diff --git a/docs/examples/src/charts/charts.k b/docs/examples/src/charts/charts.k index fd98c0e7..4942004d 100644 --- a/docs/examples/src/charts/charts.k +++ b/docs/examples/src/charts/charts.k @@ -44,7 +44,7 @@ charts: helm.Charts = { chart = "external-secrets" repoURL = "https://charts.external-secrets.io/" schemaGenerator = "AUTO" - targetRevision = "2.6.0" + targetRevision = "2.8.0" crdGenerator = "TEMPLATE" values: { installCRDs = True diff --git a/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_external_secret.k b/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_external_secret.k index 4ce06550..c5c9b65e 100644 --- a/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_external_secret.k +++ b/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_external_secret.k @@ -59,6 +59,8 @@ schema ExternalSecretsIoV1ExternalSecretSpec: - OnChange: Only synchronizes the Secret when the ExternalSecret's metadata or specification changes secretStoreRef : ExternalSecretsIoV1ExternalSecretSpecSecretStoreRef, default is Undefined, optional secret store ref + syncWindows : ExternalSecretsIoV1ExternalSecretSpecSyncWindows, default is Undefined, optional + sync windows target : ExternalSecretsIoV1ExternalSecretSpecTarget, default is Undefined, optional target """ @@ -67,6 +69,7 @@ schema ExternalSecretsIoV1ExternalSecretSpec: refreshInterval?: str = "1h0m0s" refreshPolicy?: "CreatedOnce" | "Periodic" | "OnChange" secretStoreRef?: ExternalSecretsIoV1ExternalSecretSpecSecretStoreRef + syncWindows?: ExternalSecretsIoV1ExternalSecretSpecSyncWindows target?: ExternalSecretsIoV1ExternalSecretSpecTarget schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0: @@ -106,7 +109,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0Extract: Key is the key used in the Provider, mandatory metadataPolicy : str, default is "None", optional Policy for fetching tags/labels from provider secrets, possible options are Fetch, None. Defaults to None - nullBytePolicy : str, default is "Ignore", optional + nullBytePolicy : str, default is Undefined, optional Controls how ESO handles fetched secret data containing NUL bytes for this source. property : str, default is Undefined, optional Used to select a specific property of the Provider value (if a map), if supported @@ -118,7 +121,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0Extract: key: str metadataPolicy?: "None" | "Fetch" = "None" - nullBytePolicy?: "Ignore" | "Fail" = "Ignore" + nullBytePolicy?: "Ignore" | "Fail" property?: str version?: str @@ -135,7 +138,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0Find: Used to define a decoding Strategy name : ExternalSecretsIoV1ExternalSecretSpecDataFromItems0FindName, default is Undefined, optional name - nullBytePolicy : str, default is "Ignore", optional + nullBytePolicy : str, default is Undefined, optional Controls how ESO handles fetched secret data containing NUL bytes for this find source. path : str, default is Undefined, optional A root path to start the find operations. @@ -145,7 +148,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0Find: conversionStrategy?: "Default" | "Unicode" = "Default" decodingStrategy?: "Auto" | "Base64" | "Base64URL" | "None" = "None" name?: ExternalSecretsIoV1ExternalSecretSpecDataFromItems0FindName - nullBytePolicy?: "Ignore" | "Fail" = "Ignore" + nullBytePolicy?: "Ignore" | "Fail" path?: str tags?: {str:str} @@ -264,7 +267,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0SourceRefGeneratorRef: Specify the name of the generator resource """ apiVersion?: str = "generators.external-secrets.io/v1alpha1" - kind: "ACRAccessToken" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" + kind: "ACRAccessToken" | "BeyondtrustWorkloadCredentialsDynamicSecret" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "GitlabDeployToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" name: str @@ -289,8 +292,8 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataFromItems0SourceRefStoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1ExternalSecretSpecDataItems0: @@ -332,7 +335,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataItems0RemoteRef: Key is the key used in the Provider, mandatory metadataPolicy : str, default is "None", optional Policy for fetching tags/labels from provider secrets, possible options are Fetch, None. Defaults to None - nullBytePolicy : str, default is "Ignore", optional + nullBytePolicy : str, default is Undefined, optional Controls how ESO handles fetched secret data containing NUL bytes for this source. property : str, default is Undefined, optional Used to select a specific property of the Provider value (if a map), if supported @@ -344,7 +347,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataItems0RemoteRef: key: str metadataPolicy?: "None" | "Fetch" = "None" - nullBytePolicy?: "Ignore" | "Fail" = "Ignore" + nullBytePolicy?: "Ignore" | "Fail" property?: str version?: str @@ -380,7 +383,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataItems0SourceRefGeneratorRef: Specify the name of the generator resource """ apiVersion?: str = "generators.external-secrets.io/v1alpha1" - kind: "ACRAccessToken" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" + kind: "ACRAccessToken" | "BeyondtrustWorkloadCredentialsDynamicSecret" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "GitlabDeployToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" name: str @@ -405,8 +408,8 @@ schema ExternalSecretsIoV1ExternalSecretSpecDataItems0SourceRefStoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1ExternalSecretSpecSecretStoreRef: @@ -425,10 +428,57 @@ schema ExternalSecretsIoV1ExternalSecretSpecSecretStoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name +schema ExternalSecretsIoV1ExternalSecretSpecSyncWindows: + r""" + SyncWindows optionally restricts when periodic refreshes may occur. + Evaluated in UTC, only for Periodic refresh policy (or when refreshPolicy is unset). + + Attributes + ---------- + kind : str, default is Undefined, required + Kind applies to every window in the list. + "allow" -- syncs are permitted only while at least one window is active; + all other times are blocked. + "deny" -- syncs are blocked while any window is active; + all other times are permitted. + windows : [ExternalSecretsIoV1ExternalSecretSpecSyncWindowsWindowsItems0], default is Undefined, required + Windows is the list of schedule+duration pairs. + """ + kind: "allow" | "deny" + + windows: [ExternalSecretsIoV1ExternalSecretSpecSyncWindowsWindowsItems0] + + check: + len(windows) >= 1 + +schema ExternalSecretsIoV1ExternalSecretSpecSyncWindowsWindowsItems0: + r""" + ExternalSecretSyncWindowEntry defines a single cron-schedule + duration pair + within a SyncWindows block. + + Attributes + ---------- + duration : str, default is Undefined, required + Duration specifies how long the window stays open after each Schedule + firing. Example: "8h". + schedule : str, default is Undefined, required + Schedule is a standard 5-field cron expression evaluated in UTC, or a + named shorthand such as @daily or @every 1h. It marks the start time of + each window occurrence. + Example: "0 22 * * 1-5" opens a window every weekday at 22:00 UTC. + """ + duration: str + + schedule: str + + check: + len(schedule) >= 1 + _regex_match(str(schedule), r"^(@(annually|yearly|monthly|weekly|daily|midnight|hourly)|@every [^\s]+.*|[^\s]+( [^\s]+){4})$") + schema ExternalSecretsIoV1ExternalSecretSpecTarget: r""" ExternalSecretTarget defines the Kubernetes Secret to be created, @@ -452,7 +502,7 @@ schema ExternalSecretsIoV1ExternalSecretSpecTarget: template : ExternalSecretsIoV1ExternalSecretSpecTargetTemplate, default is Undefined, optional template """ - creationPolicy?: "Owner" | "Orphan" | "Merge" | "None" = "Owner" + creationPolicy?: "Owner" | "Orphan" | "Merge" | "None" | "CreateOrMerge" = "Owner" deletionPolicy?: "Delete" | "Merge" | "Retain" = "Retain" immutable?: bool manifest?: ExternalSecretsIoV1ExternalSecretSpecTargetManifest @@ -460,8 +510,8 @@ schema ExternalSecretsIoV1ExternalSecretSpecTarget: template?: ExternalSecretsIoV1ExternalSecretSpecTargetTemplate check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1ExternalSecretSpecTargetManifest: @@ -549,11 +599,14 @@ schema ExternalSecretsIoV1ExternalSecretSpecTargetTemplateTemplateFromItems0: For Secret resources, common values are: "Data", "Annotations", "Labels". For custom resources (when spec.target.manifest is set), this supports nested paths like "spec.database.config" or "data". + valuesDecodingStrategy : str, default is "None", optional + Used to define a decoding Strategy for the rendered template values. """ configMap?: ExternalSecretsIoV1ExternalSecretSpecTargetTemplateTemplateFromItems0ConfigMap literal?: str secret?: ExternalSecretsIoV1ExternalSecretSpecTargetTemplateTemplateFromItems0Secret target?: str = "Data" + valuesDecodingStrategy?: "Auto" | "Base64" | "Base64URL" | "None" = "None" schema ExternalSecretsIoV1ExternalSecretSpecTargetTemplateTemplateFromItems0ConfigMap: r""" diff --git a/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_secret_store.k b/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_secret_store.k index cf555fa3..7fdc1bdb 100644 --- a/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_secret_store.k +++ b/docs/examples/src/charts/external_secrets/api/v1/external_secrets_io_v1_secret_store.k @@ -46,8 +46,10 @@ schema ExternalSecretsIoV1SecretStoreSpec: The ESO controller is instantiated with a specific controller name and filters ES based on this property provider : ExternalSecretsIoV1SecretStoreSpecProvider, default is Undefined, required provider - refreshInterval : int, default is Undefined, optional - Used to configure store refresh interval in seconds. Empty or 0 will default to the controller config. + refreshInterval : int | str, default is Undefined, optional + Used to configure store refresh interval. Accepts either an integer number + of seconds (legacy) or a Go duration string such as "1h" or "5m". Empty or + 0 will default to the controller config. retrySettings : ExternalSecretsIoV1SecretStoreSpecRetrySettings, default is Undefined, optional retry settings """ @@ -55,7 +57,7 @@ schema ExternalSecretsIoV1SecretStoreSpec: controller?: str provider: ExternalSecretsIoV1SecretStoreSpecProvider - refreshInterval?: int + refreshInterval?: int | str retrySettings?: ExternalSecretsIoV1SecretStoreSpecRetrySettings schema ExternalSecretsIoV1SecretStoreSpecConditionsItems0: @@ -77,9 +79,9 @@ schema ExternalSecretsIoV1SecretStoreSpecConditionsItems0: namespaces?: [str] check: - all i in namespaces {len(i) <= 63 if i not in [None, Undefined]} if namespaces - all i in namespaces {len(i) >= 1 if i not in [None, Undefined]} if namespaces - all i in namespaces {_regex_match(str(i), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if i} if namespaces + all namespaces in namespaces {len(namespaces) <= 63 if namespaces not in [None, Undefined]} if namespaces + all namespaces in namespaces {len(namespaces) >= 1 if namespaces not in [None, Undefined]} if namespaces + all namespaces in namespaces {_regex_match(str(namespaces), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespaces} if namespaces schema ExternalSecretsIoV1SecretStoreSpecConditionsItems0NamespaceSelector: r""" @@ -137,6 +139,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProvider: barbican beyondtrust : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrust, default is Undefined, optional beyondtrust + beyondtrustworkloadcredentials : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentials, default is Undefined, optional + beyondtrustworkloadcredentials bitwardensecretsmanager : ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanager, default is Undefined, optional bitwardensecretsmanager chef : ExternalSecretsIoV1SecretStoreSpecProviderChef, default is Undefined, optional @@ -145,6 +149,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProvider: cloudrusm conjur : ExternalSecretsIoV1SecretStoreSpecProviderConjur, default is Undefined, optional conjur + crd : ExternalSecretsIoV1SecretStoreSpecProviderCrd, default is Undefined, optional + crd delinea : ExternalSecretsIoV1SecretStoreSpecProviderDelinea, default is Undefined, optional delinea doppler : ExternalSecretsIoV1SecretStoreSpecProviderDoppler, default is Undefined, optional @@ -179,6 +185,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProvider: onepassword onepasswordSDK : ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDK, default is Undefined, optional onepassword s d k + openBao : ExternalSecretsIoV1SecretStoreSpecProviderOpenBao, default is Undefined, optional + open bao oracle : ExternalSecretsIoV1SecretStoreSpecProviderOracle, default is Undefined, optional oracle ovh : ExternalSecretsIoV1SecretStoreSpecProviderOvh, default is Undefined, optional @@ -213,10 +221,12 @@ schema ExternalSecretsIoV1SecretStoreSpecProvider: azurekv?: ExternalSecretsIoV1SecretStoreSpecProviderAzurekv barbican?: ExternalSecretsIoV1SecretStoreSpecProviderBarbican beyondtrust?: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrust + beyondtrustworkloadcredentials?: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentials bitwardensecretsmanager?: ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanager chef?: ExternalSecretsIoV1SecretStoreSpecProviderChef cloudrusm?: ExternalSecretsIoV1SecretStoreSpecProviderCloudrusm conjur?: ExternalSecretsIoV1SecretStoreSpecProviderConjur + crd?: ExternalSecretsIoV1SecretStoreSpecProviderCrd delinea?: ExternalSecretsIoV1SecretStoreSpecProviderDelinea doppler?: ExternalSecretsIoV1SecretStoreSpecProviderDoppler dvls?: ExternalSecretsIoV1SecretStoreSpecProviderDvls @@ -234,6 +244,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProvider: onboardbase?: ExternalSecretsIoV1SecretStoreSpecProviderOnboardbase onepassword?: ExternalSecretsIoV1SecretStoreSpecProviderOnepassword onepasswordSDK?: ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDK + openBao?