sops

SOPS. Provides secret at apply time from values that stay outside this repository.

This is an external provider: it registers as impl.<contract>.<name> and has no apps instance.

Cluster example

providers.secret = impl.secret.sops;

apps.myapp.main.needs.secret.webhookToken = { };

Provides

secret7 options

• <name>.externalboolean

  The operator supplies this value before apply. Other secrets are generated in the cluster.

  Default

  false

• <name>.keyslist of string

  Keys stored in this Secret. Empty means one key named after the secret.

  Default

  [ ]

  Example

  [ "name" "user" "password" ]

• <name>.refnull or (submodule)

  Bound secretRef for this secret. Written by the secret provider.

  Default

  null

• <name>.ref.keystring

  Key inside the Secret.

• <name>.ref.namestring

  Kubernetes Secret object name.

• <name>.ref.namespacenull or string

  Namespace of the Secret. Defaults to the namespace of the consumer that reads it.

  Default

  null

• providernull or (podule provider reference (apps.<type>.<instance> or impl.<contract>.<name>))

  Overrides providers.secret for this need. One provider handles every named secret.

  Default

  null

Needs

None.