update k8 operator to use service account

k8-operator/config/crd/bases/secrets.infisical.com_infisicalsecrets.yaml

@@ -35,6 +35,35 @@ spec:
           spec:
             description: InfisicalSecretSpec defines the desired state of InfisicalSecret
             properties:
+              authentication:
+                properties:
+                  serviceAccount:
+                    properties:
+                      environmentName:
+                        type: string
+                      projectId:
+                        type: string
+                      serviceAccountSecretReference:
+                        properties:
+                          secretName:
+                            description: The name of the Kubernetes Secret
+                            type: string
+                          secretNamespace:
+                            description: The name space where the Kubernetes Secret
+                              is located
+                            type: string
+                        required:
+                        - secretName
+                        - secretNamespace
+                        type: object
+                    required:
+                    - environmentName
+                    - projectId
+                    - serviceAccountSecretReference
+                    type: object
+                required:
+                - serviceAccount
+                type: object
               hostAPI:
                 description: Infisical host to pull secrets from
                 type: string
@@ -62,6 +91,8 @@ spec:
                 - secretName
                 - secretNamespace
                 type: object
+            required:
+            - managedSecretReference
             type: object
           status:
             description: InfisicalSecretStatus defines the observed state of InfisicalSecret

k8-operator/config/samples/sample.yaml

@@ -3,10 +3,17 @@ kind: InfisicalSecret
 metadata:
   name: infisicalsecret-sample
 spec:
-  hostAPI: https://app.infisical.com/api
+  hostAPI: http://localhost:7070/api
   tokenSecretReference:
     secretName: service-token
     secretNamespace: default
+  authentication:
+    serviceAccount:
+      serviceAccountSecretReference:
+        secretName: service-account
+        secretNamespace: default
+      projectId: "6439ec224cfbf7ea2a95b651"
+      environmentName: "dev"
   managedSecretReference:
     secretName: managed-secret
     secretNamespace: default

k8-operator/config/samples/serviceAccountCredsSecret.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: service-account
+type: Opaque
+stringData:
+  serviceAccountAccessKey: <>
+  serviceAccountPrivateKey: <>
+  serviceAccountPublicKey: <>