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBao oracle?: ExternalSecretsIoV1SecretStoreSpecProviderOracle ovh?: ExternalSecretsIoV1SecretStoreSpecProviderOvh passbolt?: ExternalSecretsIoV1SecretStoreSpecProviderPassbolt @@ -265,6 +276,9 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeyless: are used to validate the TLS connection. caProvider : ExternalSecretsIoV1SecretStoreSpecProviderAkeylessCaProvider, default is Undefined, optional ca provider + ignoreCache : bool, default is Undefined, optional + IgnoreCache bypasses the Gateway cache for secret reads when true. + Only relevant when akeylessGWApiURL points to an Akeyless Gateway. """ akeylessGWApiURL: str @@ -272,6 +286,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeyless: caBundle?: str caProvider?: ExternalSecretsIoV1SecretStoreSpecProviderAkeylessCaProvider + ignoreCache?: bool schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRef: r""" @@ -283,9 +298,12 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRef: kubernetes auth secretRef : ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRef, default is Undefined, optional secret ref + serviceAccountRef : ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefServiceAccountRef, default is Undefined, optional + service account ref """ kubernetesAuth?: ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetesAuth secretRef?: ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRef + serviceAccountRef?: ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefServiceAccountRef schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetesAuth: r""" @@ -333,14 +351,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetes namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetesAuthServiceAccountRef: @@ -371,8 +389,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetes len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRef: @@ -413,14 +431,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefA namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefAccessType: @@ -444,14 +462,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefA namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefAccessTypeParam: @@ -475,14 +493,46 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefA namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessAuthSecretRefServiceAccountRef: + r""" + ServiceAccountRef specifies a Kubernetes ServiceAccount used for azure_ad + authentication on AKS Workload Identity. The operator obtains a federated + identity token from this ServiceAccount via the TokenRequest API instead + of using the ESO controller pod identity. Ignored for other access types. + + Attributes + ---------- + audiences : [str], default is Undefined, optional + Audience specifies the `aud` claim for the service account token + If the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity + then this audiences will be appended to the list + name : str, default is Undefined, required + The name of the ServiceAccount resource being referred to. + namespace : str, default is Undefined, optional + Namespace of the resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + audiences?: [str] + name: str + + namespace?: str + + check: + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessCaProvider: @@ -508,14 +558,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAkeylessCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAws: @@ -563,7 +613,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAws: role?: str secretsManager?: ExternalSecretsIoV1SecretStoreSpecProviderAwsSecretsManager - service: "SecretsManager" | "ParameterStore" + service: "SecretsManager" | "ParameterStore" | "CertificateManager" sessionTags?: [ExternalSecretsIoV1SecretStoreSpecProviderAwsSessionTagsItems0] sessionTagsPolicy?: "None" | "Simple" | "Custom" = "None" @@ -621,8 +671,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthJwtServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRef: @@ -663,14 +713,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRefAccessKeyIDSecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRefSecretAccessKeySecretRef: @@ -693,14 +743,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRefSecretAccessKey namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRefSessionTokenSecretRef: @@ -725,14 +775,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAwsAuthSecretRefSessionTokenSec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAwsSecretsManager: @@ -786,6 +836,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekv: Valid values are: - "ServicePrincipal" (default): Using a service principal (tenantId, clientId, clientSecret) - "ManagedIdentity": Using Managed Identity assigned to the pod (see aad-pod-identity) + - "WorkloadIdentity": Using a Kubernetes ServiceAccount federated with Entra ID customCloudConfig : ExternalSecretsIoV1SecretStoreSpecProviderAzurekvCustomCloudConfig, default is Undefined, optional custom cloud config environmentType : str, default is "PublicCloud", optional @@ -856,14 +907,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefClientCerti namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefClientID: @@ -886,14 +937,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefClientID: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefClientSecret: @@ -916,14 +967,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefClientSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefTenantID: @@ -946,14 +997,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvAuthSecretRefTenantID: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvCustomCloudConfig: @@ -1010,8 +1061,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderAzurekvServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBarbican: @@ -1085,14 +1136,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBarbicanAuthPasswordSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBarbicanAuthUsername: @@ -1130,14 +1181,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBarbicanAuthUsernameSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrust: @@ -1212,14 +1263,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthAPIKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthCertificate: @@ -1270,14 +1321,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthCertificateKeySe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthCertificateSecretRef: @@ -1300,14 +1351,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthCertificateSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthClientID: @@ -1344,14 +1395,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthClientIDSecretRe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthClientSecret: @@ -1388,14 +1439,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustAuthClientSecretSecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustServer: @@ -1428,6 +1479,153 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustServer: separator?: str verifyCA: bool +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentials: + r""" + BeyondtrustWorkloadCredentials configures this store to sync secrets using the BeyondTrust Workload Credentials provider. + + Attributes + ---------- + auth : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuth, default is Undefined, required + auth + caBundle : str, default is Undefined, optional + CABundle is a base64-encoded CA certificate used to validate the BeyondTrust Workload Credentials API TLS certificate. + Use this when your BeyondTrust instance uses a self-signed certificate or internal CA. + If not set, the system's trusted root certificates are used. + caProvider : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsCaProvider, default is Undefined, optional + ca provider + folderPath : str, default is Undefined, optional + FolderPath specifies the default folder path for secret retrieval. + Secrets will be fetched from this folder unless overridden in the ExternalSecret spec. + Example: "production/database" or "dev/api-keys" + Leave empty to retrieve secrets from the root folder. + For folder organization, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#folders + server : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsServer, default is Undefined, required + server + """ + auth: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuth + + caBundle?: str + caProvider?: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsCaProvider + folderPath?: str + server: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsServer + +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuth: + r""" + Auth configures how the Operator authenticates with the BeyondTrust Workload Credentials API. + Currently supports API key authentication via Kubernetes secret reference. + For authentication setup, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#authentication + + Attributes + ---------- + apikey : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikey, default is Undefined, required + apikey + """ + apikey: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikey + +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikey: + r""" + APIKey configures API token authentication for BeyondTrust Workload Credentials. + The token is retrieved from a Kubernetes secret and used as a Bearer token for API requests. + + Attributes + ---------- + token : ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikeyToken, default is Undefined, required + token + """ + token: ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikeyToken + +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsAuthApikeyToken: + r""" + Token references the Kubernetes secret containing the BeyondTrust Workload Credentials API token. + The secret should contain the API key used to authenticate with BeyondTrust Workload Credentials. + Create an API token in your BeyondTrust Workload Credentials console and store it in a Kubernetes secret. + For details on creating API tokens, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#authentication + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsCaProvider: + r""" + CAProvider points to a Secret or ConfigMap containing a PEM-encoded CA certificate. + This is used to validate the BeyondTrust Workload Credentials API TLS certificate. + Use this as an alternative to CABundle when you want to reference an existing Kubernetes resource. + + Attributes + ---------- + key : str, default is Undefined, optional + The key where the CA certificate can be found in the Secret or ConfigMap. + name : str, default is Undefined, required + The name of the object located at the provider type. + namespace : str, default is Undefined, optional + The namespace the Provider type is in. + Can only be defined when used in a ClusterSecretStore. + $type : str, default is Undefined, required + The type of provider to use such as "Secret", or "ConfigMap". + """ + key?: str + name: str + + namespace?: str + $type: "Secret" | "ConfigMap" + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderBeyondtrustworkloadcredentialsServer: + r""" + Server configures the BeyondTrust Workload Credentials server connection details. + Includes the API URL and Site ID for your BeyondTrust instance. + For API reference, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + + Attributes + ---------- + apiUrl : str, default is Undefined, required + APIURL is the base URL of your BeyondTrust Workload Credentials API server. + This should be the full URL to your BeyondTrust instance. + Example: https://api.beyondtrust.io/siie + For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#base-url + siteId : str, default is Undefined, required + SiteID is your BeyondTrust Workload Credentials site identifier (UUID format). + This identifier is unique to your BeyondTrust Workload Credentials instance. + You can find your Site ID in the BeyondTrust Workload Credentials admin console. + Example: a1b2c3d4-e5f6-4890-abcd-ef1234567890 + For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + """ + apiUrl: str + + siteId: str + schema ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanager: r""" BitwardenSecretsManager configures this store to sync secrets using BitwardenSecretsManager provider @@ -1506,14 +1704,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanagerAuthSecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanagerCaProvider: @@ -1539,14 +1737,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderBitwardensecretsmanagerCaProvid $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderChef: @@ -1610,14 +1808,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderChefAuthSecretRefPrivateKeySecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderCloudrusm: @@ -1681,14 +1879,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderCloudrusmAuthSecretRefAccessKey namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderCloudrusmAuthSecretRefAccessKeySecretSecretRef: @@ -1711,14 +1909,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderCloudrusmAuthSecretRefAccessKey namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderConjur: @@ -1750,10 +1948,13 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuth: ---------- apikey : ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikey, default is Undefined, optional apikey + cert : ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCert, default is Undefined, optional + cert jwt : ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwt, default is Undefined, optional jwt """ apikey?: ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikey + cert?: ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCert jwt?: ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwt schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikey: @@ -1796,14 +1997,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikeyAPIKeyRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikeyUserRef: @@ -1827,14 +2028,102 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthApikeyUserRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCert: + r""" + Cert enables certificate-based authentication using a client certificate and key. + + Attributes + ---------- + account : str, default is Undefined, required + Account is the Conjur organization account name. + clientCertRef : ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientCertRef, default is Undefined, required + client cert ref + clientKeyRef : ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientKeyRef, default is Undefined, required + client key ref + hostId : str, default is Undefined, optional + Optional HostID for cert authentication (can be omitted when using 'spiffe' mode). + serviceID : str, default is Undefined, required + The conjur authn cert webservice id + """ + account: str + + clientCertRef: ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientCertRef + + clientKeyRef: ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientKeyRef + + hostId?: str + serviceID: str + +schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientCertRef: + r""" + ClientCertRef is a reference to a specific 'key' containing the client certificate + within a Secret resource. The certificate must be PEM-encoded. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthCertClientKeyRef: + r""" + ClientKeyRef is a reference to a specific 'key' containing the private RSA client key + within a Secret resource. The key must be PEM-encoded. