pushsecret_v1alpha1.json

{
  "properties": {
    "apiVersion": {
      "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
      "type": "string"
    },
    "kind": {
      "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
      "type": "string"
    },
    "metadata": {
      "type": "object"
    },
    "spec": {
      "description": "PushSecretSpec configures the behavior of the PushSecret.",
      "properties": {
        "data": {
          "description": "Secret Data that should be pushed to providers",
          "items": {
            "properties": {
              "conversionStrategy": {
                "default": "None",
                "description": "Used to define a conversion Strategy for the secret keys",
                "enum": [
                  "None",
                  "ReverseUnicode"
                ],
                "type": "string"
              },
              "match": {
                "description": "Match a given Secret Key to be pushed to the provider.",
                "properties": {
                  "remoteRef": {
                    "description": "Remote Refs to push to providers.",
                    "properties": {
                      "property": {
                        "description": "Name of the property in the resulting secret",
                        "type": "string"
                      },
                      "remoteKey": {
                        "description": "Name of the resulting provider secret.",
                        "type": "string"
                      }
                    },
                    "required": [
                      "remoteKey"
                    ],
                    "type": "object",
                    "additionalProperties": false
                  },
                  "secretKey": {
                    "description": "Secret Key to be pushed",
                    "type": "string"
                  }
                },
                "required": [
                  "remoteRef"
                ],
                "type": "object",
                "additionalProperties": false
              },
              "metadata": {
                "description": "Metadata is metadata attached to the secret.\nThe structure of metadata is provider specific, please look it up in the provider documentation.",
                "x-kubernetes-preserve-unknown-fields": true
              }
            },
            "required": [
              "match"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "deletionPolicy": {
          "default": "None",
          "description": "Deletion Policy to handle Secrets in the provider. Possible Values: \"Delete/None\". Defaults to \"None\".",
          "enum": [
            "Delete",
            "None"
          ],
          "type": "string"
        },
        "refreshInterval": {
          "description": "The Interval to which External Secrets will try to push a secret definition",
          "type": "string"
        },
        "secretStoreRefs": {
          "items": {
            "properties": {
              "kind": {
                "default": "SecretStore",
                "description": "Kind of the SecretStore resource (SecretStore or ClusterSecretStore)\nDefaults to `SecretStore`",
                "type": "string"
              },
              "labelSelector": {
                "description": "Optionally, sync to secret stores with label selector",
                "properties": {
                  "matchExpressions": {
                    "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
                    "items": {
                      "description": "A label selector requirement is a selector that contains values, a key, and an operator that\nrelates the key and values.",
                      "properties": {
                        "key": {
                          "description": "key is the label key that the selector applies to.",
                          "type": "string"
                        },
                        "operator": {
                          "description": "operator represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists and DoesNotExist.",
                          "type": "string"
                        },
                        "values": {
                          "description": "values is an array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. This array is replaced during a strategic\nmerge patch.",
                          "items": {
                            "type": "string"
                          },
                          "type": "array",
                          "x-kubernetes-list-type": "atomic"
                        }
                      },
                      "required": [
                        "key",
                        "operator"
                      ],
                      "type": "object",
                      "additionalProperties": false
                    },
                    "type": "array",
                    "x-kubernetes-list-type": "atomic"
                  },
                  "matchLabels": {
                    "additionalProperties": {
                      "type": "string"
                    },
                    "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels\nmap is equivalent to an element of matchExpressions, whose key field is \"key\", the\noperator is \"In\", and the values array contains only \"value\". The requirements are ANDed.",
                    "type": "object"
                  }
                },
                "type": "object",
                "x-kubernetes-map-type": "atomic",
                "additionalProperties": false
              },
              "name": {
                "description": "Optionally, sync to the SecretStore of the given name",
                "type": "string"
              }
            },
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "selector": {
          "description": "The Secret Selector (k8s source) for the Push Secret",
          "maxProperties": 1,
          "minProperties": 1,
          "properties": {
            "generatorRef": {
              "description": "Point to a generator to create a Secret.",
              "properties": {
                "apiVersion": {
                  "default": "generators.external-secrets.io/v1alpha1",
                  "description": "Specify the apiVersion of the generator resource",
                  "type": "string"
                },
                "kind": {
                  "description": "Specify the Kind of the resource, e.g. Password, ACRAccessToken etc.",
                  "type": "string"
                },
                "name": {
                  "description": "Specify the name of the generator resource",
                  "type": "string"
                }
              },
              "required": [
                "kind",
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "secret": {
              "description": "Select a Secret to Push.",
              "properties": {
                "name": {
                  "description": "Name of the Secret. The Secret must exist in the same namespace as the PushSecret manifest.",
                  "type": "string"
                }
              },
              "required": [
                "name"
              ],
              "type": "object",
              "additionalProperties": false
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "template": {
          "description": "Template defines a blueprint for the created Secret resource.",
          "properties": {
            "data": {
              "additionalProperties": {
                "type": "string"
              },
              "type": "object"
            },
            "engineVersion": {
              "default": "v2",
              "description": "EngineVersion specifies the template engine version\nthat should be used to compile/execute the\ntemplate specified in .data and .templateFrom[].",
              "enum": [
                "v1",
                "v2"
              ],
              "type": "string"
            },
            "mergePolicy": {
              "default": "Replace",
              "enum": [
                "Replace",
