The module lifecycle stage: General Availability

The Deckhouse Kubernetes Platform installs CRDs but does not remove them when a module is disabled. If you no longer need the created CRDs, delete them.

SecretsStoreImport

Scope: Namespaced
Version: v1alpha1

Namespaced resource to define mapping between Vault-compatible storage and files in containers.
  • spec
    object
    • spec.address
      string

      Address of a Vault-compatible storage.

      If the parameter is not specified, the value from ModuleConfig is used.

      Pattern: ^https?://[.:0-9a-zA-Z-]+$

    • spec.audience
      string
      JWT token recipient audience (aud claim in a token).
    • spec.authPath
      string

      Authentication mount path in a Vault-compatible storage.

      If the parameter is not specified, the value from ModuleConfig is used.

      Pattern: ^[-_.a-zA-Z0-9]+$

    • spec.caCert
      string

      CA certificate in PEM format for connecting to Stronghold or Vault.

      If the parameter is not specified, the value from ModuleConfig is used.

      Pattern: ^-----BEGIN CERTIFICATE----- (.+ ){5}

    • spec.files
      array of objects

      Required value

      • spec.files.decodeBase64
        boolean
        Enables decoding of a Base64-encoded secret value before saving it to a file.

        Default: false

      • spec.files.name
        string
        Filename where the secret is written.

        Pattern: ^[-_a-zA-Z0-9.]+$

      • spec.files.source
        object
        • spec.files.source.key
          string

          Required value

          Secret key name in a Vault-compatible KV store.

          Pattern: ^[-a-zA-Z0-9_.]+$

        • spec.files.source.path
          string

          Required value

          Path to the secret in a Vault-compatible KV store.

          Pattern: ^[-a-zA-Z0-9_.\/]+$

    • spec.namespace
      string

      Namespace where the imported secret is created.

      If the parameter is not specified, the value from ModuleConfig is used.

      Pattern: ^[-_./a-zA-Z0-9]+$

    • spec.role
      string

      Required value

      Role in a Vault-compatible storage.

      Pattern: ^[-_\.a-zA-Z0-9]+$

    • spec.skipTLSVerify
      boolean
      Skips verification of TLS certificates.
    • spec.type
      string

      Required value

      Type of a mechanism for delivering secrets into the cluster.

      Only the CSI type is supported at the moment.

      Allowed values: CSI