2023-10-11 19:20:50 +00:00
|
|
|
![PushSecret](../pictures/diagrams-pushsecret-basic.png)
|
|
|
|
|
|
|
|
The `PushSecret` is namespaced and it describes what data should be pushed to the secret provider.
|
|
|
|
|
|
|
|
* tells the operator what secrets should be pushed by using `spec.selector`.
|
2023-12-22 20:45:34 +00:00
|
|
|
* you can specify what secret keys should be pushed by using `spec.data`.
|
|
|
|
* you can also template the resulting property values using [templating](#templating).
|
2022-11-29 19:04:46 +00:00
|
|
|
|
|
|
|
``` yaml
|
|
|
|
{% include 'full-pushsecret.yaml' %}
|
|
|
|
```
|
2023-12-22 20:45:34 +00:00
|
|
|
|
|
|
|
## Templating
|
|
|
|
|
|
|
|
When the controller reconciles the `PushSecret` it will use the `spec.template` as a blueprint to construct a new property.
|
|
|
|
You can use golang templates to define the blueprint and use template functions to transform the defined properties.
|
|
|
|
You can also pull in `ConfigMaps` that contain golang-template data using `templateFrom`.
|
|
|
|
See [advanced templating](../guides/templating.md) for details.
|