mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-14 11:57:59 +00:00
22 lines
818 B
YAML
22 lines
818 B
YAML
|
apiVersion: external-secrets.io/v1alpha1
|
||
|
|
kind: PushSecret
|
||
|
|
metadata:
|
||
|
|
name: pushsecret-example # Customisable
|
||
|
|
namespace: default # Same of the SecretStores
|
||
|
|
spec:
|
||
|
|
deletionPolicy: Delete # the provider' secret will be deleted if the PushSecret is deleted
|
||
|
|
refreshInterval: 10s # Refresh interval for which push secret will reconcile
|
||
|
|
secretStoreRefs: # A list of secret stores to push secrets to
|
||
|
|
- name: aws-parameterstore
|
||
|
|
kind: SecretStore
|
||
|
|
selector:
|
||
|
|
secret:
|
||
|
|
name: pokedex-credentials # Source Kubernetes secret to be pushed
|
||
|
|
data:
|
||
|
|
- match:
|
||
|
|
remoteRef:
|
||
|
|
remoteKey: my-first-parameter # Remote reference (where the secret is going to be pushed)
|
||
|
|
metadata:
|
||
|
|
parameterStoreType: "SecureString"
|
||
|
|
parameterStoreKeyID: "bb123123-b2b0-4f60-ac3a-44a13f0e6b6c"
|