wip: sse working

k8-operator/config/samples/crd/infisicalsecret/infisicalSecretCrd.yaml

@@ -7,8 +7,10 @@ metadata:
   annotations:
     example.com/annotation-to-be-passed-to-managed-secret: "sample-value"
 spec:
-  hostAPI: https://app.infisical.com/api
+  # hostAPI: https://app.infisical.com/api
+  hostAPI: http://localhost:8085/api
   resyncInterval: 10
+  instantUpdates: true
   # tls:
   #   caRef:
   #     secretName: custom-ca-certificate
@@ -19,19 +21,19 @@ spec:
     # If you have multiple authentication methods defined, it may cause issues.
 
     # (Deprecated) Service Token Auth
-    serviceToken:
-      serviceTokenSecretReference:
-        secretName: service-token
-        secretNamespace: default
-      secretsScope:
-        envSlug: <env-slug>
-        secretsPath: <secrets-path>
-        recursive: true
+    # serviceToken:
+    #   serviceTokenSecretReference:
+    #     secretName: service-token
+    #     secretNamespace: default
+    #   secretsScope:
+    #     envSlug: <env-slug>
+    #     secretsPath: <secrets-path>
+    #     recursive: true
 
     # Universal Auth
     universalAuth:
       secretsScope:
-        projectSlug: new-ob-em
+        projectSlug: test-j7-kx
         envSlug: dev # "dev", "staging", "prod", etc..
         secretsPath: "/" # Root is "/"
         recursive: true # Wether or not to use recursive mode (Fetches all secrets in an environment from a given secret path, and all folders inside the path) / defaults to false
@@ -39,67 +41,6 @@ spec:
         secretName: universal-auth-credentials
         secretNamespace: default
 
-    # Native Kubernetes Auth
-    kubernetesAuth:
-      serviceAccountRef:
-        name: <secret-name>
-        namespace: <secret-namespace>
-      identityId: <machine-identity-id>
-      serviceAccountTokenPath: "/path/to/your/service-account/token" # Optional, defaults to /var/run/secrets/kubernetes.io/serviceaccount/token
-
-      # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
-      secretsScope:
-        projectSlug: your-project-slug
-        envSlug: prod
-        secretsPath: "/path"
-        recursive: true
-
-    # AWS IAM Auth
-    awsIamAuth:
-      identityId: <your-machine-identity-id>
-
-      # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
-      secretsScope:
-        projectSlug: your-project-slug
-        envSlug: prod
-        secretsPath: "/path"
-        recursive: true
-
-    # Azure Auth
-    azureAuth:
-      identityId: <your-machine-identity-id>
-      resource: https://management.azure.com/&client_id=your_client_id # This field is optional, and will default to "https://management.azure.com/" if nothing is provided.
-
-      # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
-      secretsScope:
-        projectSlug: your-project-slug
-        envSlug: prod
-        secretsPath: "/path"
-        recursive: true
-
-    # GCP ID Token Auth
-    gcpIdTokenAuth:
-      identityId: <your-machine-identity-id>
-
-      # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
-      secretsScope:
-        projectSlug: your-project-slug
-        envSlug: prod
-        secretsPath: "/path"
-        recursive: true
-
-    # GCP IAM Auth
-    gcpIamAuth:
-      identityId: <your-machine-identity-id>
-      serviceAccountKeyFilePath: "/path/to-service-account-key-file-path.json"
-
-      # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
-      secretsScope:
-        projectSlug: your-project-slug
-        envSlug: prod
-        secretsPath: "/path"
-        recursive: true
-
   managedKubeSecretReferences:
     - secretName: managed-secret
       secretNamespace: default

k8-operator/config/samples/infisical-config.yaml

@@ -9,4 +9,4 @@ metadata:
   name: infisical-config
   namespace: infisical-operator-system
 data:
-  hostAPI: "https://example.com/api"
+  hostAPI: "http://localhost:8085/api"

k8-operator/config/samples/k8s-auth/sample.yaml

@@ -7,19 +7,19 @@ metadata:
     annotations:
         example.com/annotation-to-be-passed-to-managed-secret: "sample-value"
 spec:
-    hostAPI: https://app.infisical.com/api
+    hostAPI: http://localhost:8085/api
     resyncInterval: 10
     authentication:
         # Native Kubernetes Auth
         kubernetesAuth:
-            identityId: <>
+            identityId: 25d05878-0a2f-47c5-b889-46b70fb2dbfc
             serviceAccountRef:
               name: infisical-auth
               namespace: default
 
             # secretsScope is identical to the secrets scope in the universalAuth field in this sample.
             secretsScope:
-                projectSlug: dsf-gpb-t
+                projectSlug: test-j7-kx
                 envSlug: dev
                 secretsPath: "/"
                 recursive: true

k8-operator/config/samples/machineIdentitySecret.yaml

@@ -4,5 +4,5 @@ metadata:
     name: universal-auth-credentials
 type: Opaque
 stringData:
-    clientId: <machine-identity-client-id>
-    clientSecret: <machine-identity-client-secret>
+    clientId: 86c17800-00b9-4556-89a8-ea11ac6f8371
+    clientSecret: 6792edff19e0b7a43647501958c9a0d1a7964b2db1ff2401fbdd555cfd1ae757

k8-operator/config/samples/serviceTokenSecret.yaml

@@ -1,7 +1,7 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: service-token
-type: Opaque
-data:
-  infisicalToken: <base64 infisical token here>
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   name: service-token
+# type: Opaque
+# data:
+#   infisicalToken: <base64 infisical token here>