You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/README.md
+14-8Lines changed: 14 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,8 +1,11 @@
1
1
# Component: `external-secrets-operator`
2
2
3
-
This component (ESO) is used to create an external `SecretStore` configured to synchronize secrets from AWS SSM Parameter store as Kubernetes Secrets within the cluster. Per the operator pattern, the `external-secret-operator` pods will watch for any `ExternalSecret` resources which reference the `SecretStore` to pull secrets from.
3
+
This component (ESO) is used to create an external `SecretStore` configured to synchronize secrets from AWS SSM
4
+
Parameter store as Kubernetes Secrets within the cluster. Per the operator pattern, the `external-secret-operator` pods
5
+
will watch for any `ExternalSecret` resources which reference the `SecretStore` to pull secrets from.
4
6
5
-
In practice, this means apps will define an `ExternalSecret` that pulls all env into a single secret as part of a helm chart; e.g.:
7
+
In practice, this means apps will define an `ExternalSecret` that pulls all env into a single secret as part of a helm
8
+
chart; e.g.:
6
9
7
10
```
8
11
# Part of the charts in `/releases
@@ -29,15 +32,15 @@ spec:
29
32
target: "$1"
30
33
```
31
34
32
-
This component assumes secrets are prefixed by "service" in parameter store (e.g. `/app/my_secret`). The `SecretStore`. The component is designed to pull secrets from a `path` prefix (defaulting to `"app"`). This should work nicely along `chamber` which uses this same path (called a "service" in Chamber). For example, developers should store keys like so.
33
-
35
+
This component assumes secrets are prefixed by "service" in parameter store (e.g. `/app/my_secret`). The `SecretStore`.
36
+
The component is designed to pull secrets from a `path` prefix (defaulting to `"app"`). This should work nicely along
37
+
`chamber` which uses this same path (called a "service" in Chamber). For example, developers should store keys like so.
34
38
35
39
```bash
36
40
assume-role acme-platform-gbl-sandbox-admin
37
41
chamber write app MY_KEY my-value
38
42
```
39
43
40
-
41
44
See `docs/recipies.md` for more information on managing secrets.
42
45
43
46
## Usage
@@ -88,6 +91,7 @@ components:
88
91
chart_values: {}
89
92
```
90
93
94
+
<!-- prettier-ignore-start -->
91
95
<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
92
96
## Requirements
93
97
@@ -181,8 +185,10 @@ components:
181
185
|------|-------------|
182
186
| <a name="output_metadata"></a> [metadata](#output\_metadata) | Block status of the deployed release |
0 commit comments