mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-07 19:28:09 +00:00
59 lines
1.8 KiB
YAML
59 lines
1.8 KiB
YAML
apiVersion: secrets.infisical.com/v1alpha1
|
|
kind: InfisicalSecret
|
|
metadata:
|
|
name: infisicalsecret-sample
|
|
labels:
|
|
label-to-be-passed-to-managed-secret: sample-value
|
|
annotations:
|
|
reflector.v1.k8s.emberstack.com/reflection-allowed: 'true'
|
|
spec:
|
|
hostAPI: http://localhost:8888/api
|
|
resyncInterval: 10
|
|
authentication:
|
|
serviceAccount:
|
|
serviceAccountSecretReference:
|
|
secretName: service-account
|
|
secretNamespace: default
|
|
projectId: "6439ec224cfbf7ea2a95b651"
|
|
environmentName: "dev"
|
|
serviceToken:
|
|
serviceTokenSecretReference:
|
|
secretName: service-token
|
|
secretNamespace: default
|
|
secretsScope:
|
|
envSlug: dev
|
|
secretsPath: "/"
|
|
managedSecretReference:
|
|
secretName: managed-secret
|
|
secretNamespace: default
|
|
creationPolicy: "Orphan" ## Owner | Orphan
|
|
# secretType: kubernetes.io/dockerconfigjson
|
|
|
|
serviceToken:
|
|
serviceTokenSecretReference:
|
|
secretName: service-token
|
|
secretNamespace: default
|
|
secretsScope:
|
|
envSlug: <env-slug>
|
|
secretsPath: <secrets-path> # Root is "/"
|
|
|
|
universalAuthMachineIdentity:
|
|
secretsScope:
|
|
projectSlug: <project-slug>
|
|
envSlug: <env-slug> # "dev", "staging", "prod", etc..
|
|
secretsPath: "<secrets-path>" # Root is "/"
|
|
|
|
credentials:
|
|
secretName: universal-auth-credentials
|
|
secretNamespace: default
|
|
|
|
managedSecretReference:
|
|
secretName: managed-secret
|
|
secretNamespace: default
|
|
# secretType: kubernetes.io/dockerconfigjson
|
|
|
|
# # To be depreciated soon
|
|
# tokenSecretReference:
|
|
# secretName: service-token
|
|
# secretNamespace: default
|