Skip to content

Commit a72a81a

Browse files
authored
Merge pull request #100012 from wgabor0427/OSDOCS-15939
OSDOCS-15939 updated api modules
2 parents 8c6c5bd + 66afda7 commit a72a81a

23 files changed

+327
-96
lines changed

modules/eso-bitwarden-secret.adoc

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,8 @@
66
[id="eso-bitwarden-secret_{context}"]
77
= bitwardenSecretManagerProvider
88

9-
The `bitwardenSecretManagerProvider` field enables the bitwarden secrets manager provider and sets up the additional service required to connect to the bitwarden server.
9+
[role="_abstract"]
10+
The `bitwardenSecretManagerProvider` field enables the Bitwarden secrets manager provider and sets up the additional service required to connect to the Bitwarden server.
1011

1112
[cols="1,1,1,1,1",options="header"]
1213
|===
@@ -16,16 +17,17 @@ The `bitwardenSecretManagerProvider` field enables the bitwarden secrets manager
1617
| Default
1718
| Validation
1819

19-
| `enabled`
20+
| `mode`
2021
| _string_
21-
| `enabled` field enables the `bitwardenSecretManagerProvider`. you can set this field to `true` or `false`.
22-
| false
23-
| enum: [true false] +
22+
| `mode` field enables the `bitwardenSecretManagerProvider` provider state, which can be set to `Enabled` or `Disabled`. If set to `Enabled`, the Operator ensures the plugin is deployed and synchronized. If set to `Disabled`, the Bitwarden provider plugin reconciliation is disabled. The plugin and resources remain in their current state, and are not managed by the Operator.
23+
| `Disabled`
24+
a| enum: [Enabled Disabled]
25+
2426
Optional
2527

2628
| `secretRef`
2729
| _SecretReference_
28-
| `SecretRef` specifies the kubernetes secret that contains the TLS key pair for the bitwarden server. If this reference is not provided and `certManagerConfig` field is configured, the issuer defined in `certManagerConfig` generates the required certificate. The secret must use `tls.crt` for certificate, `tls.key` for the private key, and `ca.crt` for CA certificate.
30+
| `SecretRef` specifies the Kubernetes secret that contains the TLS key pair for the Bitwarden server. If this reference is not provided and the `certManagerConfig` field is configured, the issuer defined in `certManagerConfig` generates the required certificate. The secret must use `tls.crt` for certificate, `tls.key` for the private key, and `ca.crt` for CA certificate.
2931
|
3032
| Optional
3133
|===

modules/eso-cert-manager-config.adoc

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,20 @@ The `certManagerConfig` field configures the `cert-manager` Operator settings.
1616
| Default
1717
| Validation
1818

19-
| `enabled`
19+
| `mode`
2020
| _string_
21-
| `enabled` specifies whether cert-manager must obtain and renew certificates for the webhook server instead of using built-in certificates. Set this field to `true` or `false`.
21+
| `mode` specifies whether to use cert-manager for certificate management instead of the built-in `cert-controller` which can be indicated by setting either `Enabled` or `Disabled`. If set to `Enabled`, uses `cert-manager` for obtaining the certificates for the webhook server and other components. If set to `Disabled`, uses the `cert-controller` for obtaining the certificates for the webhook server. `Disabled` is the default behavior.
2222
| false
23-
| enum: [true false] +
23+
a| enum: [true false]
24+
2425
Required
2526

26-
| `addInjectorAnnotations`
27+
| `injectAnnotations`
2728
| _string_
28-
| `addInjectorAnnotations` adds the `cert-manager.io/inject-ca-from` annotation to the webhooks and custom resource definitions (CRDs) to automatically configure the webhook with the `cert-manager` Operator certificate authority (CA). This requires CA Injector to be enabled in `cert-manager` Operator. Set this field to `true` or `false`.
29+
| `injectAnnotations` adds the `cert-manager.io/inject-ca-from` annotation to the webhooks and custom resource definitions (CRDs) to automatically configure the webhook with the `cert-manager` Operator certificate authority (CA). This requires CA Injector to be enabled in `cert-manager` Operator. Set this field to `true` or `false`. When set, this field cannot be changed.
2930
| false
30-
| enum: [true false] +
31+
a| enum: [true false]
32+
3133
Optional
3234

