You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
//nolint:kubeapilinter // Name is a listMapKey and must not have omitempty for proper patch identification
97
+
NameFeatureName`json:"name"`
98
+
99
+
// mode controls whether the feature is active.
100
+
// When set to Enabled, the operator applies the configuration associated with the named feature to the relevant managed deployments.
101
+
// For UnsafeAllowGenericTargets, this passes the `--unsafe-allow-generic-targets` flag to the external-secrets core controller,
102
+
// allowing ExternalSecret resources to target Kubernetes resources other than Secrets (for example, ConfigMaps or custom resources).
103
+
// Warning: Generic targets require additional RBAC permissions on the affected operand; enabling this feature without the appropriate permissions will cause reconciliation failures.
104
+
// +kubebuilder:validation:Enum:=Enabled;Disabled
105
+
// +kubebuilder:default:=Disabled
106
+
// +optional
107
+
ModeMode`json:"mode,omitempty"`
108
+
}
109
+
79
110
// ExternalSecretsManagerStatus is the most recently observed status of the ExternalSecretsManager.
80
111
typeExternalSecretsManagerStatusstruct {
81
112
// controllerStatuses holds the observed conditions of the controllers part of the operator.
Copy file name to clipboardExpand all lines: bundle/manifests/operator.openshift.io_externalsecretsmanagers.yaml
+38Lines changed: 38 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -58,6 +58,44 @@ spec:
58
58
spec:
59
59
description: spec is the specification of the desired behavior
60
60
properties:
61
+
features:
62
+
description: |-
63
+
features configures optional capabilities across deployments managed by the external-secrets-operator,
64
+
including the operator itself and any current or future operands.
65
+
Each entry is uniquely identified by name and can be individually enabled or disabled.
66
+
This field can have a maximum of 1 entry.
67
+
items:
68
+
description: Feature configures an optional capability that is applied
69
+
by the external-secrets-operator across its managed deployments.
70
+
properties:
71
+
mode:
72
+
default: Disabled
73
+
description: |-
74
+
mode controls whether the feature is active.
75
+
When set to Enabled, the operator applies the configuration associated with the named feature to the relevant managed deployments.
76
+
For UnsafeAllowGenericTargets, this passes the `--unsafe-allow-generic-targets` flag to the external-secrets core controller,
77
+
allowing ExternalSecret resources to target Kubernetes resources other than Secrets (for example, ConfigMaps or custom resources).
78
+
Warning: Generic targets require additional RBAC permissions on the affected operand; enabling this feature without the appropriate permissions will cause reconciliation failures.
79
+
enum:
80
+
- Enabled
81
+
- Disabled
82
+
type: string
83
+
name:
84
+
description: |-
85
+
name identifies the optional feature to configure.
86
+
Currently, the only supported value is UnsafeAllowGenericTargets.
87
+
enum:
88
+
- UnsafeAllowGenericTargets
89
+
type: string
90
+
required:
91
+
- name
92
+
type: object
93
+
maxItems: 1
94
+
minItems: 0
95
+
type: array
96
+
x-kubernetes-list-map-keys:
97
+
- name
98
+
x-kubernetes-list-type: map
61
99
globalConfig:
62
100
description: globalConfig is for configuring the behavior of deployments
Copy file name to clipboardExpand all lines: config/crd/bases/operator.openshift.io_externalsecretsmanagers.yaml
+38Lines changed: 38 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -58,6 +58,44 @@ spec:
58
58
spec:
59
59
description: spec is the specification of the desired behavior
60
60
properties:
61
+
features:
62
+
description: |-
63
+
features configures optional capabilities across deployments managed by the external-secrets-operator,
64
+
including the operator itself and any current or future operands.
65
+
Each entry is uniquely identified by name and can be individually enabled or disabled.
66
+
This field can have a maximum of 1 entry.
67
+
items:
68
+
description: Feature configures an optional capability that is applied
69
+
by the external-secrets-operator across its managed deployments.
70
+
properties:
71
+
mode:
72
+
default: Disabled
73
+
description: |-
74
+
mode controls whether the feature is active.
75
+
When set to Enabled, the operator applies the configuration associated with the named feature to the relevant managed deployments.
76
+
For UnsafeAllowGenericTargets, this passes the `--unsafe-allow-generic-targets` flag to the external-secrets core controller,
77
+
allowing ExternalSecret resources to target Kubernetes resources other than Secrets (for example, ConfigMaps or custom resources).
78
+
Warning: Generic targets require additional RBAC permissions on the affected operand; enabling this feature without the appropriate permissions will cause reconciliation failures.
79
+
enum:
80
+
- Enabled
81
+
- Disabled
82
+
type: string
83
+
name:
84
+
description: |-
85
+
name identifies the optional feature to configure.
86
+
Currently, the only supported value is UnsafeAllowGenericTargets.
87
+
enum:
88
+
- UnsafeAllowGenericTargets
89
+
type: string
90
+
required:
91
+
- name
92
+
type: object
93
+
maxItems: 1
94
+
minItems: 0
95
+
type: array
96
+
x-kubernetes-list-map-keys:
97
+
- name
98
+
x-kubernetes-list-type: map
61
99
globalConfig:
62
100
description: globalConfig is for configuring the behavior of deployments
![openshift-merge-bot[bot]](https://avatars.githubusercontent.com/in/412865?v=4&size=40){kind=avatar}
0 commit comments