You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/eso-bitwarden-secret.adoc
+8-6Lines changed: 8 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,8 @@
6
6
[id="eso-bitwarden-secret_{context}"]
7
7
= bitwardenSecretManagerProvider
8
8
9
-
The `bitwardenSecretManagerProvider` field enables the bitwarden secrets manager provider and sets up the additional service required to connect to the bitwarden server.
9
+
[role="_abstract"]
10
+
The `bitwardenSecretManagerProvider` field enables the Bitwarden secrets manager provider and sets up the additional service required to connect to the Bitwarden server.
10
11
11
12
[cols="1,1,1,1,1",options="header"]
12
13
|===
@@ -16,16 +17,17 @@ The `bitwardenSecretManagerProvider` field enables the bitwarden secrets manager
16
17
| Default
17
18
| Validation
18
19
19
-
| `enabled`
20
+
| `mode`
20
21
| _string_
21
-
| `enabled` field enables the `bitwardenSecretManagerProvider`. you can set this field to `true` or `false`.
22
-
| false
23
-
| enum: [true false] +
22
+
| `mode` field enables the `bitwardenSecretManagerProvider` provider state, which can be set to `Enabled` or `Disabled`. If set to `Enabled`, the Operator ensures the plugin is deployed and synchronized. If set to `Disabled`, the Bitwarden provider plugin reconciliation is disabled. The plugin and resources remain in their current state, and are not managed by the Operator.
23
+
| `Disabled`
24
+
a| enum: [Enabled Disabled]
25
+
24
26
Optional
25
27
26
28
| `secretRef`
27
29
| _SecretReference_
28
-
| `SecretRef` specifies the kubernetes secret that contains the TLS key pair for the bitwarden server. If this reference is not provided and `certManagerConfig` field is configured, the issuer defined in `certManagerConfig` generates the required certificate. The secret must use `tls.crt` for certificate, `tls.key` for the private key, and `ca.crt` for CA certificate.
30
+
| `SecretRef` specifies the Kubernetes secret that contains the TLS key pair for the Bitwarden server. If this reference is not provided and the`certManagerConfig` field is configured, the issuer defined in `certManagerConfig` generates the required certificate. The secret must use `tls.crt` for certificate, `tls.key` for the private key, and `ca.crt` for CA certificate.
Copy file name to clipboardExpand all lines: modules/eso-cert-manager-config.adoc
+8-6Lines changed: 8 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,18 +16,20 @@ The `certManagerConfig` field configures the `cert-manager` Operator settings.
16
16
| Default
17
17
| Validation
18
18
19
-
| `enabled`
19
+
| `mode`
20
20
| _string_
21
-
| `enabled` specifies whether cert-manager must obtain and renew certificates for the webhook server instead of using built-in certificates. Set this field to `true` or `false`.
21
+
| `mode` specifies whether to use cert-manager for certificate management instead of the built-in `cert-controller` which can be indicated by setting either `Enabled` or `Disabled`. If set to `Enabled`, uses `cert-manager` for obtaining the certificates for the webhook server and other components. If set to `Disabled`, uses the `cert-controller` for obtaining the certificates for the webhook server. `Disabled` is the default behavior.
22
22
| false
23
-
| enum: [true false] +
23
+
a| enum: [true false]
24
+
24
25
Required
25
26
26
-
| `addInjectorAnnotations`
27
+
| `injectAnnotations`
27
28
| _string_
28
-
| `addInjectorAnnotations` adds the `cert-manager.io/inject-ca-from` annotation to the webhooks and custom resource definitions (CRDs) to automatically configure the webhook with the `cert-manager` Operator certificate authority (CA). This requires CA Injector to be enabled in `cert-manager` Operator. Set this field to `true` or `false`.
29
+
| `injectAnnotations` adds the `cert-manager.io/inject-ca-from` annotation to the webhooks and custom resource definitions (CRDs) to automatically configure the webhook with the `cert-manager` Operator certificate authority (CA). This requires CA Injector to be enabled in `cert-manager` Operator. Set this field to `true` or `false`. When set, this field cannot be changed.
Copy file name to clipboardExpand all lines: modules/eso-external-secrets-config.adoc
+26-17Lines changed: 26 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,9 +4,10 @@
4
4
5
5
:_mod-docs-content-type: REFERENCE
6
6
[id="eso-external-secrets-config_{context}"]
7
-
= externalSecretsConfig
7
+
= applicationConfig
8
8
9
-
The `externalSecretsConfig` field configures the behavior of `external-secrets` operand.
9
+
[role="_abstract"]
10
+
The `applicationConfig` specifies the configurations for the `external-secrets` operand.
10
11
11
12
[cols="1,1,1,1,1",options="header"]
12
13
|===
@@ -20,34 +21,28 @@ The `externalSecretsConfig` field configures the behavior of `external-secrets`
20
21
| _integer_
21
22
| `logLevel` supports a range of values as defined in the link:https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md#what-method-to-use[kubernetes logging guidelines].
22
23
| 1
23
-
| The maximum range value is 5 +
24
-
The minimum range value is 1 +
24
+
a| The maximum range value is 5
25
+
26
+
The minimum range value is 1
27
+
25
28
Optional
26
29
27
30
| `operatingNamespace`
28
31
| _string_
29
32
| `operatingNamespace` restricts the `external-secrets` operand operations to the provided namespace. Enabling this field disables `ClusterSecretStore` and `ClusterExternalSecret`.
30
33
|
31
-
| Optional
34
+
a| The maximum length is 63
32
35
33
-
| `bitwardenSecretManagerProvider`
34
-
| _object_
35
-
| `bitwardenSecretManagerProvider` enables the bitwarden secrets manager provider and sets up the additional service required for connecting to the bitwarden server.
36
-
|
37
-
| Optional
36
+
The minimum length is 1
37
+
38
+
Optional
38
39
39
40
| `webhookConfig`
40
41
| _object_
41
42
| `webhookConfig` configures webhook specifics of the `external-secrets` operand.
42
43
|
43
44
|
44
45
45
-
| `certManagerConfig`
46
-
| _object_
47
-
| `certManagerConfig` configures `cert-manager` Operator settings that are used to generate certificates for the webhook and `bitwarden-sdk-server` components.
| `resources` defines the resource requirements. You cannot change the value of this field after setting it initially. For more information, see link:https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/[]
| `tolerations` sets the pod tolerations. For more information, see link:https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/[]
66
61
|
67
-
| Optional
62
+
a| The maximum number of items is 50
63
+
64
+
The minimum number of items is 0
65
+
66
+
Optional
68
67
69
68
| `nodeSelector`
70
69
| _object (keys:string, values:string)_
71
70
| `nodeSelector` defines the scheduling criteria by using node labels. For more information, see link:https://kubernetes.io/docs/concepts/configuration/assign-pod-node/[]
72
71
|
72
+
a| The maximum number of properties is 50
73
+
74
+
The minimum number of properties is 0
75
+
76
+
Optional
77
+
78
+
| `proxy`
79
+
| _object (keys:string, values:string)_
80
+
| `proxy` sets the proxy configurations available in operand containers managed by the Operator as environment variables.
0 commit comments