2023-11-21 21:00:21 +00:00
|
|
|
apiVersion: external-secrets.io/v1alpha1
|
|
|
|
|
kind: PushSecret
|
|
|
|
|
metadata:
|
|
|
|
|
name: pushsecret-example # Customisable
|
|
|
|
|
namespace: default # Same of the SecretStores
|
|
|
|
|
spec:
|
|
|
|
|
deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
|
2024-11-18 06:50:16 +00:00
|
|
|
refreshInterval: 1h # Refresh interval for which push secret will reconcile
|
2023-11-21 21:00:21 +00:00
|
|
|
secretStoreRefs: # A list of secret stores to push secrets to
|
|
|
|
|
- name: aws-parameterstore
|
|
|
|
|
kind: SecretStore
|
|
|
|
|
selector:
|
|
|
|
|
secret:
|
|
|
|
|
name: pokedex-credentials # Source Kubernetes secret to be pushed
|
|
|
|
|
data:
|
|
|
|
|
- match:
|
|
|
|
|
secretKey: best-pokemon # Source Kubernetes secret key to be pushed
|
|
|
|
|
remoteRef:
|
|
|
|
|
remoteKey: my-first-parameter # Remote reference (where the secret is going to be pushed)
|
|
|
|
|
property: single-value-secret # the property to use to push into
|
