Skip to content

Commit eb2356c

Browse files
committed
docs: Add section for new annotation
1 parent 0914817 commit eb2356c

1 file changed

Lines changed: 17 additions & 0 deletions

File tree

docs/modules/secret-operator/pages/volume.adoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,23 @@ The xref:secretclass.adoc#format[format] that the secret should be written as.
5050

5151
This can be either the default output format of the xref:secretclass.adoc#backend[backend], or a format that it defines a conversion into.
5252

53+
=== `secrets.stackable.tech/privision-parts`
54+
55+
*Required*: false
56+
57+
*Default value*: `public-private`
58+
59+
*Backend*: All
60+
61+
This annotation allows configuring which parts of the secret material should be provisioned.
62+
Supported values are `public` and `public-private`, provisioning only public or public+private data respectively.
63+
Using this annotation enables the following use-cases:
64+
65+
* Use the `autoTls` backend, but only provision the `ca.crt`/`truststore.p12` for the consumer.
66+
* Use the `kerberosKeytab` backend, but only provision the `krb5.conf` for the consumer.
67+
* Use the `k8sSearch` backend to select Secrets which contain public data only and support parsing the partial set of files.
68+
Using this annotation disables the strict parsing of files when an explicit format is requested.
69+
5370
=== `secrets.stackable.tech/format.tls-pkcs12.keystore-name`
5471

5572
*Required*: false

0 commit comments

Comments
 (0)