README
¶
External Secrets
The External Secrets Kubernetes operator reads information from a third party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Multiple people and organizations are joining efforts to create a single External Secrets solution based on existing projects. If you are curious about the origins of this project, check out this issue and this PR.
⚠️ Please bear in mind
While this project is not ready, you might consider using the following:
Installation
Clone this repository:
git clone https://github.com/external-secrets/external-secrets.git
Install the Custom Resource Definitions:
make install
Run the controller against the active Kubernetes cluster context:
make run
Apply the sample resources:
kubectl apply -f config/samples/external-secrets_v1alpha1_secretstore.yaml
kubectl apply -f config/samples/external-secrets_v1alpha1_externalsecret.yaml
We will add more documentation once we have the implementation for the different providers.
Planned Features
- Support to multiple Provider stores (AWS Secret Manager, GCP Secret Manger, Vault and more) simultaneously.
- Multiple External Secrets operator instances for different contexts/environments.
- A custom refresh interval to sync the data from the Providers, syncing your Kubernetes Secrets up to date.
- Select specific versions of the Provider data.
Contributing
We welcome and encourage contributions to this project! Please read the Developer and Contribution process guides. Also make sure to check the Code of Conduct and adhere to its guidelines.
Kicked off by
Documentation
¶
There is no documentation for this package.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
externalsecrets/v1alpha1
Package v1alpha1 contains resources for external-secrets +kubebuilder:object:generate=true +groupName=external-secrets.io +versionName=v1alpha1
|
Package v1alpha1 contains resources for external-secrets +kubebuilder:object:generate=true +groupName=external-secrets.io +versionName=v1alpha1 |
|
meta
Package meta contains meta types for external-secret APIs.
|
Package meta contains meta types for external-secret APIs. |
|
meta/v1
Package meta contains meta types for external-secrets APIs +kubebuilder:object:generate=true
|
Package meta contains meta types for external-secrets APIs +kubebuilder:object:generate=true |
|
e2e
|
|
|
framework
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
framework/addon
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
framework/log
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
framework/util
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
suite
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
suite/aws
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
suite/vault
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
generators
|
|
|
v1/acr
module
|
|
|
v1/cloudsmith
module
|
|
|
v1/ecr
module
|
|
|
v1/fake
module
|
|
|
v1/gcr
module
|
|
|
v1/github
module
|
|
|
v1/grafana
module
|
|
|
v1/mfa
module
|
|
|
v1/password
module
|
|
|
v1/quay
module
|
|
|
v1/sshkey
module
|
|
|
v1/sts
module
|
|
|
v1/uuid
module
|
|
|
v1/vault
module
|
|
|
v1/webhook
module
|
|
|
pkg
|
|
|
controllers/externalsecret
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
provider/aws/parameterstore
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
provider/aws/parameterstore/fake
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
provider/aws/secretsmanager
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
provider/aws/secretsmanager/fake
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
provider/aws/session/fake
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
template
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
|
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. |
|
providers
|
|
|
v1/akeyless
module
|
|
|
v1/alibaba
module
|
|
|
v1/aws
module
|
|
|
v1/azure
module
|
|
|
v1/barbican
module
|
|
|
v1/beyondtrust
module
|
|
|
v1/bitwarden
module
|
|
|
v1/chef
module
|
|
|
v1/cloudru
module
|
|
|
v1/conjur
module
|
|
|
v1/delinea
module
|
|
|
v1/device42
module
|
|
|
v1/doppler
module
|
|
|
v1/dvls
module
|
|
|
v1/fake
module
|
|
|
v1/fortanix
module
|
|
|
v1/gcp
module
|
|
|
v1/github
module
|
|
|
v1/gitlab
module
|
|
|
v1/ibm
module
|
|
|
v1/infisical
module
|
|
|
v1/keepersecurity
module
|
|
|
v1/kubernetes
module
|
|
|
v1/ngrok
module
|
|
|
v1/onboardbase
module
|
|
|
v1/onepassword
module
|
|
|
v1/onepasswordsdk
module
|
|
|
v1/oracle
module
|
|
|
v1/passbolt
module
|
|
|
v1/passworddepot
module
|
|
|
v1/previder
module
|
|
|
v1/pulumi
module
|
|
|
v1/scaleway
module
|
|
|
v1/secretserver
module
|
|
|
v1/senhasegura
module
|
|
|
v1/vault
module
|
|
|
v1/volcengine
module
|
|
|
v1/webhook
module
|
|
|
v1/yandex
module
|
|
|
runtime
module
|
Click to show internal directories.
Click to hide internal directories.