Parameters
The parent key for all of the following parameters is external_secrets_operator.
namespace
| type |
string |
| default |
|
The namespace in which to deploy this component.
helm_values
| type |
object |
| default |
Helm values for the external-secrets operator Helm chart.
|
The component automatically sets The component checks whether it’s rendered for an OpenShift cluster by checking if |
secret_stores
| type |
object |
| default |
|
Each entry of this parameter is rendered as an external-secrets [SecretStore].
The key can be just a name, or <namespace>/<name>.
If the key is just a name, the resulting SecretStore is deployed in the namespace in which the operator is deployed.
The component sets metadata.name and metadata.namespace based on the object key.
The value is used as is and setting metadata.name or metadata.namespace overrides the values parsed from the object key.
cluster_secret_stores
| type |
object |
| default |
|
Each entry of this parameter is rendered as an external-secrets [ClusterSecretStore].
The key is used as metadata.name of the resulting resource.
The value is used as is.
ecr_authorization_tokens
| type |
object |
| default |
|
Each entry of this parameter is rendered as an external-secrets [ECRAuthorizationToken].
The key can be just a name, or <namespace>/<name>.
If the key is just a name, the resulting ECRAuthorizationToken is deployed in the namespace in which the operator is deployed.
The component sets metadata.name and metadata.namespace based on the object key.
The value is used as is and setting metadata.name or metadata.namespace overrides the values parsed from the object key.
external_secrets
| type |
object |
| default |
|
Each entry of this parameter is rendered as an external-secrets [ExternalSecret].
The key can be just a name, or <namespace>/<name>.
If the key is just a name, the resulting ExternalSecret is deployed in the namespace in which the operator is deployed.
The component sets metadata.name and metadata.namespace based on the object key.
The value is used as is and setting metadata.name or metadata.namespace overrides the values parsed from the object key.
secrets
A dict of secrets to create in the namespace. The key is the name of the secret, the value is the content of the secret.
alerts
This section allows users to configure alerts for Cilium.
The component expects that an externally-managed Prometheus stack is running on the target cluster.
It renders the alerts through the alert-patching.libsonnet and prom.libsonnet library aliases, which are provided by both component openshift4-monitoring and component prometheus.
If neither component is present on the target cluster, no alerts are rendered.
alerts.ignoreNames
| type |
list |
| default |
|
Alerts which shouldn’t be deployed.
The list supports removal of entries by prefixing them with ~.
alerts.patches
| type |
dict |
| default |
|
Patches for alerts managed by the component. The component expects that keys in this object match the name of an alert managed through the component. The value of each entry is expected to be a valid partial Prometheus rule definition.
alerts.additionalRules
| type |
dict |
| default |
|
This parameter allows users to configure additional Prometheus recording and alerting rules.
The component expects that keys of this object are prefixed with either alert: or record: and will use these prefixes to create alerting or recording rules.
The component will take the suffix of the key as the alerting or recording rule name and will set field alert or record of the rule to the suffix.
The value of each entry will be used as the base Prometheus rule in which the alert or record field will be injected.
Parameters alerts.ignoreNames and alerts.patches are also applied to alerts defined through this parameter.
|