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwt: @@ -1883,14 +2172,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwtSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwtServiceAccountRef: @@ -1919,15 +2208,318 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurAuthJwtServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace -schema ExternalSecretsIoV1SecretStoreSpecProviderConjurCaProvider: +schema ExternalSecretsIoV1SecretStoreSpecProviderConjurCaProvider: + r""" + Used to provide custom certificate authority (CA) certificates + for a secret store. The CAProvider points to a Secret or ConfigMap resource + that contains a PEM-encoded certificate. + + Attributes + ---------- + key : str, default is Undefined, optional + The key where the CA certificate can be found in the Secret or ConfigMap. + name : str, default is Undefined, required + The name of the object located at the provider type. + namespace : str, default is Undefined, optional + The namespace the Provider type is in. + Can only be defined when used in a ClusterSecretStore. + $type : str, default is Undefined, required + The type of provider to use such as "Secret", or "ConfigMap". + """ + key?: str + name: str + + namespace?: str + $type: "Secret" | "ConfigMap" + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrd: + r""" + CRD configures this store to sync secrets from arbitrary Kubernetes resources, + including both custom resources (CRDs) and core API resources. Resources are + selected by API group, version and kind, where group can be "" (empty string) + for core resources such as ConfigMap. Reading the core v1 Secret is + intentionally blocked — use the Kubernetes provider for that. + + Attributes + ---------- + auth : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuth, default is Undefined, optional + auth + authRef : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthRef, default is Undefined, optional + auth ref + resource : ExternalSecretsIoV1SecretStoreSpecProviderCrdResource, default is Undefined, required + resource + server : ExternalSecretsIoV1SecretStoreSpecProviderCrdServer, default is Undefined, optional + server + whitelist : ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelist, default is Undefined, optional + whitelist + """ + auth?: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuth + authRef?: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthRef + resource: ExternalSecretsIoV1SecretStoreSpecProviderCrdResource + + server?: ExternalSecretsIoV1SecretStoreSpecProviderCrdServer + whitelist?: ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelist + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuth: + r""" + Auth configures authentication to the Kubernetes API, same as the + Kubernetes provider. Required when Server.URL is set (unless using AuthRef). + + Attributes + ---------- + cert : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCert, default is Undefined, optional + cert + serviceAccount : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthServiceAccount, default is Undefined, optional + service account + token : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthToken, default is Undefined, optional + token + """ + cert?: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCert + serviceAccount?: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthServiceAccount + token?: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthToken + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCert: + r""" + has both clientCert and clientKey as secretKeySelector + + Attributes + ---------- + clientCert : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientCert, default is Undefined, required + client cert + clientKey : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientKey, default is Undefined, required + client key + """ + clientCert: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientCert + + clientKey: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientKey + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientCert: + r""" + SecretKeySelector is a reference to a specific 'key' within a Secret resource. + In some instances, `key` is a required field. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthCertClientKey: + r""" + SecretKeySelector is a reference to a specific 'key' within a Secret resource. + In some instances, `key` is a required field. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthRef: + r""" + AuthRef references a Secret containing a kubeconfig. Same semantics as the + Kubernetes provider. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthServiceAccount: + r""" + points to a service account that should be used for authentication + + Attributes + ---------- + audiences : [str], default is Undefined, optional + Audience specifies the `aud` claim for the service account token + If the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity + then this audiences will be appended to the list + name : str, default is Undefined, required + The name of the ServiceAccount resource being referred to. + namespace : str, default is Undefined, optional + Namespace of the resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + audiences?: [str] + name: str + + namespace?: str + + check: + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthToken: + r""" + use static token to authenticate with + + Attributes + ---------- + bearerToken : ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthTokenBearerToken, default is Undefined, required + bearer token + """ + bearerToken: ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthTokenBearerToken + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdAuthTokenBearerToken: + r""" + SecretKeySelector is a reference to a specific 'key' within a Secret resource. + In some instances, `key` is a required field. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdResource: + r""" + Resource identifies the CRD by its API group, version and kind. + + Attributes + ---------- + group : str, default is Undefined, required + Group is the API group of the resource. Use "" (empty string) for core + Kubernetes resources such as ConfigMap; use e.g. "config.example.io" + for a CRD. The field is required to be present in the manifest — write + `group: ""` explicitly for core resources so typos fail at admission + time rather than later at discovery. + kind : str, default is Undefined, required + Kind is the Kubernetes resource kind (e.g. "MyCustomResource"). + version : str, default is Undefined, required + Version is the API version of the resource (e.g. "v1alpha1"). + """ + group: str + + kind: str + + version: str + + check: + len(kind) >= 1 + len(version) >= 1 + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdServer: + r""" + Server configures the Kubernetes API address and TLS trust, same as the + Kubernetes provider. When omitted, the URL defaults to the in-cluster API. + + Attributes + ---------- + caBundle : str, default is Undefined, optional + CABundle is a base64-encoded CA certificate + caProvider : ExternalSecretsIoV1SecretStoreSpecProviderCrdServerCaProvider, default is Undefined, optional + ca provider + url : str, default is "kubernetes.default", optional + configures the Kubernetes server Address. + """ + caBundle?: str + caProvider?: ExternalSecretsIoV1SecretStoreSpecProviderCrdServerCaProvider + url?: str = "kubernetes.default" + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdServerCaProvider: r""" - Used to provide custom certificate authority (CA) certificates - for a secret store. The CAProvider points to a Secret or ConfigMap resource - that contains a PEM-encoded certificate. + see: https://external-secrets.io/latest/spec/#external-secrets.io/v1alpha1.CAProvider Attributes ---------- @@ -1948,16 +2540,51 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderConjurCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelist: + r""" + Whitelist optionally restricts which object names and requested properties + are allowed to be read. + + Attributes + ---------- + rules : [ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelistRulesItems0], default is Undefined, optional + Rules is a list of allow rules. If rules are set, at least one rule must + match for a request to be allowed. + """ + rules?: [ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelistRulesItems0] + +schema ExternalSecretsIoV1SecretStoreSpecProviderCrdWhitelistRulesItems0: + r""" + CRDProviderWhitelistRule defines a single allow rule for CRD reads. + + Attributes + ---------- + name : str, default is Undefined, optional + Name is an optional regular expression matched against the bare object name. + For both SecretStore and ClusterSecretStore this is always the object name + without any namespace prefix (e.g. "my-db-spec", not "prod/my-db-spec"). + namespace : str, default is Undefined, optional + Namespace is an optional regular expression matched against the namespace of + the object. Applies only when a ClusterSecretStore is used; it is ignored + for SecretStore (where the namespace is fixed to the store namespace). + properties : [str], default is Undefined, optional + Properties is an optional list of regular expressions matched against + requested property keys (for example: "spec.secretValue"). + """ + name?: str + namespace?: str + properties?: [str] + schema ExternalSecretsIoV1SecretStoreSpecProviderDelinea: r""" Delinea DevOps Secrets Vault @@ -2021,14 +2648,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDelineaClientIDSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderDelineaClientSecret: @@ -2065,14 +2692,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDelineaClientSecretSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderDoppler: @@ -2157,8 +2784,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDopplerAuthOidcConfigServiceAcc len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderDopplerAuthSecretRef: @@ -2194,14 +2821,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDopplerAuthSecretRefDopplerToke namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderDvls: @@ -2275,14 +2902,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDvlsAuthSecretRefAppID: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderDvlsAuthSecretRefAppSecret: @@ -2305,14 +2932,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderDvlsAuthSecretRefAppSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderFake: @@ -2394,14 +3021,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderFortanixAPIKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsm: @@ -2476,14 +3103,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthSecretRefSecretAccessK namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentity: @@ -2545,7 +3172,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFedera serviceAccountRef?: ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFederationServiceAccountRef check: - len(gcpServiceAccountEmail) >= 1 if gcpServiceAccountEmail not in [None, Undefined] + len(gcpServiceAccountEmail) >= 1 if gcpServiceAccountEmail _regex_match(str(gcpServiceAccountEmail), r"^.*@.*\.iam\.gserviceaccount\.com$") if gcpServiceAccountEmail schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFederationAwsSecurityCredentials: @@ -2592,8 +3219,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFedera len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFederationCredConfig: @@ -2624,8 +3251,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFedera len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFederationServiceAccountRef: @@ -2654,8 +3281,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityFedera len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityServiceAccountRef: @@ -2683,8 +3310,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityServic len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGithub: @@ -2762,14 +3389,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGithubAuthPrivateKey: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGitlab: @@ -2848,14 +3475,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGitlabAuthSecretRefAccessToken: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderGitlabCaProvider: @@ -2881,14 +3508,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderGitlabCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderIbm: @@ -2972,14 +3599,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderIbmAuthSecretRefSecretAPIKeySec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisical: @@ -3077,14 +3704,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthAwsAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthAzureAuthCredentials: @@ -3123,14 +3750,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthAzureAuthCredentia namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthAzureAuthCredentialsResource: @@ -3154,14 +3781,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthAzureAuthCredentia namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIDTokenAuthCredentials: @@ -3196,14 +3823,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIDTokenAuthCred namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIamAuthCredentials: @@ -3242,14 +3869,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIamAuthCredenti namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIamAuthCredentialsServiceAccountKeyFilePath: @@ -3273,14 +3900,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthGcpIamAuthCredenti namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthJwtAuthCredentials: @@ -3319,14 +3946,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthJwtAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthJwtAuthCredentialsJwt: @@ -3350,14 +3977,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthJwtAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthKubernetesAuthCredentials: @@ -3396,14 +4023,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthKubernetesAuthCred namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthKubernetesAuthCredentialsServiceAccountTokenPath: @@ -3427,14 +4054,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthKubernetesAuthCred namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredentials: @@ -3477,14 +4104,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredential namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredentialsLdapPassword: @@ -3508,14 +4135,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredential namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredentialsLdapUsername: @@ -3539,14 +4166,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthLdapAuthCredential namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials: @@ -3604,14 +4231,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsIdentityID: @@ -3635,14 +4262,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsPrivateKey: @@ -3666,14 +4293,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsPrivateKeyPassphrase: @@ -3697,14 +4324,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsRegion: @@ -3728,14 +4355,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsTenancyID: @@ -3759,14 +4386,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentialsUserID: @@ -3790,14 +4417,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthOciAuthCredentials namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthTokenAuthCredentials: @@ -3832,14 +4459,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthTokenAuthCredentia namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthUniversalAuthCredentials: @@ -3878,14 +4505,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthUniversalAuthCrede namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthUniversalAuthCredentialsClientSecret: @@ -3909,14 +4536,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalAuthUniversalAuthCrede namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalCaProvider: @@ -3944,14 +4571,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalSecretsScope: @@ -3964,6 +4591,9 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalSecretsScope: EnvironmentSlug is the required slug identifier for the environment. expandSecretReferences : bool, default is True, optional ExpandSecretReferences indicates whether secret references should be expanded. Defaults to true if not provided. + organizationSlug : str, default is Undefined, optional + OrganizationSlug is the optional slug that identifies the organization that will be used + during authentication. Useful for sub-organization setups projectSlug : str, default is Undefined, required ProjectSlug is the required slug identifier for the project. recursive : bool, default is Undefined, optional @@ -3974,6 +4604,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderInfisicalSecretsScope: environmentSlug: str expandSecretReferences?: bool = True + organizationSlug?: str projectSlug: str recursive?: bool = False @@ -4019,14 +4650,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKeepersecurityAuthRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetes: @@ -4050,8 +4681,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetes: server?: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesServer check: - len(remoteNamespace) <= 63 if remoteNamespace not in [None, Undefined] - len(remoteNamespace) >= 1 if remoteNamespace not in [None, Undefined] + len(remoteNamespace) <= 63 if remoteNamespace + len(remoteNamespace) >= 1 if remoteNamespace _regex_match(str(remoteNamespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if remoteNamespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuth: @@ -4077,13 +4708,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCert: Attributes ---------- - clientCert : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert, default is Undefined, optional + clientCert : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert, default is Undefined, required client cert - clientKey : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey, default is Undefined, optional + clientKey : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey, default is Undefined, required client key """ - clientCert?: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert - clientKey?: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey + clientCert: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert + + clientKey: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert: r""" @@ -4106,14 +4738,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientCert: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey: @@ -4137,14 +4769,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthCertClientKey: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthRef: @@ -4167,14 +4799,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthServiceAccount: @@ -4202,8 +4834,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthServiceAccount: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthToken: @@ -4212,10 +4844,10 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthToken: Attributes ---------- - bearerToken : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken, default is Undefined, optional + bearerToken : ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken, default is Undefined, required bearer token """ - bearerToken?: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken + bearerToken: ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken: r""" @@ -4238,14 +4870,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesAuthTokenBearerToken: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesServer: @@ -4267,7 +4899,7 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesServer: schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesServerCaProvider: r""" - see: https://external-secrets.io/v0.4.1/spec/#external-secrets.io/v1alpha1.CAProvider + see: https://external-secrets.io/latest/spec/#external-secrets.io/v1alpha1.CAProvider Attributes ---------- @@ -4288,14 +4920,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderKubernetesServerCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysterybox: @@ -4363,14 +4995,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysteryboxAuthServiceAcco namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysteryboxAuthTokenSecretRef: @@ -4393,14 +5025,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysteryboxAuthTokenSecret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysteryboxCaProvider: @@ -4435,14 +5067,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderNebiusmysteryboxCaProviderCertS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderNgrok: @@ -4505,14 +5137,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderNgrokAuthAPIKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderNgrokVault: @@ -4585,14 +5217,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOnboardbaseAuthAPIKeyRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOnboardbaseAuthPasscodeRef: @@ -4615,14 +5247,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOnboardbaseAuthPasscodeRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOnepassword: @@ -4686,14 +5318,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordAuthSecretRefConnect namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDK: @@ -4748,14 +5380,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDKAuthServiceAccoun namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDKCache: @@ -4796,6 +5428,288 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOnepasswordSDKIntegrationInfo: name?: str = "1Password SDK" version?: str = "v1.0.0" +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBao: + r""" + OpenBao configures this store to sync secrets using the OpenBao provider. + + Attributes + ---------- + auth : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuth, default is Undefined, optional + auth + caBundle : str, default is Undefined, optional + PEM encoded CA bundle used to validate the OpenBao server certificate. If + this and `caProvider` are not set the system root certificates are used + to validate the TLS connection. + caProvider : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoCaProvider, default is Undefined, optional + ca provider + namespace : str, default is Undefined, optional + Name of the [OpenBao Namespace]. Namespaces is a set of features within + OpenBao that allows OpenBao environments to support secure multi-tenancy. + e.g: "ns1". + + [OpenBao Namespace]: https://openbao.org/docs/concepts/namespaces/ + path : str, default is Undefined, optional + Path is the mount path of the OpenBao KV backend endpoint, e.g: + "secret". The v2 KV secret engine version specific "/data" path suffix + for fetching secrets from OpenBao is optional and will be appended + if not present in specified path. + server : str, default is Undefined, required + Server is the connection address for the OpenBao server, e.g: `https://openbao.example.com:8200`. + version : str, default is "v2", optional + Version is the OpenBao KV secret engine version. This can be either "v1" or + "v2". Version defaults to "v2". + """ + auth?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuth + caBundle?: str + caProvider?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoCaProvider + namespace?: str + path?: str + server: str + + version?: "v1" | "v2" = "v2" + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuth: + r""" + Auth configures how secret-manager authenticates with the OpenBao server. + + Attributes + ---------- + appRole : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRole, default is Undefined, optional + app role + namespace : str, default is Undefined, optional + Name of the [OpenBao Namespace] to authenticate to. This can be different + than the namespace your secret is in. Namespaces is a set of features + within OpenBao that allows OpenBao environments to support secure + multi-tenancy. e.g: "ns1". This will default to OpenBao.Namespace field + if set, or empty otherwise + + [OpenBao Namespace]: https://openbao.org/docs/concepts/namespaces/ + tokenSecretRef : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthTokenSecretRef, default is Undefined, optional + token secret ref + userPass : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPass, default is Undefined, optional + user pass + """ + appRole?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRole + namespace?: str + tokenSecretRef?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthTokenSecretRef + userPass?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPass + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRole: + r""" + AppRole authenticates with OpenBao using the [App Role auth mechanism], + with the role and secret stored in a Kubernetes Secret resource. + + [App Role auth mechanism]: https://openbao.org/docs/auth/approle/ + + Attributes + ---------- + path : str, default is "approle", required + Path where the App Role authentication backend is mounted + in OpenBao, e.g: "approle" + roleId : str, default is Undefined, optional + RoleID configured in the App Role authentication backend when setting + up the authentication backend in OpenBao. + roleRef : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleRoleRef, default is Undefined, optional + role ref + secretRef : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleSecretRef, default is Undefined, required + secret ref + """ + path: str = "approle" + + roleId?: str + roleRef?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleRoleRef + secretRef: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleSecretRef + + check: + len(roleId) >= 1 if roleId + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleRoleRef: + r""" + Reference to a key in a Secret that contains the App Role ID used + to authenticate with OpenBao. + The `key` field must be specified and denotes which entry within the Secret + resource is used as the app role id. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthAppRoleSecretRef: + r""" + Reference to a key in a Secret that contains the App Role secret used + to authenticate with OpenBao. + The `key` field must be specified and denotes which entry within the Secret + resource is used as the app role secret. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthTokenSecretRef: + r""" + TokenSecretRef authenticates with OpenBao by presenting a token. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPass: + r""" + UserPass authenticates with OpenBao by passing a username/password pair + + Attributes + ---------- + path : str, default is "userpass", required + Path where the UserPassword authentication backend is mounted + in OpenBao, e.g: "userpass" + secretRef : ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPassSecretRef, default is Undefined, optional + secret ref + username : str, default is Undefined, required + Username is a username used to authenticate using the [UserPass + authentication method] + + [UserPass authentication method]: https://openbao.org/docs/auth/userpass/ + """ + path: str = "userpass" + + secretRef?: ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPassSecretRef + username: str + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoAuthUserPassSecretRef: + r""" + SecretRef to a key in a Secret resource containing password for the user + used to authenticate with OpenBao using the [UserPass authentication + method] + + [UserPass authentication method]: https://openbao.org/docs/auth/userpass/ + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderOpenBaoCaProvider: + r""" + The provider for the CA bundle to use to validate OpenBao server + certificate. If this and `caBundle` are not set the system root + certificates are used to validate the TLS connection. + + Attributes + ---------- + key : str, default is Undefined, optional + The key where the CA certificate can be found in the Secret or ConfigMap. + name : str, default is Undefined, required + The name of the object located at the provider type. + namespace : str, default is Undefined, optional + The namespace the Provider type is in. + Can only be defined when used in a ClusterSecretStore. + $type : str, default is Undefined, required + The type of provider to use such as "Secret", or "ConfigMap". + """ + key?: str + name: str + + namespace?: str + $type: "Secret" | "ConfigMap" + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + schema ExternalSecretsIoV1SecretStoreSpecProviderOracle: r""" Oracle configures this store to sync secrets using Oracle Vault provider @@ -4885,14 +5799,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOracleAuthSecretRefFingerprint: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOracleAuthSecretRefPrivatekey: @@ -4915,14 +5829,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOracleAuthSecretRefPrivatekey: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOracleServiceAccountRef: @@ -4951,8 +5865,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOracleServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOvh: @@ -5042,14 +5956,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthMtlsCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthMtlsCertSecretRef: @@ -5073,14 +5987,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthMtlsCertSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthMtlsKeySecretRef: @@ -5104,14 +6018,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthMtlsKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthToken: @@ -5146,14 +6060,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderOvhAuthTokenTokenSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPassbolt: @@ -5216,14 +6130,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPassboltAuthPasswordSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPassboltAuthPrivateKeySecretRef: @@ -5247,14 +6161,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPassboltAuthPrivateKeySecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPassboltCaProvider: @@ -5280,14 +6194,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPassboltCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPassworddepot: @@ -5351,14 +6265,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPassworddepotAuthSecretRefCrede namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPrevider: @@ -5418,14 +6332,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPreviderAuthSecretRefAccessToke namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPulumi: @@ -5493,14 +6407,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPulumiAccessTokenSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPulumiAuth: @@ -5549,14 +6463,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPulumiAuthAccessTokenSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderPulumiAuthOidcConfig: @@ -5606,8 +6520,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderPulumiAuthOidcConfigServiceAcco len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderScaleway: @@ -5670,14 +6584,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderScalewayAccessKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderScalewaySecretKey: @@ -5714,14 +6628,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderScalewaySecretKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserver: @@ -5739,22 +6653,24 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserver: ca provider domain : str, default is Undefined, optional Domain is the secret server domain. - password : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword, default is Undefined, required + password : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword, default is Undefined, optional password serverURL : str, default is Undefined, required ServerURL URL to your secret server installation - username : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername, default is Undefined, required + token : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverToken, default is Undefined, optional + token + username : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername, default is Undefined, optional username """ caBundle?: str caProvider?