||||||
The UUID generator is a custom resource that is installed on the cluster that defines the logic for generating a UUID.
|
|
||||||
<Accordion title="Spec definition">
|
|
||||||
- `kind`: The kind of the generator resource, must match the generator kind. For the UUID generator, the kind is `UUID`.
|
|
||||||
- `generator.uuidSpec`: The spec of the UUID generator. For UUID's, this can be left empty.
|
|
||||||
</Accordion>
|
|
||||||
|
|
||||||
```yaml uuid-cluster-generator.yaml
|
```yaml infisical-push-secret-crd.yaml
|
||||||
apiVersion: secrets.infisical.com/v1alpha1
|
push:
|
||||||
kind: ClusterGenerator
|
generators:
|
||||||
metadata:
|
- destinationSecretName: uuid-generator-test
|
||||||
name: uuid-generator
|
generatorRef:
|
||||||
spec:
|
kind: UUID
|
||||||
kind: UUID
|
name: uuid-generator
|
||||||
generator:
|
```
|
||||||
uuidSpec:
|
</Accordion>
|
||||||
```
|
|
||||||
|
|
||||||
Example InfisicalPushSecret CRD using the UUID generator:
|
|
||||||
```yaml infisical-push-secret-crd.yaml
|
|
||||||
push:
|
|
||||||
generators:
|
|
||||||
- destinationSecretName: uuid-generator-test
|
|
||||||
generatorRef:
|
|
||||||
kind: UUID
|
|
||||||
name: uuid-generator
|
|
||||||
```
|
|
||||||
</Tab>
|
|
||||||
</Tabs>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user