Skip to main content

External Secrets

Artifact Hub

External Secrets​

Create one or more ExternalSecret resources (External Secrets Operator).

Rendered by: templates/external-secret.yaml

externalSecrets:                     # struct   | Optional external-secrets config
  # ref: https://external-secrets.io/latest/api/secretstore/
  secretstore:                       # struct   | Optional SecretStore to create
    name: my-secret-store            # string   | Default: release name
    labels: {}                       # map      | Optional labels
    annotations: {}                  # map      | Optional annotations
    provider: {}                     # any      | Required when secretstore is set
  secrets:                           # struct[] | Optional list of ExternalSecrets
    # ref: https://external-secrets.io/latest/api/externalsecret/
    - name: my-external-secret       # string   | Required
      annotations: {}                # map      | Optional annotations
      refreshInterval: "0s"          # string   | "0s" disables auto-refresh
      secretStoreRef:                # struct   | Optional
        name: my-secret-store        # string   | Default order: secretStoreRef.name -> externalSecrets.secretstore.name -> release name
        kind: SecretStore            # string   | Default: SecretStore
      target:                        # struct   | Optional target config
        name: my-k8s-secret          # string   | Default: external secret name
        creationPolicy: Owner        # string   | Default: Owner
        template: {}                 # any      | Optional target template
      data:                          # struct[] | Optional per-key mapping
        - secretKey: MY_SECRET_KEY   # string
          remoteRef:
            key: /path/to/parameter  # string
            property: someProperty   # string   | Optional
            version: latest          # string   | Optional
      dataFrom: []                   # any      | Optional passthrough list