feat: migrated the operator code to v4

k8-operator/config/samples/crd/infisicaldynamicsecret/dynamicSecret.yaml

@@ -3,13 +3,13 @@ kind: InfisicalDynamicSecret
 metadata:
   name: infisicaldynamicsecret-demo
 spec:
-  hostAPI: https://app.infisical.com/api
+  hostAPI: http://localhost:8080/api
 
   dynamicSecret:
-    secretName: <dynamic-secret-name>
-    projectId: <project-id>
-    secretsPath: <secret-path>
-    environmentSlug: <env-slug>
+    secretName: dynamic-secret
+    projectId: 5cdc4fec-f541-413c-b0bc-4c15572e421e
+    secretsPath: /
+    environmentSlug: dev
 
   leaseRevocationPolicy: Revoke # Revoke or None. Revoke will revoke leases created by the operator if the CRD is deleted.
   leaseTTL: 1m # TTL for the leases created. Must be below 24 hours.

k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml

@@ -7,7 +7,7 @@ metadata:
   annotations:
     example.com/annotation-to-be-passed-to-managed-secret: "sample-value"
 spec:
-  hostAPI: https://app.infisical.com/api
+  hostAPI: http://localhost:8080/api
   resyncInterval: 10
   # tls:
   #   caRef:
@@ -15,23 +15,10 @@ spec:
   #     secretNamespace: default
   #     key: ca.crt
   authentication:
-    # Make sure to only have 1 authentication method defined, serviceToken/universalAuth.
-    # If you have multiple authentication methods defined, it may cause issues.
-
-    # (Deprecated) Service Token Auth
-    serviceToken:
-      serviceTokenSecretReference:
-        secretName: service-token
-        secretNamespace: default
-      secretsScope:
-        envSlug: <env-slug>
-        secretsPath: <secrets-path>
-        recursive: true
-
     # Universal Auth
     universalAuth:
       secretsScope:
-        projectSlug: new-ob-em
+        projectSlug: hello-9zkr
         envSlug: dev # "dev", "staging", "prod", etc..
         secretsPath: "/" # Root is "/"
         recursive: true # Wether or not to use recursive mode (Fetches all secrets in an environment from a given secret path, and all folders inside the path) / defaults to false
@@ -117,9 +104,3 @@ spec:
     - secretName: managed-secret
       secretNamespace: default
       creationPolicy: "Orphan" ## Owner | Orphan
-      # secretType: kubernetes.io/dockerconfigjson
-
-  # # To be depreciated soon
-  # tokenSecretReference:
-  #   secretName: service-token
-  #   secretNamespace: default

k8-operator/config/samples/crd/pushsecret/push-secret.yaml

@@ -4,7 +4,7 @@ metadata:
   name: infisical-api-secret-sample-push
 spec:
   resyncInterval: 1m
-  hostAPI: https://app.infisical.com/api
+  hostAPI: http://localhost:8080/api
 
   # Optional, defaults to replacement.
   updatePolicy: Replace # If set to replace, existing secrets inside Infisical will be replaced by the value of the PushSecret on sync.
@@ -13,9 +13,9 @@ spec:
   deletionPolicy: Delete # If set to delete, the secret(s) inside Infisical managed by the operator, will be deleted if the InfisicalPushSecret CRD is deleted.
 
   destination:
-    projectId: <project-id>
-    environmentSlug: <env-slug>
-    secretsPath: <secret-path>
+    projectId: 5cdc4fec-f541-413c-b0bc-4c15572e421e
+    environmentSlug: dev
+    secretsPath: /
 
   push:
     secret:
@@ -25,21 +25,7 @@ spec:
   # Only have one authentication method defined or you are likely to run into authentication issues.
   # Remove all except one authentication method.
   authentication:
-    awsIamAuth:
-      identityId: <machine-identity-id>
-    azureAuth:
-      identityId: <machine-identity-id>
-    gcpIamAuth:
-      identityId: <machine-identity-id>
-      serviceAccountKeyFilePath: </path-to-service-account-key-file.json>
-    gcpIdTokenAuth:
-      identityId: <machine-identity-id>
-    kubernetesAuth:
-      identityId: <machine-identity-id>
-      serviceAccountRef:
-        name: <secret-name>
-        namespace: <secret-namespace>
     universalAuth:
       credentialsRef:
-        secretName: <secret-name> # universal-auth-credentials
-        secretNamespace: <secret-namespace> # default
+        secretName: universal-auth-credentials # universal-auth-credentials
+        secretNamespace: default # default

k8-operator/config/samples/universalAuthIdentitySecret.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 kind: Secret
 metadata:
-    name: universal-auth-credentials
+  name: universal-auth-credentials
 type: Opaque
 stringData:
-    clientId: <machine-identity-client-id>
-    clientSecret: <machine-identity-client-secret>
+  clientId: da81e27e-1885-47d9-9ea3-ec7d4d807bb6
+  clientSecret: 2772414d440fe04d8b975f5fe25acd0fbfe71b2a4a420409eb9ac6f5ae6c1e98