Skip to content

Commit 1e4389e

Browse files
eminaktaseminaktas
committed
feat: add sealed secrets crds
Signed-off-by: Emin Aktas <[email protected]>
1 parent 8f4dc18 commit 1e4389e

File tree

5 files changed

+452
-0
lines changed

5 files changed

+452
-0
lines changed

‎sealed-secrets/README.md

+88
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,88 @@
1+
# sealed-secrets
2+
3+
## Index
4+
5+
- v1alpha1
6+
- [BitnamiComV1alpha1SealedSecretSpec](#bitnamicomv1alpha1sealedsecretspec)
7+
- [BitnamiComV1alpha1SealedSecretSpecTemplate](#bitnamicomv1alpha1sealedsecretspectemplate)
8+
- [BitnamiComV1alpha1SealedSecretSpecTemplateMetadata](#bitnamicomv1alpha1sealedsecretspectemplatemetadata)
9+
- [BitnamiComV1alpha1SealedSecretStatus](#bitnamicomv1alpha1sealedsecretstatus)
10+
- [BitnamiComV1alpha1SealedSecretStatusConditionsItems0](#bitnamicomv1alpha1sealedsecretstatusconditionsitems0)
11+
- [SealedSecret](#sealedsecret)
12+
13+
## Schemas
14+
15+
### BitnamiComV1alpha1SealedSecretSpec
16+
17+
SealedSecretSpec is the specification of a SealedSecret.
18+
19+
#### Attributes
20+
21+
| name | type | description | default value |
22+
| --- | --- | --- | --- |
23+
|**data**|str|Data is deprecated and will be removed eventually. Use per-value EncryptedData instead.||
24+
|**encryptedData** `required`|{str:str}|encrypted data||
25+
|**template**|[BitnamiComV1alpha1SealedSecretSpecTemplate](#bitnamicomv1alpha1sealedsecretspectemplate)|template||
26+
### BitnamiComV1alpha1SealedSecretSpecTemplate
27+
28+
Template defines the structure of the Secret that will be created from this sealed secret.
29+
30+
#### Attributes
31+
32+
| name | type | description | default value |
33+
| --- | --- | --- | --- |
34+
|**data**|{str:str}|Keys that should be templated using decrypted data.||
35+
|**immutable**|bool|Immutable, if set to true, ensures that data stored in the Secret cannot<br />be updated (only object metadata can be modified).<br />If not set to true, the field can be modified at any time.<br />Defaulted to nil.||
36+
|**metadata**|[BitnamiComV1alpha1SealedSecretSpecTemplateMetadata](#bitnamicomv1alpha1sealedsecretspectemplatemetadata)|metadata||
37+
|**type**|str|||
38+
### BitnamiComV1alpha1SealedSecretSpecTemplateMetadata
39+
40+
Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata
41+
42+
#### Attributes
43+
44+
| name | type | description | default value |
45+
| --- | --- | --- | --- |
46+
|**annotations**|{str:str}|annotations||
47+
|**finalizers**|[str]|finalizers||
48+
|**labels**|{str:str}|labels||
49+
|**name**|str|name||
50+
|**namespace**|str|namespace||
51+
### BitnamiComV1alpha1SealedSecretStatus
52+
53+
SealedSecretStatus is the most recently observed status of the SealedSecret.
54+
55+
#### Attributes
56+
57+
| name | type | description | default value |
58+
| --- | --- | --- | --- |
59+
|**conditions**|[[BitnamiComV1alpha1SealedSecretStatusConditionsItems0](#bitnamicomv1alpha1sealedsecretstatusconditionsitems0)]|Represents the latest available observations of a sealed secret's current state.||
60+
|**observedGeneration**|int|ObservedGeneration reflects the generation most recently observed by the sealed-secrets controller.||
61+
### BitnamiComV1alpha1SealedSecretStatusConditionsItems0
62+
63+
SealedSecretCondition describes the state of a sealed secret at a certain point.
64+
65+
#### Attributes
66+
67+
| name | type | description | default value |
68+
| --- | --- | --- | --- |
69+
|**lastTransitionTime**|str|Last time the condition transitioned from one status to another.||
70+
|**lastUpdateTime**|str|The last time this condition was updated.||
71+
|**message**|str|A human readable message indicating details about the transition.||
72+
|**reason**|str|The reason for the condition's last transition.||
73+
|**status** `required`|str|Status of the condition for a sealed secret.<br />Valid values for "Synced": "True", "False", or "Unknown".||
74+
|**type** `required`|str|||
75+
### SealedSecret
76+
77+
SealedSecret is the K8s representation of a "sealed Secret" - a regular k8s Secret that has been sealed (encrypted) using the controller's key.
78+
79+
#### Attributes
80+
81+
| name | type | description | default value |
82+
| --- | --- | --- | --- |
83+
|**apiVersion** `required` `readOnly`|"bitnami.com/v1alpha1"|APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources|"bitnami.com/v1alpha1"|
84+
|**kind** `required` `readOnly`|"SealedSecret"|Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds|"SealedSecret"|
85+
|**metadata**|[ObjectMeta](#objectmeta)|metadata||
86+
|**spec** `required`|[BitnamiComV1alpha1SealedSecretSpec](#bitnamicomv1alpha1sealedsecretspec)|spec||
87+
|**status**|[BitnamiComV1alpha1SealedSecretStatus](#bitnamicomv1alpha1sealedsecretstatus)|status||
88+
<!-- Auto generated by kcl-doc tool, please do not edit. -->