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverCaProvider domain?: str - password: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword - + password?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword serverURL: str - username: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername + token?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverToken + username?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverCaProvider: r""" @@ -5779,19 +6695,20 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword: r""" Password is the secret server account password. + Required unless Token is set. Attributes ---------- @@ -5803,6 +6720,9 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPassword: secretRef?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPasswordSecretRef value?: str + check: + len(value) >= 1 if value + schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPasswordSecretRef: r""" SecretRef references a key in a secret that will be used as value. @@ -5823,19 +6743,69 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverPasswordSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverToken: + r""" + Token is an access token used to authenticate to the secret server, + as an alternative to Username and Password. When set, Username and + Password are not required and are ignored. + + Attributes + ---------- + secretRef : ExternalSecretsIoV1SecretStoreSpecProviderSecretserverTokenSecretRef, default is Undefined, optional + secret ref + value : str, default is Undefined, optional + Value can be specified directly to set a value without using a secret. + """ + secretRef?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverTokenSecretRef + value?: str + + check: + len(value) >= 1 if value + +schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverTokenSecretRef: + r""" + SecretRef references a key in a secret that will be used as value. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername: r""" Username is the secret server account username. + Required unless Token is set. Attributes ---------- @@ -5847,6 +6817,9 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsername: secretRef?: ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsernameSecretRef value?: str + check: + len(value) >= 1 if value + schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsernameSecretRef: r""" SecretRef references a key in a secret that will be used as value. @@ -5867,14 +6840,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSecretserverUsernameSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderSenhasegura: @@ -5935,14 +6908,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderSenhaseguraAuthClientSecretSecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVault: @@ -6094,14 +7067,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthAppRoleRoleRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthAppRoleSecretRef: @@ -6127,14 +7100,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthAppRoleSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthCert: @@ -6180,14 +7153,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthCertClientCert: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthCertSecretRef: @@ -6211,14 +7184,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthCertSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcp: @@ -6283,14 +7256,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcpSecretRefSecretAcce namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcpServiceAccountRef: @@ -6318,8 +7291,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcpServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcpWorkloadIdentity: @@ -6370,8 +7343,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthGcpWorkloadIdentitySer len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIam: @@ -6443,8 +7416,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamJwtServiceAccountRe len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRef: @@ -6484,14 +7457,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRefAccessKeyI namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRefSecretAccessKeySecretRef: @@ -6514,14 +7487,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRefSecretAcce namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRefSessionTokenSecretRef: @@ -6546,14 +7519,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthIamSecretRefSessionTok namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthJwt: @@ -6632,8 +7605,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthJwtKubernetesServiceAc len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthJwtSecretRef: @@ -6657,14 +7630,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthJwtSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthKubernetes: @@ -6715,14 +7688,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthKubernetesSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthKubernetesServiceAccountRef: @@ -6753,8 +7726,8 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthKubernetesServiceAccou len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthLdap: @@ -6800,14 +7773,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthLdapSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthTokenSecretRef: @@ -6830,14 +7803,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthTokenSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthUserPass: @@ -6882,14 +7855,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultAuthUserPassSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultCaProvider: @@ -6915,14 +7888,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultCheckAndSet: @@ -6979,14 +7952,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultTLSCertSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVaultTLSKeySecretRef: @@ -7011,14 +7984,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVaultTLSKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengine: @@ -7087,14 +8060,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengineAuthSecretRefAccessKe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengineAuthSecretRefSecretAccessKey: @@ -7117,14 +8090,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengineAuthSecretRefSecretAc namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengineAuthSecretRefToken: @@ -7147,14 +8120,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderVolcengineAuthSecretRefToken: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderWebhook: @@ -7246,14 +8219,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookAuthNtlmPasswordSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookAuthNtlmUsernameSecret: @@ -7277,14 +8250,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookAuthNtlmUsernameSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookCaProvider: @@ -7309,14 +8282,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookResult: @@ -7365,14 +8338,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderWebhookSecretsItems0SecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderYandexcertificatemanager: @@ -7427,14 +8400,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderYandexcertificatemanagerAuthAut namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderYandexcertificatemanagerCaProvider: @@ -7469,14 +8442,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderYandexcertificatemanagerCaProvi namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderYandexcertificatemanagerFetching: @@ -7556,14 +8529,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderYandexlockboxAuthAuthorizedKeyS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderYandexlockboxCaProvider: @@ -7598,14 +8571,14 @@ schema ExternalSecretsIoV1SecretStoreSpecProviderYandexlockboxCaProviderCertSecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1SecretStoreSpecProviderYandexlockboxFetching: diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_cluster_push_secret.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_cluster_push_secret.k index 2836e2c1..cf3a28dd 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_cluster_push_secret.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_cluster_push_secret.k @@ -59,8 +59,8 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpec: refreshTime?: str check: - len(pushSecretName) <= 253 if pushSecretName not in [None, Undefined] - len(pushSecretName) >= 1 if pushSecretName not in [None, Undefined] + len(pushSecretName) <= 253 if pushSecretName + len(pushSecretName) >= 1 if pushSecretName _regex_match(str(pushSecretName), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if pushSecretName schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecNamespaceSelectorsItems0: @@ -305,8 +305,8 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecDataToItems0S name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecDataToItems0StoreRefLabelSelector: @@ -367,8 +367,8 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSecretStoreRe name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSecretStoreRefsItems0LabelSelector: @@ -439,7 +439,7 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSelectorGener Specify the name of the generator resource """ apiVersion?: str = "generators.external-secrets.io/v1alpha1" - kind: "ACRAccessToken" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" + kind: "ACRAccessToken" | "BeyondtrustWorkloadCredentialsDynamicSecret" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "GitlabDeployToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" name: str @@ -464,8 +464,8 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSelectorSecre selector?: ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSelectorSecretSelector check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecSelectorSecretSelector: @@ -571,11 +571,14 @@ schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecTemplateTempl For Secret resources, common values are: "Data", "Annotations", "Labels". For custom resources (when spec.target.manifest is set), this supports nested paths like "spec.database.config" or "data". + valuesDecodingStrategy : str, default is "None", optional + Used to define a decoding Strategy for the rendered template values. """ configMap?: ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecTemplateTemplateFromItems0ConfigMap literal?: str secret?: ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecTemplateTemplateFromItems0Secret target?: str = "Data" + valuesDecodingStrategy?: "Auto" | "Base64" | "Base64URL" | "None" = "None" schema ExternalSecretsIoV1alpha1ClusterPushSecretSpecPushSecretSpecTemplateTemplateFromItems0ConfigMap: r""" diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_push_secret.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_push_secret.k index 492310d0..ccc0eacb 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_push_secret.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/external_secrets_io_v1alpha1_push_secret.k @@ -219,8 +219,8 @@ schema ExternalSecretsIoV1alpha1PushSecretSpecDataToItems0StoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1PushSecretSpecDataToItems0StoreRefLabelSelector: @@ -281,8 +281,8 @@ schema ExternalSecretsIoV1alpha1PushSecretSpecSecretStoreRefsItems0: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1PushSecretSpecSecretStoreRefsItems0LabelSelector: @@ -353,7 +353,7 @@ schema ExternalSecretsIoV1alpha1PushSecretSpecSelectorGeneratorRef: Specify the name of the generator resource """ apiVersion?: str = "generators.external-secrets.io/v1alpha1" - kind: "ACRAccessToken" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" + kind: "ACRAccessToken" | "BeyondtrustWorkloadCredentialsDynamicSecret" | "ClusterGenerator" | "CloudsmithAccessToken" | "ECRAuthorizationToken" | "Fake" | "GCRAccessToken" | "GithubAccessToken" | "GitlabDeployToken" | "QuayAccessToken" | "Password" | "SSHKey" | "STSSessionToken" | "UUID" | "VaultDynamicSecret" | "Webhook" | "Grafana" | "MFA" name: str @@ -378,8 +378,8 @@ schema ExternalSecretsIoV1alpha1PushSecretSpecSelectorSecret: selector?: ExternalSecretsIoV1alpha1PushSecretSpecSelectorSecretSelector check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1alpha1PushSecretSpecSelectorSecretSelector: @@ -485,11 +485,14 @@ schema ExternalSecretsIoV1alpha1PushSecretSpecTemplateTemplateFromItems0: For Secret resources, common values are: "Data", "Annotations", "Labels". For custom resources (when spec.target.manifest is set), this supports nested paths like "spec.database.config" or "data". + valuesDecodingStrategy : str, default is "None", optional + Used to define a decoding Strategy for the rendered template values. """ configMap?: ExternalSecretsIoV1alpha1PushSecretSpecTemplateTemplateFromItems0ConfigMap literal?: str secret?: ExternalSecretsIoV1alpha1PushSecretSpecTemplateTemplateFromItems0Secret target?: str = "Data" + valuesDecodingStrategy?: "Auto" | "Base64" | "Base64URL" | "None" = "None" schema ExternalSecretsIoV1alpha1PushSecretSpecTemplateTemplateFromItems0ConfigMap: r""" diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_a_c_r_access_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_a_c_r_access_token.k index c45a2ed0..cc63200d 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_a_c_r_access_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_a_c_r_access_token.k @@ -150,14 +150,14 @@ schema GeneratorsExternalSecretsIoV1alpha1ACRAccessTokenSpecAuthServicePrincipal namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1ACRAccessTokenSpecAuthServicePrincipalSecretRefClientSecret: @@ -180,14 +180,14 @@ schema GeneratorsExternalSecretsIoV1alpha1ACRAccessTokenSpecAuthServicePrincipal namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1ACRAccessTokenSpecAuthWorkloadIdentity: @@ -227,7 +227,7 @@ schema GeneratorsExternalSecretsIoV1alpha1ACRAccessTokenSpecAuthWorkloadIdentity len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_beyondtrust_workload_credentials_dynamic_secret.