3335
| `issuerRef`
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * security/external_secrets_operator/external-secrets-operator-api.adoc
4+
5+
:_mod-docs-content-type: REFERENCE
6+
[id="eso-cert-providers-config_{context}"]
7+
= certProvidersConfig
8+
9+
The `certProvidersConfig` defines the configuration for the certificate providers used to manage TLS certificates for webhook and plugins.
10+
11+
[cols="1,1,1,1,1",options="header"]
12+
|===
13+
| Field
14+
| Type
15+
| Description
16+
| Default
17+
| Validation
18+
19+
| `certManager`
20+
| _object_
21+
| `certManager` defines the configuration for `cert-manager` provider specifics.
22+
|
23+
| Optional
24+
|===

modules/eso-condition.adoc

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * security/external_secrets_operator/external-secrets-operator-api.adoc
4+
5+
:_mod-docs-content-type: REFERENCE
6+
[id="eso-condition_{context}"]
7+
= condition
8+
9+
The `condition` field holds information about the condition of the `external-secrets` deployment.
10+
11+
[cols="1,1,1,1,1",options="header"]
12+
|===
13+
| Field
14+
| Type
15+
| Description
16+
| Default
17+
| Validation
18+
19+
| `type`
20+
| _string_
21+
| `type` contains the condition of the deployment.
22+
|
23+
| Required
24+
25+
| `status`
26+
| link:https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#conditionstatus-v1-meta[_ConditionStatus_]
27+
| `status` contains the status of the condition of the deployment
28+
|
29+
|
30+
31+
| `message`
32+
| _string_
33+
| `message` provides details on the state of the deployment
34+
|
35+
|
36+
|===
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * security/external_secrets_operator/external-secrets-operator-api.adoc
4+
5+
:_mod-docs-content-type: REFERENCE
6+
[id="eso-conditional-status_{context}"]
7+
= conditionalStatus
8+
9+
The `conditionalStatus` field holds information about the current state of the `external-secrets` deployment.
10+
11+
[cols="1,1,1,1,1",options="header"]
12+
|===
13+
| Field
14+
| Type
15+
| Description
16+
| Default
17+
| Validation
18+
19+
| `conditions`
20+
| _array_
21+
| `conditions` contains information on the current state of the deployment.
22+
|
23+
|
24+
|===

modules/eso-controller-config.adoc

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
[id="eso-controller-config_{context}"]
77
= controllerConfig
88

9-
The `controllerConfig` field configures the operator to set the default values for installing `external-secrets` operand.
9+
The `controllerConfig` specifies the configurations used by the controller when installing the `external-secrets` operand and the plugins.
1010

1111
[cols="1,1,1,1,1",options="header"]
1212
|===
@@ -16,15 +16,20 @@ The `controllerConfig` field configures the operator to set the default values f
1616
| Default
1717
| Validation
1818

19-
| `namespace`
19+
| `certProvider`
2020
| _string_
21-
| `namespace` configures the namespace for installing the `external-secrets` operand.
22-
| external-secrets
21+
| `certProvider` defines the configuration for the certificate providers used to manage TLS certificates for webhook and plugins.
22+
|
2323
| Optional
2424

2525
| `labels`
2626
| _object (keys:string, values:string)_
2727
| `labels` field applies labels to all resources created for the `external-secrets` operand deployment.
2828
|
29-
| Optional
29+
a| The maximum number of properties is 20.
30+
31+
The minimum number of properties is 0.
32+
33+
Optional
34+
3035
|===

modules/eso-controller-status.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@ The `controllerStatus` field contains the observed conditions of the controllers
3232
| _integer_
3333
| `observedGeneration` represents the `.metadata.generation` on the observed resource.
3434
|
35-
| Minimum: 0
35+
| The minimum number of observed resources is 0.
3636
|===

modules/eso-external-secrets-config.adoc

Lines changed: 26 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,10 @@
44

55
:_mod-docs-content-type: REFERENCE
66
[id="eso-external-secrets-config_{context}"]
7-
= externalSecretsConfig
7+
= applicationConfig
88