                "Merge"
              ],
              "type": "string"
            },
            "metadata": {
              "description": "ExternalSecretTemplateMetadata defines metadata fields for the Secret blueprint.",
              "properties": {
                "annotations": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                },
                "labels": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                }
              },
              "type": "object",
              "additionalProperties": false
            },
            "templateFrom": {
              "items": {
                "properties": {
                  "configMap": {
                    "properties": {
                      "items": {
                        "items": {
                          "properties": {
                            "key": {
                              "type": "string"
                            },
                            "templateAs": {
                              "default": "Values",
                              "enum": [
                                "Values",
                                "KeysAndValues"
                              ],
                              "type": "string"
                            }
                          },
                          "required": [
                            "key"
                          ],
                          "type": "object",
                          "additionalProperties": false
                        },
                        "type": "array"
                      },
                      "name": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "items",
                      "name"
                    ],
                    "type": "object",
                    "additionalProperties": false
                  },
                  "literal": {
                    "type": "string"
                  },
                  "secret": {
                    "properties": {
                      "items": {
                        "items": {
                          "properties": {
                            "key": {
                              "type": "string"
                            },
                            "templateAs": {
                              "default": "Values",
                              "enum": [
                                "Values",
                                "KeysAndValues"
                              ],
                              "type": "string"
                            }
                          },
                          "required": [
                            "key"
                          ],
                          "type": "object",
                          "additionalProperties": false
                        },
                        "type": "array"
                      },
                      "name": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "items",
                      "name"
                    ],
                    "type": "object",
                    "additionalProperties": false
                  },
                  "target": {
                    "default": "Data",
                    "enum": [
                      "Data",
                      "Annotations",
                      "Labels"
                    ],
                    "type": "string"
                  }
                },
                "type": "object",
                "additionalProperties": false
              },
              "type": "array"
            },
            "type": {
              "type": "string"
            }
          },
          "type": "object",
          "additionalProperties": false
        },
        "updatePolicy": {
          "default": "Replace",
          "description": "UpdatePolicy to handle Secrets in the provider. Possible Values: \"Replace/IfNotExists\". Defaults to \"Replace\".",
          "enum": [
            "Replace",
            "IfNotExists"
          ],
          "type": "string"
        }
      },
      "required": [
        "secretStoreRefs",
        "selector"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "status": {
      "description": "PushSecretStatus indicates the history of the status of PushSecret.",
      "properties": {
        "conditions": {
          "items": {
            "description": "PushSecretStatusCondition indicates the status of the PushSecret.",
            "properties": {
              "lastTransitionTime": {
                "format": "date-time",
                "type": "string"
              },
              "message": {
                "type": "string"
              },
              "reason": {
                "type": "string"
              },
              "status": {
                "type": "string"
              },
              "type": {
                "description": "PushSecretConditionType indicates the condition of the PushSecret.",
                "type": "string"
              }
            },
            "required": [
              "status",
              "type"
            ],
            "type": "object",
            "additionalProperties": false
          },
          "type": "array"
        },
        "refreshTime": {
          "description": "refreshTime is the time and date the external secret was fetched and\nthe target secret updated",
          "format": "date-time",
          "nullable": true,
          "type": "string"
        },
        "syncedPushSecrets": {
          "additionalProperties": {
            "additionalProperties": {
              "properties": {
                "conversionStrategy": {
                  "default": "None",
                  "description": "Used to define a conversion Strategy for the secret keys",
                  "enum": [
                    "None",
                    "ReverseUnicode"
                  ],
                  "type": "string"
                },
                "match": {
                  "description": "Match a given Secret Key to be pushed to the provider.",
                  "properties": {
                    "remoteRef": {
                      "description": "Remote Refs to push to providers.",
                      "properties": {
                        "property": {
                          "description": "Name of the property in the resulting secret",
                          "type": "string"
                        },
                        "remoteKey": {
                          "description": "Name of the resulting provider secret.",
                          "type": "string"
                        }
                      },
                      "required": [
                        "remoteKey"
                      ],
                      "type": "object",
                      "additionalProperties": false
                    },
                    "secretKey": {
                      "description": "Secret Key to be pushed",
                      "type": "string"
                    }
                  },
                  "required": [
                    "remoteRef"
                  ],
                  "type": "object",
                  "additionalProperties": false
                },
                "metadata": {
                  "description": "Metadata is metadata attached to the secret.\nThe structure of metadata is provider specific, please look it up in the provider documentation.",
                  "x-kubernetes-preserve-unknown-fields": true
                }
              },
              "required": [
                "match"
              ],
              "type": "object",
              "additionalProperties": false
            },
            "type": "object"
          },
          "description": "Synced PushSecrets, including secrets that already exist in provider.\nMatches secret stores to PushSecretData that was stored to that secret store.",
          "type": "object"
        },
        "syncedResourceVersion": {
          "description": "SyncedResourceVersion keeps track of the last synced version.",
          "type": "string"
        }
      },
      "type": "object",
      "additionalProperties": false
    }
  },
  "type": "object"
}