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_beyondtrust_workload_credentials_dynamic_secret.k new file mode 100644 index 00000000..5b1840a8 --- /dev/null +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_beyondtrust_workload_credentials_dynamic_secret.k @@ -0,0 +1,223 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" + +import regex +import k8s.apimachinery.pkg.apis.meta.v1 + +_regex_match = regex.match + +schema BeyondtrustWorkloadCredentialsDynamicSecret: + r""" + BeyondtrustWorkloadCredentialsDynamicSecret represents a generator that requests dynamic credentials from BeyondTrust Workload Credentials. + This generator calls the BeyondTrust Workload Credentials API to generate fresh, temporary credentials + (such as AWS STS credentials) each time an ExternalSecret is refreshed. + Dynamic secret definitions must be created in BeyondTrust Workload Credentials before they can be referenced. + For complete documentation, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + + Attributes + ---------- + apiVersion : str, default is "generators.external-secrets.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "BeyondtrustWorkloadCredentialsDynamicSecret", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpec, default is Undefined, optional + spec + """ + apiVersion: "generators.external-secrets.io/v1alpha1" = "generators.external-secrets.io/v1alpha1" + + kind: "BeyondtrustWorkloadCredentialsDynamicSecret" = "BeyondtrustWorkloadCredentialsDynamicSecret" + + metadata?: v1.ObjectMeta + spec?: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpec + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpec: + r""" + BeyondtrustWorkloadCredentialsDynamicSecretSpec defines the desired spec for BeyondtrustWorkloadCredentials dynamic generator. + This generator enables obtaining temporary, short-lived credentials from BeyondTrust Workload Credentials. + For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + + Attributes + ---------- + controller : str, default is Undefined, optional + Controller selects the controller that should handle this generator. + Leave empty to use the default controller. + provider : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProvider, default is Undefined, required + provider + retrySettings : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecRetrySettings, default is Undefined, optional + retry settings + """ + controller?: str + provider: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProvider + + retrySettings?: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecRetrySettings + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProvider: + r""" + Provider contains the BeyondtrustWorkloadCredentials provider configuration including authentication, + server connection details, and the folder path to the dynamic secret definition. + The folderPath should point to a dynamic secret definition that has been created in + BeyondTrust Workload Credentials (e.g., "production/aws-temp"). + For setup details, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + + Attributes + ---------- + auth : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuth, default is Undefined, required + auth + caBundle : str, default is Undefined, optional + CABundle is a base64-encoded CA certificate used to validate the BeyondTrust Workload Credentials API TLS certificate. + Use this when your BeyondTrust instance uses a self-signed certificate or internal CA. + If not set, the system's trusted root certificates are used. + caProvider : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderCaProvider, default is Undefined, optional + ca provider + folderPath : str, default is Undefined, optional + FolderPath specifies the default folder path for secret retrieval. + Secrets will be fetched from this folder unless overridden in the ExternalSecret spec. + Example: "production/database" or "dev/api-keys" + Leave empty to retrieve secrets from the root folder. + For folder organization, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#folders + server : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderServer, default is Undefined, required + server + """ + auth: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuth + + caBundle?: str + caProvider?: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderCaProvider + folderPath?: str + server: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderServer + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuth: + r""" + Auth configures how the Operator authenticates with the BeyondTrust Workload Credentials API. + Currently supports API key authentication via Kubernetes secret reference. + For authentication setup, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#authentication + + Attributes + ---------- + apikey : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikey, default is Undefined, required + apikey + """ + apikey: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikey + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikey: + r""" + APIKey configures API token authentication for BeyondTrust Workload Credentials. + The token is retrieved from a Kubernetes secret and used as a Bearer token for API requests. + + Attributes + ---------- + token : GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikeyToken, default is Undefined, required + token + """ + token: GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikeyToken + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderAuthApikeyToken: + r""" + Token references the Kubernetes secret containing the BeyondTrust Workload Credentials API token. + The secret should contain the API key used to authenticate with BeyondTrust Workload Credentials. + Create an API token in your BeyondTrust Workload Credentials console and store it in a Kubernetes secret. + For details on creating API tokens, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#authentication + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderCaProvider: + r""" + CAProvider points to a Secret or ConfigMap containing a PEM-encoded CA certificate. + This is used to validate the BeyondTrust Workload Credentials API TLS certificate. + Use this as an alternative to CABundle when you want to reference an existing Kubernetes resource. + + Attributes + ---------- + key : str, default is Undefined, optional + The key where the CA certificate can be found in the Secret or ConfigMap. + name : str, default is Undefined, required + The name of the object located at the provider type. + namespace : str, default is Undefined, optional + The namespace the Provider type is in. + Can only be defined when used in a ClusterSecretStore. + $type : str, default is Undefined, required + The type of provider to use such as "Secret", or "ConfigMap". + """ + key?: str + name: str + + namespace?: str + $type: "Secret" | "ConfigMap" + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 + len(name) >= 1 + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecProviderServer: + r""" + Server configures the BeyondTrust Workload Credentials server connection details. + Includes the API URL and Site ID for your BeyondTrust instance. + For API reference, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + + Attributes + ---------- + apiUrl : str, default is Undefined, required + APIURL is the base URL of your BeyondTrust Workload Credentials API server. + This should be the full URL to your BeyondTrust instance. + Example: https://api.beyondtrust.io/siie + For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api#base-url + siteId : str, default is Undefined, required + SiteID is your BeyondTrust Workload Credentials site identifier (UUID format). + This identifier is unique to your BeyondTrust Workload Credentials instance. + You can find your Site ID in the BeyondTrust Workload Credentials admin console. + Example: a1b2c3d4-e5f6-4890-abcd-ef1234567890 + For more information, see: https://docs.beyondtrust.com/bt-docs/docs/secrets-api + """ + apiUrl: str + + siteId: str + +schema GeneratorsExternalSecretsIoV1alpha1BeyondtrustWorkloadCredentialsDynamicSecretSpecRetrySettings: + r""" + RetrySettings configures exponential backoff for failed API requests. + If not specified, uses the default retry settings. + + Attributes + ---------- + maxRetries : int, default is Undefined, optional + max retries + retryInterval : str, default is Undefined, optional + retry interval + """ + maxRetries?: int + retryInterval?: str + diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_cloudsmith_access_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_cloudsmith_access_token.k index 726ecf25..bc8e03dd 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_cloudsmith_access_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_cloudsmith_access_token.k @@ -77,7 +77,7 @@ schema GeneratorsExternalSecretsIoV1alpha1CloudsmithAccessTokenSpecServiceAccoun len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_e_c_r_authorization_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_e_c_r_authorization_token.k index 379a0f0b..07986625 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_e_c_r_authorization_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_e_c_r_authorization_token.k @@ -107,8 +107,8 @@ schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthJwtServic len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRef: @@ -149,14 +149,14 @@ schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRefSecretAccessKeySecretRef: @@ -179,14 +179,14 @@ schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRefSessionTokenSecretRef: @@ -211,13 +211,13 @@ schema GeneratorsExternalSecretsIoV1alpha1ECRAuthorizationTokenSpecAuthSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_g_c_r_access_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_g_c_r_access_token.k index 991d2aeb..4270fe63 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_g_c_r_access_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_g_c_r_access_token.k @@ -94,14 +94,14 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthSecretRefSecretA namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity: @@ -162,7 +162,7 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity serviceAccountRef?: GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentityFederationServiceAccountRef check: - len(gcpServiceAccountEmail) >= 1 if gcpServiceAccountEmail not in [None, Undefined] + len(gcpServiceAccountEmail) >= 1 if gcpServiceAccountEmail _regex_match(str(gcpServiceAccountEmail), r"^.*@.*\.iam\.gserviceaccount\.com$") if gcpServiceAccountEmail schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentityFederationAwsSecurityCredentials: @@ -209,8 +209,8 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentityFederationCredConfig: @@ -241,8 +241,8 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentityFederationServiceAccountRef: @@ -271,8 +271,8 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentityServiceAccountRef: @@ -300,7 +300,7 @@ schema GeneratorsExternalSecretsIoV1alpha1GCRAccessTokenSpecAuthWorkloadIdentity len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_github_access_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_github_access_token.k index 98db022a..8b7c6c47 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_github_access_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_github_access_token.k @@ -103,13 +103,13 @@ schema GeneratorsExternalSecretsIoV1alpha1GithubAccessTokenSpecAuthPrivateKeySec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_gitlab_deploy_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_gitlab_deploy_token.k new file mode 100644 index 00000000..83d584e7 --- /dev/null +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_gitlab_deploy_token.k @@ -0,0 +1,134 @@ +""" +This file was generated by the KCL auto-gen tool. DO NOT EDIT. +Editing this file might prove futile when you re-run the KCL auto-gen generate command. +""" + +import regex +import k8s.apimachinery.pkg.apis.meta.v1 + +_regex_match = regex.match + +schema GitlabDeployToken: + r""" + GitlabDeployToken generates a GitLab deploy token. + + Attributes + ---------- + apiVersion : str, default is "generators.external-secrets.io/v1alpha1", required + APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources + kind : str, default is "GitlabDeployToken", required + Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds + metadata : v1.ObjectMeta, default is Undefined, optional + metadata + spec : GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpec, default is Undefined, optional + spec + """ + apiVersion: "generators.external-secrets.io/v1alpha1" = "generators.external-secrets.io/v1alpha1" + + kind: "GitlabDeployToken" = "GitlabDeployToken" + + metadata?: v1.ObjectMeta + spec?: GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpec + +schema GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpec: + r""" + GitlabDeployTokenSpec defines the desired state to generate a GitLab deploy token. + + Attributes + ---------- + auth : GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuth, default is Undefined, required + auth + expiresAt : str, default is Undefined, optional + ExpiresAt is an optional expiry for the deploy token. If omitted the token does + not expire on the GitLab side and is revoked only when the generator state is + cleaned up (on regeneration or when the consuming ExternalSecret is deleted). + groupID : str, default is Undefined, optional + GroupID is the numeric ID or unescaped path (e.g. parent/group) of the group to + create the deploy token in. The generator URL-escapes paths before calling the + GitLab API, so do not pre-encode. Mutually exclusive with projectID. + name : str, default is Undefined, required + Name of the deploy token. + projectID : str, default is Undefined, optional + ProjectID is the numeric ID or unescaped path (e.g. group/project) of the + project to create the deploy token in. The generator URL-escapes paths before + calling the GitLab API, so do not pre-encode. Mutually exclusive with groupID. + scopes : [str], default is Undefined, required + Scopes granted to the deploy token. At least one scope is required. + url : str, default is Undefined, optional + URL configures the GitLab instance URL. Defaults to https://gitlab.com. + username : str, default is Undefined, optional + Username is an optional username for the deploy token. GitLab defaults it to + gitlab+deploy-token-{n} when omitted. + """ + auth: GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuth + + expiresAt?: str + groupID?: str + name: str + + projectID?: str + scopes: [str] + + url?: str + username?: str + + check: + len(groupID) >= 1 if groupID + len(name) >= 1 + len(projectID) >= 1 if projectID + len(scopes) >= 1 + +schema GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuth: + r""" + Auth configures how ESO authenticates with the GitLab API. + + Attributes + ---------- + token : GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthToken, default is Undefined, required + token + """ + token: GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthToken + +schema GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthToken: + r""" + Token references a secret containing a GitLab access token (personal, group, or + project) with the api scope and at least the Maintainer role on the target. + + Attributes + ---------- + secretRef : GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthTokenSecretRef, default is Undefined, required + secret ref + """ + secretRef: GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthTokenSecretRef + +schema GeneratorsExternalSecretsIoV1alpha1GitlabDeployTokenSpecAuthTokenSecretRef: + r""" + SecretKeySelector is a reference to a specific 'key' within a Secret resource. + In some instances, `key` is a required field. + + Attributes + ---------- + key : str, default is Undefined, optional + A key in the referenced Secret. + Some instances of this field may be defaulted, in others it may be required. + name : str, default is Undefined, optional + The name of the Secret resource being referred to. + namespace : str, default is Undefined, optional + The namespace of the Secret resource being referred to. + Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent. + """ + key?: str + name?: str + namespace?: str + + check: + len(key) <= 253 if key + len(key) >= 1 if key + _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key + len(name) <= 253 if name + len(name) >= 1 if name + _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace + _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace + diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_grafana.