9-
The `externalSecretsConfig` field configures the behavior of `external-secrets` operand.
9+
[role="_abstract"]
10+
The `applicationConfig` specifies the configurations for the `external-secrets` operand.
1011

1112
[cols="1,1,1,1,1",options="header"]
1213
|===
@@ -20,34 +21,28 @@ The `externalSecretsConfig` field configures the behavior of `external-secrets`
2021
| _integer_
2122
| `logLevel` supports a range of values as defined in the link:https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md#what-method-to-use[kubernetes logging guidelines].
2223
| 1
23-
| The maximum range value is 5 +
24-
The minimum range value is 1 +
24+
a| The maximum range value is 5
25+
26+
The minimum range value is 1
27+
2528
Optional
2629

2730
| `operatingNamespace`
2831
| _string_
2932
| `operatingNamespace` restricts the `external-secrets` operand operations to the provided namespace. Enabling this field disables `ClusterSecretStore` and `ClusterExternalSecret`.
3033
|
31-
| Optional
34+
a| The maximum length is 63
3235

33-
| `bitwardenSecretManagerProvider`
34-
| _object_
35-
| `bitwardenSecretManagerProvider` enables the bitwarden secrets manager provider and sets up the additional service required for connecting to the bitwarden server.
36-
|
37-
| Optional
36+
The minimum length is 1
37+
38+
Optional
3839

3940
| `webhookConfig`
4041
| _object_
4142
| `webhookConfig` configures webhook specifics of the `external-secrets` operand.
4243
|
4344
|
4445

45-
| `certManagerConfig`
46-
| _object_
47-
| `certManagerConfig` configures `cert-manager` Operator settings that are used to generate certificates for the webhook and `bitwarden-sdk-server` components.
48-
|
49-
|Optional
50-
5146
| `resources`
5247
| link:https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#resourcerequirements-v1-core[_ResourceRequirements_]
5348
| `resources` defines the resource requirements. You cannot change the value of this field after setting it initially. For more information, see link:https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/[]
@@ -64,11 +59,25 @@ Optional
6459
| link:https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#toleration-v1-core[_Toleration_] _array_
6560
| `tolerations` sets the pod tolerations. For more information, see link:https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/[]
6661
|
67-
| Optional
62+
a| The maximum number of items is 50
63+
64+
The minimum number of items is 0
65+
66+
Optional
6867

6968
| `nodeSelector`
7069
| _object (keys:string, values:string)_
7170
| `nodeSelector` defines the scheduling criteria by using node labels. For more information, see link:https://kubernetes.io/docs/concepts/configuration/assign-pod-node/[]
7271
|
72+
a| The maximum number of properties is 50
73+
74+
The minimum number of properties is 0
75+
76+
Optional
77+
78+
| `proxy`
79+
| _object (keys:string, values:string)_
80+
| `proxy` sets the proxy configurations available in operand containers managed by the Operator as environment variables.
81+
|
7382
| Optional
7483
|===

modules/eso-external-secrets-list.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,9 @@
44

55
:_mod-docs-content-type: REFERENCE
66
[id="eso-external-secrets-list_{context}"]
7-
= externalSecretsList
7+
= externalSecretsConfigList
88

9-
The `externalSecretsList` object fetches the list of `externalSecrets` objects.
9+
The `externalSecretsConfigList` object fetches the list of `externalSecretsConfig` objects.
1010

1111
[cols="1,1,1,1,1",options="header"]
1212
|===

modules/eso-external-secrets-manager-list.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ The `externalSecretsManagerList` object fetches the list of `externalSecretsMana
3737

3838
| `items`
3939
| _array_
40-
| `Items` contains a list of `externalSecretsManager` objects.
40+
|
4141
|
4242
|
4343
|===

0 commit comments

Comments
 (0)