mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-14 11:57:59 +00:00
docs: add links to external resources
This commit is contained in:
Docs
parent
d3ba3e9199
commit
c55de07c21
5 changed files with 335 additions and 0 deletions
24
docs/eso-blogs.md
Normal file
24
docs/eso-blogs.md
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
# ESO Blogs
|
||||
|
||||
A list of blogs written by people all over the community. Feel free to let us know if you are writing about ESO at some place! We would be happy to mention you here!
|
||||
|
||||
## [Tutorial: How to Set External-Secrets with Azure KeyVault](https://blog.container-solutions.com/tutorial-external-secrets-with-azure-keyvault)
|
||||
|
||||
Gustavo writes about how to setup ESO with Azure Key Vault and adds an guide on how to make it a bit more secure with OPA (Open Policy Agent). [How to Set External-Secrets with Azure KeyVault](https://blog.container-solutions.com/tutorial-external-secrets-with-azure-keyvault)
|
||||
|
||||
## [Tutorial: How to Set External-Secrets with GCP Secret Manager](https://blog.container-solutions.com/tutorial-how-to-set-external-secrets-with-gcp-secret-manager)
|
||||
|
||||
Gustavo writes about how to setup ESO with GCP Secret Manager. He also shows you how to make a simple multi tenant setup with a ClusterSecretStore. [How to Set External-Secrets with GCP Secret Manager](https://blog.container-solutions.com/tutorial-how-to-set-external-secrets-with-gcp-secret-manager)
|
||||
|
||||
## [Tutorial: How to Set External-Secrets with Hashicorp Vault](https://blog.container-solutions.com/tutorialexternal-secrets-with-hashicorp-vault)
|
||||
|
||||
Gustavo writes about how to setup ESO with Hashicorp Vault. He also shows you how to make this scale with multiple replicas of the operator and leader election enabled to lead balance handling synchronization work. [How to Set External-Secrets with Hashicorp Vault](https://blog.container-solutions.com/tutorialexternal-secrets-with-hashicorp-vault)
|
||||
|
||||
## [Tutorial: How to Set External-Secrets with AWS](https://blog.container-solutions.com/tutorial-how-to-set-external-secrets-with-aws)
|
||||
|
||||
Gustavo writes about how to setup ESO with AWS Secrets Manager. He also shows you how to limit access and give granular permissions with better policies and roles for your service accounts to use. [How to Set External-Secrets with AWS](https://blog.container-solutions.com/tutorial-how-to-set-external-secrets-with-aws)
|
||||
|
||||
|
||||
## [Kubernetes Hardening Tutorial Part 2: Network](https://blog.gitguardian.com/kubernetes-tutorial-part-2-network/)
|
||||
|
||||
Tiexin Guo Writes about Kubernetes hardening in this series of blogs. He mentions ESO as one of the convenient options when dealing with secrets in Kubernetes, and how to use it with AWS Secret Manager using AWS credentials. [Kubernetes Hardening Tutorial Part 2: Network](https://blog.gitguardian.com/kubernetes-tutorial-part-2-network/)
|
||||
9
docs/eso-demos.md
Normal file
9
docs/eso-demos.md
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
# ESO Demos
|
||||
|
||||
A list of demos given by people going through simple setups with ESO. Feel free to let us know if you have a demo that you want to include here!
|
||||
|
||||
## GCP SM + AWS SM + Azure Key Vault Demo
|
||||
|
||||
This was an old demo going through an old version of ESO. Most of it is still valid, but beware of CRD and breaking change differences.
|
||||
|
||||
[](https://www.youtube.com/watch?v=L6tn1YdMkF8)
|
||||
16
docs/eso-talks.md
Normal file
16
docs/eso-talks.md
Normal file
|
|
@ -0,0 +1,16 @@
|
|||
# ESO Talks
|
||||
|
||||
A list of talks given by people at conferences and events. Feel free to let us know if you are talking about ESO at some place! We would be happy to mention you here!
