@@ -93,9 +93,6 @@ const (
9393 // Secrets.
9494 SecretStoreKubernetes SecretStoreType = "Kubernetes"
9595
96- // SecretStoreVault indicates that secret store type is Vault.
97- SecretStoreVault SecretStoreType = "Vault"
98-
9996 // SecretStorePlugin indicates that secret store type is Plugin and will be used with external secret stores.
10097 SecretStorePlugin SecretStoreType = "Plugin"
10198)
@@ -122,13 +119,6 @@ type SecretStoreConfig struct {
122119 // +optional
123120 Kubernetes * KubernetesSecretStoreConfig `json:"kubernetes,omitempty"`
124121
125- // Vault configures a Vault secret store.
126- // Deprecated: This API is scheduled to be removed in a future release.
127- // Vault should be used as a plugin going forward. See
128- // https://github.com/crossplane-contrib/ess-plugin-vault for more information.
129- // +optional
130- Vault * VaultSecretStoreConfig `json:"vault,omitempty"`
131-
132122 // Plugin configures External secret store as a plugin.
133123 // +optional
134124 Plugin * PluginStoreConfig `json:"plugin,omitempty"`
@@ -173,83 +163,3 @@ type KubernetesSecretStoreConfig struct {
173163 // TODO(turkenh): Support additional identities like
174164 // https://github.com/crossplane-contrib/provider-kubernetes/blob/4d722ef914e6964e80e190317daca9872ae98738/apis/v1alpha1/types.go#L34
175165}
176-
177- // VaultAuthMethod represent a Vault authentication method.
178- // https://www.vaultproject.io/docs/auth
179- type VaultAuthMethod string
180-
181- const (
182- // VaultAuthToken indicates that "Token Auth" will be used to
183- // authenticate to Vault.
184- // https://www.vaultproject.io/docs/auth/token
185- VaultAuthToken VaultAuthMethod = "Token"
186- )
187-
188- // VaultAuthTokenConfig represents configuration for Vault Token Auth Method.
189- // https://www.vaultproject.io/docs/auth/token
190- type VaultAuthTokenConfig struct {
191- // Source of the credentials.
192- // +kubebuilder:validation:Enum=None;Secret;Environment;Filesystem
193- Source CredentialsSource `json:"source"`
194-
195- // CommonCredentialSelectors provides common selectors for extracting
196- // credentials.
197- CommonCredentialSelectors `json:",inline"`
198- }
199-
200- // VaultAuthConfig required to authenticate to a Vault API.
201- type VaultAuthConfig struct {
202- // Method configures which auth method will be used.
203- Method VaultAuthMethod `json:"method"`
204- // Token configures Token Auth for Vault.
205- // +optional
206- Token * VaultAuthTokenConfig `json:"token,omitempty"`
207- }
208-
209- // VaultCABundleConfig represents configuration for configuring a CA bundle.
210- type VaultCABundleConfig struct {
211- // Source of the credentials.
212- // +kubebuilder:validation:Enum=None;Secret;Environment;Filesystem
213- Source CredentialsSource `json:"source"`
214-
215- // CommonCredentialSelectors provides common selectors for extracting
216- // credentials.
217- CommonCredentialSelectors `json:",inline"`
218- }
219-
220- // VaultKVVersion represent API version of the Vault KV engine
221- // https://www.vaultproject.io/docs/secrets/kv
222- type VaultKVVersion string
223-
224- const (
225- // VaultKVVersionV1 indicates that Secret API is KV Secrets Engine Version 1
226- // https://www.vaultproject.io/docs/secrets/kv/kv-v1
227- VaultKVVersionV1 VaultKVVersion = "v1"
228-
229- // VaultKVVersionV2 indicates that Secret API is KV Secrets Engine Version 2
230- // https://www.vaultproject.io/docs/secrets/kv/kv-v2
231- VaultKVVersionV2 VaultKVVersion = "v2"
232- )
233-
234- // VaultSecretStoreConfig represents the required configuration for a Vault
235- // secret store.
236- type VaultSecretStoreConfig struct {
237- // Server is the url of the Vault server, e.g. "https://vault.acme.org"
238- Server string `json:"server"`
239-
240- // MountPath is the mount path of the KV secrets engine.
241- MountPath string `json:"mountPath"`
242-
243- // Version of the KV Secrets engine of Vault.
244- // https://www.vaultproject.io/docs/secrets/kv
245- // +optional
246- // +kubebuilder:default=v2
247- Version * VaultKVVersion `json:"version,omitempty"`
248-
249- // CABundle configures CA bundle for Vault Server.
250- // +optional
251- CABundle * VaultCABundleConfig `json:"caBundle,omitempty"`
252-
253- // Auth configures an authentication method for Vault.
254- Auth VaultAuthConfig `json:"auth"`
255- }
0 commit comments