diff --git a/PUSH_TO_FILE.md b/PUSH_TO_FILE.md index 1a42cd69..f33cd38f 100644 --- a/PUSH_TO_FILE.md +++ b/PUSH_TO_FILE.md @@ -8,6 +8,7 @@ - [Certification Level](#certification-level) - [Set up Secrets Provider for Push to File](#set-up-secrets-provider-for-push-to-file) - [Reference Table of Configuration Annotations](#reference-table-of-configuration-annotations) +- [Example Common Policy Path](#example-common-policy-path) - [Example Secret File Formats](#example-secret-file-formats) - [Custom Templates for Secret Files](#custom-templates-for-secret-files) - [Secret File Attributes](#secret-file-attributes) @@ -238,9 +239,10 @@ Push to File operation. conjur.org/authn-identity: host/conjur/authn-k8s/dev-cluster/test-app conjur.org/container-mode: init conjur.org/secret-destination: file + conjur.org/conjur-secrets-policy-path.first: secrets/ conjur.org/conjur-secrets.test-app: | - - admin-username: secrets/username - - admin-password: secrets/password + - admin-username: username + - admin-password: password conjur.org/secret-file-path.test-app: "./credentials.yaml" conjur.org/secret-file-format.test-app: "yaml" spec: @@ -303,6 +305,7 @@ for a description of each environment variable setting: | `conjur.org/retry-interval-sec` | `RETRY_INTERVAL_SEC` | Defaults to 1 (sec) | | `conjur.org/debug-logging` | `DEBUG` | Defaults to `false` | | `conjur.org/conjur-secrets.{secret-group}` | Note\* | List of secrets to be retrieved from Conjur. Each entry can be either: