secret

Named secrets a consumer needs. Values never enter evaluation; a provider writes a secretRef for each name.

Example

apps.myapp.main.needs.secret.adminPassword = { external = true; };

You set

• <name>.externalboolean

  The operator supplies this value before apply. Other secrets are generated in the cluster.

  Default

  false

• <name>.keyslist of string

  Keys stored in this Secret. Empty means one key named after the secret.

  Default

  [ ]

  Example

  [ "name" "user" "password" ]

• <name>.ref.keystring

  Key inside the Secret.

• <name>.ref.namestring

  Kubernetes Secret object name.

• <name>.ref.namespacenull or string

  Namespace of the Secret. Defaults to the namespace of the consumer that reads it.

  Default

  null

• providernull or (podule provider reference (apps.<type>.<instance> or impl.<contract>.<name>))

  Overrides providers.secret for this need. One provider handles every named secret.

  Default

  null

The provider writes

• <name>.refnull or (submodule)

  Bound secretRef for this secret. Written by the secret provider.

  Default

  null

Provided by

• secretspec
• sops