|
||||
|
||||
## Kubernetes Community Days UK
|
||||
|
||||
[](https://www.youtube.com/watch?v=IsoQWxw3Nk4)
|
||||
|
||||
## CNCF Community Groups Canada
|
||||
|
||||
https://community.cncf.io/events/details/cncf-cloud-native-canada-presents-end-of-year-meetup-external-secrets-operator/
|
||||
|
||||
## Container Days Hamburg
|
||||
|
||||
[](https://www.youtube.com/watch?v=_ZDkHLRYujo)
|
||||
|
||||
282
docs/spec.md
282
docs/spec.md
|
|
@ -631,6 +631,7 @@ string
|
|||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesServer">KubernetesServer</a>,
|
||||
<a href="#external-secrets.io/v1alpha1.VaultProvider">VaultProvider</a>)
|
||||
</p>
|
||||
<p>
|
||||
|
|
@ -714,6 +715,44 @@ string
|
|||
<td></td>
|
||||
</tr></tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.CertAuth">CertAuth
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesAuth">KubernetesAuth</a>)
|
||||
</p>
|
||||
<p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>clientCert</code></br>
|
||||
<em>
|
||||
github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>clientKey</code></br>
|
||||
<em>
|
||||
github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.ClusterSecretStore">ClusterSecretStore
|
||||
</h3>
|
||||
<p>
|
||||
|
|
@ -1979,6 +2018,179 @@ string
|
|||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.KubernetesAuth">KubernetesAuth
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesProvider">KubernetesProvider</a>)
|
||||
</p>
|
||||
<p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>cert</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.CertAuth">
|
||||
CertAuth
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>has both clientCert and clientKey as secretKeySelector</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>token</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.TokenAuth">
|
||||
TokenAuth
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>use static token to authenticate with</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>serviceAccount</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.ServiceAccountAuth">
|
||||
ServiceAccountAuth
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>points to a service account that should be used for authentication</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.KubernetesProvider">KubernetesProvider
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.SecretStoreProvider">SecretStoreProvider</a>)
|
||||
</p>
|
||||
<p>
|
||||
<p>Configures a store to sync secrets with a Kubernetes instance.</p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>server</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesServer">
|
||||
KubernetesServer
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<p>configures the Kubernetes server Address.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>auth</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesAuth">
|
||||
KubernetesAuth
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<p>Auth configures how secret-manager authenticates with a Kubernetes instance.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>remoteNamespace</code></br>
|
||||
<em>
|
||||
string
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>Remote namespace to fetch the secrets from</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.KubernetesServer">KubernetesServer
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesProvider">KubernetesProvider</a>)
|
||||
</p>
|
||||
<p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>url</code></br>
|
||||
<em>
|
||||
string
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>configures the Kubernetes server Address.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>caBundle</code></br>
|
||||
<em>
|
||||
[]byte
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>CABundle is a base64-encoded CA certificate</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>caProvider</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.CAProvider">
|
||||
CAProvider
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>see: <a href="https://external-secrets.io/v0.4.1/spec/#external-secrets.io/v1alpha1.CAProvider">https://external-secrets.io/v0.4.1/spec/#external-secrets.io/v1alpha1.CAProvider</a></p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.OracleAuth">OracleAuth
|
||||
</h3>
|
||||
<p>
|
||||
|
|
@ -2418,6 +2630,20 @@ WebhookProvider
|
|||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>kubernetes</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesProvider">
|
||||
KubernetesProvider
|
||||
</a>
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
<em>(Optional)</em>
|
||||
<p>Kubernetes configures this store to sync secrets using a Kubernetes cluster provider</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<code>fake</code></br>
|
||||
<em>
|
||||
<a href="#external-secrets.io/v1alpha1.FakeProvider">
|
||||
|
|
@ -2683,6 +2909,34 @@ Kubernetes meta/v1.Time
|
|||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.ServiceAccountAuth">ServiceAccountAuth
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesAuth">KubernetesAuth</a>)
|
||||
</p>
|
||||
<p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>serviceAccount</code></br>
|
||||
<em>
|
||||
github.com/external-secrets/external-secrets/apis/meta/v1.ServiceAccountSelector
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.TemplateEngineVersion">TemplateEngineVersion
|
||||
(<code>string</code> alias)</p></h3>
|
||||
<p>
|
||||
|
|
@ -2814,6 +3068,34 @@ string
|
|||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.TokenAuth">TokenAuth
|
||||
</h3>
|
||||
<p>
|
||||
(<em>Appears on:</em>
|
||||
<a href="#external-secrets.io/v1alpha1.KubernetesAuth">KubernetesAuth</a>)
|
||||
</p>
|
||||
<p>
|
||||
</p>
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Field</th>
|
||||
<th>Description</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>
|
||||
<code>bearerToken</code></br>
|
||||
<em>
|
||||
github.com/external-secrets/external-secrets/apis/meta/v1.SecretKeySelector
|
||||
</em>
|
||||
</td>
|
||||
<td>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<h3 id="external-secrets.io/v1alpha1.VaultAppRole">VaultAppRole
|
||||
</h3>
|
||||
<p>
|
||||
|
|
|
|||
|
|
@ -67,6 +67,10 @@ nav:
|
|||
- FluxCD: examples-gitops-using-fluxcd.md
|
||||
- Anchore Engine: examples-anchore-engine-credentials.md
|
||||
- Jenkins: examples-jenkins-kubernetes-credentials.md
|
||||
- External Resources:
|
||||
- Talks: eso-talks.md
|
||||
- Demos: eso-demos.md
|
||||
- Blogs: eso-blogs.md
|
||||
- References:
|
||||
- API specification: spec.md
|
||||
- Contributing:
|
||||
|
|
|
|||
Loading…
Reference in a new issue