‎sealed-secrets/crds/sealed-secrets.yaml

+176
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,176 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
creationTimestamp: null
5+
name: sealedsecrets.bitnami.com
6+
spec:
7+
group: bitnami.com
8+
names:
9+
kind: SealedSecret
10+
listKind: SealedSecretList
11+
plural: sealedsecrets
12+
singular: sealedsecret
13+
scope: Namespaced
14+
versions:
15+
- additionalPrinterColumns:
16+
- jsonPath: .status.conditions[0].message
17+
name: Status
18+
type: string
19+
- jsonPath: .status.conditions[0].status
20+
name: Synced
21+
type: string
22+
- jsonPath: .metadata.creationTimestamp
23+
name: Age
24+
type: date
25+
name: v1alpha1
26+
schema:
27+
openAPIV3Schema:
28+
description: |-
29+
SealedSecret is the K8s representation of a "sealed Secret" - a
30+
regular k8s Secret that has been sealed (encrypted) using the
31+
controller's key.
32+
properties:
33+
apiVersion:
34+
description: |-
35+
APIVersion defines the versioned schema of this representation of an object.
36+
Servers should convert recognized schemas to the latest internal value, and
37+
may reject unrecognized values.
38+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
39+
type: string
40+
kind:
41+
description: |-
42+
Kind is a string value representing the REST resource this object represents.
43+
Servers may infer this from the endpoint the client submits requests to.
44+
Cannot be updated.
45+
In CamelCase.
46+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
47+
type: string
48+
metadata:
49+
type: object
50+
spec:
51+
description: SealedSecretSpec is the specification of a SealedSecret.
52+
properties:
53+
data:
54+
description: Data is deprecated and will be removed eventually. Use
55+
per-value EncryptedData instead.
56+
format: byte
57+
type: string
58+
encryptedData:
59+
additionalProperties:
60+
type: string
61+
type: object
62+
x-kubernetes-preserve-unknown-fields: true
63+
template:
64+
description: |-
65+
Template defines the structure of the Secret that will be
66+
created from this sealed secret.
67+
properties:
68+
data:
69+
additionalProperties:
70+
type: string
71+
description: Keys that should be templated using decrypted data.
72+
nullable: true
73+
type: object
74+
immutable:
75+
description: |-
76+
Immutable, if set to true, ensures that data stored in the Secret cannot
77+
be updated (only object metadata can be modified).
78+
If not set to true, the field can be modified at any time.
79+
Defaulted to nil.
80+
type: boolean
81+
metadata:
82+
description: |-
83+
Standard object's metadata.
84+
More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata
85+
nullable: true
86+
properties:
87+
annotations:
88+
additionalProperties:
89+
type: string
90+
type: object
91+
finalizers:
92+
items:
93+
type: string
94+
type: array
95+
labels:
96+
additionalProperties:
97+
type: string
98+
type: object
99+
name:
100+
type: string
101+
namespace:
102+
type: string
103+
type: object
104+
x-kubernetes-preserve-unknown-fields: true
105+
type:
106+
description: Used to facilitate programmatic handling of secret
107+
data.
108+
type: string
109+
type: object
110+
required:
111+
- encryptedData
112+
type: object
113+
status:
114+
description: SealedSecretStatus is the most recently observed status of
115+
the SealedSecret.
116+
properties:
117+
conditions:
118+
description: Represents the latest available observations of a sealed
119+
secret's current state.
120+
items:
121+
description: SealedSecretCondition describes the state of a sealed
122+
secret at a certain point.
123+
properties:
124+
lastTransitionTime:
125+
description: Last time the condition transitioned from one status
126+
to another.
127+
format: date-time
128+
type: string
129+
lastUpdateTime:
130+
description: The last time this condition was updated.
131+
format: date-time
132+
type: string
133+
message:
134+
description: A human readable message indicating details about
135+
the transition.
136+
type: string
137+
reason:
138+
description: The reason for the condition's last transition.
139+
type: string
140+
status:
141+
description: |-
142+
Status of the condition for a sealed secret.
143+
Valid values for "Synced": "True", "False", or "Unknown".
144+
type: string
145+
type:
146+
description: |-
147+
Type of condition for a sealed secret.
148+
Valid value: "Synced"
149+
type: string
150+
required:
151+
- status
152+
- type
153+
type: object
154+
type: array
155+
observedGeneration:
156+
description: ObservedGeneration reflects the generation most recently
157+
observed by the sealed-secrets controller.
158+
format: int64
159+
type: integer
160+
type: object
161+
required:
162+
- spec
163+
type: object
164+
served: true
165+
storage: true
166+
subresources:
167+
status: {}
168+
status:
169+
acceptedNames:
170+
kind: ""
171+
plural: ""
172+
conditions: null
173+
storedVersions:
174+
- v1alpha1
175+
176+
---

‎sealed-secrets/kcl.mod

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
[package]
2+
name = "sealed-secrets"
3+
edition = "v0.10.0"
4+
version = "v0.27.2"
5+
6+
[dependencies]
7+
k8s = "1.31.2"

‎sealed-secrets/kcl.mod.lock

+5
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
[dependencies]
2+
[dependencies.k8s]
3+
name = "k8s"
4+
full_name = "k8s_1.31.2"
5+
version = "1.31.2"

0 commit comments

Comments
 (0)