Skip to main content

External Secrets Operator

Versions Supported

Example Configuration

apiVersion: [external-secrets.io/v1beta1](http://external-secrets.io/v1beta1)
kind: ExternalSecret
metadata:
name: vault-example # Custom name
spec:
refreshInterval: "15s"
secretStoreRef:
name: vault-backend # Custom value
kind: SecretStore
target:
name: mysecretfoobar
data:
- secretKey: foobar
remoteRef:
key: secret/foo # custom value
property: my-value # custom value

apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
name: custom-name
spec:
provider:
vault:
server: "http://12.34.567.133:0000" # custom server end point
path: "secret" # custom path
version: "v2" # custom version
auth:
# points to a secret that contains a vault token
# https://www.vaultproject.io/docs/auth/token
tokenSecretRef:
name: "vault-token1" # Custom name and key
key: "token1"
---
apiVersion: v1
kind: Secret
metadata:
name: vault-token1
data:
token: cm9vdA== # "root" # custome value

Terraform

You can reference the External Secrets Operator pack in Terraform with the following data resource.

data "spectrocloud_registry" "palette_registry" {
name = "Palette Registry"
}

data "spectrocloud_pack" "external-secrets-operator" {
name = "external-secrets-operator"
version = "0.9.16"
registry_uid = data.spectrocloud_registry.palette_registry.id
}