awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 10:27:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(k8s): automatic service account token creation for k8s auth

Browse Source
This commit is contained in:
Daniel Hougaard
2025-04-01 23:39:22 +04:00
parent 82b828c10e
commit 3d072c2f48
5 changed files with 73 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8-operator/config/crd/bases/secrets.infisical.com_infisicaldynamicsecrets.yaml
+13
View File
@@ -73,6 +73,12 @@ spec:
type: object
kubernetesAuth:
properties:
autoCreateServiceAccountToken:
description: Optionally automatically create a service account
token for the configured service account. If this is set
to `true`, the operator will automatically create a service
account token for the configured service account.
type: boolean
identityId:
type: string
serviceAccountRef:
@@ -85,6 +91,13 @@ spec:
- name
- namespace
type: object
serviceAccountTokenAudiences:
description: The audiences to use for the service account
token. This is only relevant if `autoCreateServiceAccountToken`
is true.
items:
type: string
type: array
required:
- identityId
- serviceAccountRef
k8-operator/config/crd/bases/secrets.infisical.com_infisicalpushsecrets.yaml
+13
View File
@@ -73,6 +73,12 @@ spec:
type: object
kubernetesAuth:
properties:
autoCreateServiceAccountToken:
description: Optionally automatically create a service account
token for the configured service account. If this is set
to `true`, the operator will automatically create a service
account token for the configured service account.
type: boolean
identityId:
type: string
serviceAccountRef:
@@ -85,6 +91,13 @@ spec:
- name
- namespace
type: object
serviceAccountTokenAudiences:
description: The audiences to use for the service account
token. This is only relevant if `autoCreateServiceAccountToken`
is true.
items:
type: string
type: array
required:
- identityId
- serviceAccountRef
k8-operator/config/crd/bases/secrets.infisical.com_infisicalsecrets.yaml
+13
View File
@@ -136,6 +136,12 @@ spec:
type: object
kubernetesAuth:
properties:
autoCreateServiceAccountToken:
description: Optionally automatically create a service account
token for the configured service account. If this is set
to `true`, the operator will automatically create a service
account token for the configured service account.
type: boolean
identityId:
type: string
secretsScope:
@@ -163,6 +169,13 @@ spec:
- name
- namespace
type: object
serviceAccountTokenAudiences:
description: The audiences to use for the service account
token. This is only relevant if `autoCreateServiceAccountToken`
is true.
items:
type: string
type: array
required:
- identityId
- secretsScope