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_grafana.k index 8734cbb9..f3f445a6 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_grafana.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_grafana.k @@ -97,11 +97,11 @@ schema GeneratorsExternalSecretsIoV1alpha1GrafanaSpecAuthBasicPassword: name?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema GeneratorsExternalSecretsIoV1alpha1GrafanaSpecAuthToken: @@ -122,11 +122,11 @@ schema GeneratorsExternalSecretsIoV1alpha1GrafanaSpecAuthToken: name?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema GeneratorsExternalSecretsIoV1alpha1GrafanaSpecServiceAccount: @@ -142,8 +142,16 @@ schema GeneratorsExternalSecretsIoV1alpha1GrafanaSpecServiceAccount: Role is the role of the service account. See here for the documentation on basic roles offered by Grafana: https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/rbac-fixed-basic-role-definitions/ + secondsToLive : int, default is Undefined, optional + SecondsToLive is the number of seconds before the generated service account token will expire. + Some Grafana deployments (e.g. AWS Managed Grafana) require this value to be set. """ name: str role: str + secondsToLive?: int + + check: + secondsToLive >= 1 if secondsToLive not in [None, Undefined] + diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_m_f_a.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_m_f_a.k index befede33..490bbd46 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_m_f_a.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_m_f_a.k @@ -74,13 +74,13 @@ schema GeneratorsExternalSecretsIoV1alpha1MFASpecSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_quay_access_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_quay_access_token.k index 7c21c09b..4b669fc4 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_quay_access_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_quay_access_token.k @@ -74,7 +74,7 @@ schema GeneratorsExternalSecretsIoV1alpha1QuayAccessTokenSpecServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_s_t_s_session_token.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_s_t_s_session_token.k index 8fa48c04..d0981474 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_s_t_s_session_token.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_s_t_s_session_token.k @@ -105,8 +105,8 @@ schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthJwtServiceAccou len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRef: @@ -147,14 +147,14 @@ schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRefAccess namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRefSecretAccessKeySecretRef: @@ -177,14 +177,14 @@ schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRefSecret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRefSessionTokenSecretRef: @@ -209,14 +209,14 @@ schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecAuthSecretRefSessio namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1STSSessionTokenSpecRequestParameters: diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_vault_dynamic_secret.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_vault_dynamic_secret.k index 19396eb3..aa0e5ca2 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_vault_dynamic_secret.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_vault_dynamic_secret.k @@ -224,14 +224,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthAppR namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthAppRoleSecretRef: @@ -257,14 +257,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthAppR namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthCert: @@ -310,14 +310,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthCert namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthCertSecretRef: @@ -341,14 +341,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthCert namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcp: @@ -413,14 +413,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcpS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcpServiceAccountRef: @@ -448,8 +448,8 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcpS len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcpWorkloadIdentity: @@ -500,8 +500,8 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthGcpW len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIam: @@ -573,8 +573,8 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamJ len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamSecretRef: @@ -614,14 +614,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamSecretRefSecretAccessKeySecretRef: @@ -644,14 +644,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamSecretRefSessionTokenSecretRef: @@ -676,14 +676,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthIamS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthJwt: @@ -762,8 +762,8 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthJwtK len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthJwtSecretRef: @@ -787,14 +787,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthJwtS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthKubernetes: @@ -845,14 +845,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthKube namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthKubernetesServiceAccountRef: @@ -883,8 +883,8 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthKube len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthLdap: @@ -930,14 +930,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthLdap namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthTokenSecretRef: @@ -960,14 +960,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthToke namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthUserPass: @@ -1012,14 +1012,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderAuthUser namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderCaProvider: @@ -1045,14 +1045,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderCaProvid $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderCheckAndSet: @@ -1109,14 +1109,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderTLSCertS namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderTLSKeySecretRef: @@ -1141,14 +1141,14 @@ schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecProviderTLSKeySe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1VaultDynamicSecretSpecRetrySettings: diff --git a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_webhook.k b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_webhook.k index 92924d99..56e34de5 100644 --- a/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_webhook.k +++ b/docs/examples/src/charts/external_secrets/api/v1alpha1/generators_external_secrets_io_v1alpha1_webhook.k @@ -123,14 +123,14 @@ schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecAuthNtlmPasswordSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecAuthNtlmUsernameSecret: @@ -154,14 +154,14 @@ schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecAuthNtlmUsernameSecret: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecCaProvider: @@ -186,14 +186,14 @@ schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecResult: @@ -237,10 +237,10 @@ schema GeneratorsExternalSecretsIoV1alpha1WebhookSpecSecretsItems0SecretRef: name?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name diff --git a/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_external_secret.k b/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_external_secret.k index 79bcf1c5..3e56bd35 100644 --- a/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_external_secret.k +++ b/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_external_secret.k @@ -253,8 +253,8 @@ schema ExternalSecretsIoV1beta1ExternalSecretSpecDataFromItems0SourceRefStoreRef name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1beta1ExternalSecretSpecDataItems0: @@ -366,8 +366,8 @@ schema ExternalSecretsIoV1beta1ExternalSecretSpecDataItems0SourceRefStoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1beta1ExternalSecretSpecSecretStoreRef: @@ -386,8 +386,8 @@ schema ExternalSecretsIoV1beta1ExternalSecretSpecSecretStoreRef: name?: str check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1beta1ExternalSecretSpecTarget: @@ -418,8 +418,8 @@ schema ExternalSecretsIoV1beta1ExternalSecretSpecTarget: template?: ExternalSecretsIoV1beta1ExternalSecretSpecTargetTemplate check: - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name schema ExternalSecretsIoV1beta1ExternalSecretSpecTargetTemplate: diff --git a/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_secret_store.k b/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_secret_store.k index df99c9b5..2b8346a3 100644 --- a/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_secret_store.k +++ b/docs/examples/src/charts/external_secrets/api/v1beta1/external_secrets_io_v1beta1_secret_store.k @@ -77,9 +77,9 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecConditionsItems0: namespaces?: [str] check: - all i in namespaces {len(i) <= 63 if i not in [None, Undefined]} if namespaces - all i in namespaces {len(i) >= 1 if i not in [None, Undefined]} if namespaces - all i in namespaces {_regex_match(str(i), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if i} if namespaces + all namespaces in namespaces {len(namespaces) <= 63 if namespaces not in [None, Undefined]} if namespaces + all namespaces in namespaces {len(namespaces) >= 1 if namespaces not in [None, Undefined]} if namespaces + all namespaces in namespaces {_regex_match(str(namespaces), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespaces} if namespaces schema ExternalSecretsIoV1beta1SecretStoreSpecConditionsItems0NamespaceSelector: r""" @@ -318,14 +318,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefKuber namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefKubernetesAuthServiceAccountRef: @@ -356,8 +356,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefKuber len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRef: @@ -398,14 +398,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefAccessType: @@ -429,14 +429,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecretRefAccessTypeParam: @@ -460,14 +460,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessAuthSecretRefSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessCaProvider: @@ -493,14 +493,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAkeylessCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAlibaba: @@ -590,14 +590,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAlibabaAuthSecretRefAccess namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAlibabaAuthSecretRefAccessKeySecretSecretRef: @@ -620,14 +620,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAlibabaAuthSecretRefAccess namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAws: @@ -722,8 +722,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthJwtServiceAccountRe len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRef: @@ -764,14 +764,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRefAccessKeyI namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRefSecretAccessKeySecretRef: @@ -794,14 +794,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRefSecretAcce namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRefSessionTokenSecretRef: @@ -826,14 +826,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsAuthSecretRefSessionTok namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAwsSecretsManager: @@ -948,14 +948,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefClient namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefClientID: @@ -978,14 +978,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefClient namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefClientSecret: @@ -1008,14 +1008,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefClient namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefTenantID: @@ -1038,14 +1038,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvAuthSecretRefTenant namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvServiceAccountRef: @@ -1074,8 +1074,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderAzurekvServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrust: @@ -1150,14 +1150,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthAPIKeySecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthCertificate: @@ -1208,14 +1208,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthCertificate namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthCertificateSecretRef: @@ -1238,14 +1238,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthCertificate namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthClientID: @@ -1282,14 +1282,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthClientIDSec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthClientSecret: @@ -1326,14 +1326,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustAuthClientSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBeyondtrustServer: @@ -1444,14 +1444,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBitwardensecretsmanagerAut namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBitwardensecretsmanagerCaProvider: @@ -1477,14 +1477,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderBitwardensecretsmanagerCaP $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderChef: @@ -1548,14 +1548,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderChefAuthSecretRefPrivateKe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderCloudrusm: @@ -1619,14 +1619,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderCloudrusmAuthSecretRefAcce namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderCloudrusmAuthSecretRefAccessKeySecretSecretRef: @@ -1649,14 +1649,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderCloudrusmAuthSecretRefAcce namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjur: @@ -1734,14 +1734,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthApikeyAPIKeyRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthApikeyUserRef: @@ -1765,14 +1765,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthApikeyUserRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthJwt: @@ -1821,14 +1821,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthJwtSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthJwtServiceAccountRef: @@ -1857,8 +1857,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurAuthJwtServiceAccoun len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurCaProvider: @@ -1886,14 +1886,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderConjurCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDelinea: @@ -1959,14 +1959,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDelineaClientIDSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDelineaClientSecret: @@ -2003,14 +2003,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDelineaClientSecretSecretR namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDevice42: @@ -2070,14 +2070,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDevice42AuthSecretRefCrede namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDoppler: @@ -2148,14 +2148,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderDopplerAuthSecretRefDopple namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderFake: @@ -2233,14 +2233,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderFortanixAPIKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGcpsm: @@ -2305,14 +2305,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGcpsmAuthSecretRefSecretAc namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGcpsmAuthWorkloadIdentity: @@ -2363,8 +2363,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGcpsmAuthWorkloadIdentityS len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGithub: @@ -2435,14 +2435,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGithubAuthPrivateKey: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGitlab: @@ -2521,14 +2521,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGitlabAuthSecretRefAccessT namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGitlabCaProvider: @@ -2554,14 +2554,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderGitlabCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderIbm: @@ -2642,14 +2642,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderIbmAuthSecretRefSecretAPIK namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderInfisical: @@ -2717,14 +2717,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderInfisicalAuthUniversalAuth namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderInfisicalAuthUniversalAuthCredentialsClientSecret: @@ -2748,14 +2748,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderInfisicalAuthUniversalAuth namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderInfisicalSecretsScope: @@ -2819,14 +2819,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKeepersecurityAuthRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetes: @@ -2850,8 +2850,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetes: server?: ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesServer check: - len(remoteNamespace) <= 63 if remoteNamespace not in [None, Undefined] - len(remoteNamespace) >= 1 if remoteNamespace not in [None, Undefined] + len(remoteNamespace) <= 63 if remoteNamespace + len(remoteNamespace) >= 1 if remoteNamespace _regex_match(str(remoteNamespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if remoteNamespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuth: @@ -2906,14 +2906,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthCertClientCe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthCertClientKey: @@ -2937,14 +2937,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthCertClientKe namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthRef: @@ -2967,14 +2967,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthServiceAccount: @@ -3002,8 +3002,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthServiceAccou len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthToken: @@ -3038,14 +3038,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesAuthTokenBearerT namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesServer: @@ -3088,14 +3088,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderKubernetesServerCaProvider $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnboardbase: @@ -3157,14 +3157,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnboardbaseAuthAPIKeyRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnboardbaseAuthPasscodeRef: @@ -3187,14 +3187,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnboardbaseAuthPasscodeRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnepassword: @@ -3258,14 +3258,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOnepasswordAuthSecretRefCo namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracle: @@ -3357,14 +3357,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracleAuthSecretRefFingerp namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracleAuthSecretRefPrivatekey: @@ -3387,14 +3387,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracleAuthSecretRefPrivate namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracleServiceAccountRef: @@ -3423,8 +3423,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderOracleServiceAccountRef: len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassbolt: @@ -3477,14 +3477,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassboltAuthPasswordSecret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassboltAuthPrivateKeySecretRef: @@ -3507,14 +3507,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassboltAuthPrivateKeySecr namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassworddepot: @@ -3578,14 +3578,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPassworddepotAuthSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPrevider: @@ -3645,14 +3645,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPreviderAuthSecretRefAcces namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPulumi: @@ -3716,14 +3716,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderPulumiAccessTokenSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderScaleway: @@ -3786,14 +3786,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderScalewayAccessKeySecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderScalewaySecretKey: @@ -3830,14 +3830,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderScalewaySecretKeySecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSecretserver: @@ -3895,14 +3895,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSecretserverPasswordSecret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSecretserverUsername: @@ -3939,14 +3939,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSecretserverUsernameSecret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSenhasegura: @@ -4007,14 +4007,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderSenhaseguraAuthClientSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVault: @@ -4160,14 +4160,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthAppRoleRoleRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthAppRoleSecretRef: @@ -4193,14 +4193,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthAppRoleSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthCert: @@ -4239,14 +4239,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthCertClientCert: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthCertSecretRef: @@ -4270,14 +4270,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthCertSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIam: @@ -4349,8 +4349,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamJwtServiceAcco len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRef: @@ -4390,14 +4390,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRefAcces namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRefSecretAccessKeySecretRef: @@ -4420,14 +4420,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRefSecre namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRefSessionTokenSecretRef: @@ -4452,14 +4452,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthIamSecretRefSessi namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthJwt: @@ -4538,8 +4538,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthJwtKubernetesServ len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthJwtSecretRef: @@ -4563,14 +4563,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthJwtSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthKubernetes: @@ -4621,14 +4621,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthKubernetesSecretR namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthKubernetesServiceAccountRef: @@ -4659,8 +4659,8 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthKubernetesService len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthLdap: @@ -4706,14 +4706,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthLdapSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthTokenSecretRef: @@ -4736,14 +4736,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthTokenSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthUserPass: @@ -4788,14 +4788,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultAuthUserPassSecretRef namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultCaProvider: @@ -4821,14 +4821,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultTLS: @@ -4871,14 +4871,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultTLSCertSecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultTLSKeySecretRef: @@ -4903,14 +4903,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderVaultTLSKeySecretRef: namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhook: @@ -5003,14 +5003,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookAuthNtlmPasswordSec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookAuthNtlmUsernameSecret: @@ -5034,14 +5034,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookAuthNtlmUsernameSec namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookCaProvider: @@ -5066,14 +5066,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookCaProvider: $type: "Secret" | "ConfigMap" check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key len(name) <= 253 len(name) >= 1 _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookResult: @@ -5122,14 +5122,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderWebhookSecretsItems0Secret namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexcertificatemanager: @@ -5181,14 +5181,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexcertificatemanagerAu namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexcertificatemanagerCaProvider: @@ -5223,14 +5223,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexcertificatemanagerCa namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexlockbox: @@ -5282,14 +5282,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexlockboxAuthAuthorize namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexlockboxCaProvider: @@ -5324,14 +5324,14 @@ schema ExternalSecretsIoV1beta1SecretStoreSpecProviderYandexlockboxCaProviderCer namespace?: str check: - len(key) <= 253 if key not in [None, Undefined] - len(key) >= 1 if key not in [None, Undefined] + len(key) <= 253 if key + len(key) >= 1 if key _regex_match(str(key), r"^[-._a-zA-Z0-9]+$") if key - len(name) <= 253 if name not in [None, Undefined] - len(name) >= 1 if name not in [None, Undefined] + len(name) <= 253 if name + len(name) >= 1 if name _regex_match(str(name), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$") if name - len(namespace) <= 63 if namespace not in [None, Undefined] - len(namespace) >= 1 if namespace not in [None, Undefined] + len(namespace) <= 63 if namespace + len(namespace) >= 1 if namespace _regex_match(str(namespace), r"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$") if namespace schema ExternalSecretsIoV1beta1SecretStoreSpecRetrySettings: diff --git a/docs/examples/src/charts/external_secrets/chart.k b/docs/examples/src/charts/external_secrets/chart.k index de84452e..c6160f68 100644 --- a/docs/examples/src/charts/external_secrets/chart.k +++ b/docs/examples/src/charts/external_secrets/chart.k @@ -14,10 +14,10 @@ schema Chart(helm.Chart): values : Values | any, optional, default is {crds = {createClusterExternalSecret = False, createClusterGenerator = False, createClusterSecretStore = False, createPushSecret = True}, installCRDs = True} chart : str, required, default is "external-secrets" repoURL : str, required, default is "https://charts.external-secrets.io/" - targetRevision : str, optional, default is "2.6.0" + targetRevision : str, optional, default is "2.8.0" """ values?: Values | any = {crds = {createClusterExternalSecret = False, createClusterGenerator = False, createClusterSecretStore = False, createPushSecret = True}, installCRDs = True} chart: str = "external-secrets" repoURL: str = "https://charts.external-secrets.io/" - targetRevision?: str = "2.6.0" + targetRevision?: str = "2.8.0" diff --git a/docs/examples/src/charts/external_secrets/values.schema.json b/docs/examples/src/charts/external_secrets/values.schema.json index fe9fe12a..af4b1ead 100644 --- a/docs/examples/src/charts/external_secrets/values.schema.json +++ b/docs/examples/src/charts/external_secrets/values.schema.json @@ -1,1290 +1,1893 @@ { - "type": "object", + "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "affinity": { + "required": [], "type": "object" }, "bitwarden-sdk-server": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "namespaceOverride": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "certController": { - "type": "object", "properties": { "affinity": { + "required": [], "type": "object" }, "create": { + "required": [], "type": "boolean" }, "deploymentAnnotations": { + "required": [], "type": "object" }, "extraArgs": { + "required": [], "type": "object" }, "extraEnv": { + "required": [], "type": "array" }, "extraInitContainers": { + "required": [], "type": "array" }, "extraVolumeMounts": { + "required": [], "type": "array" }, "extraVolumes": { + "required": [], "type": "array" }, "hostAliases": { + "required": [], "type": "array" }, "hostNetwork": { + "required": [], "type": "boolean" }, "hostUsers": { - "type": ["boolean", "null"] + "required": [], + "type": [ + "boolean", + "null" + ] }, "image": { - "type": "object", "properties": { "flavour": { + "required": [], "type": "string" }, "pullPolicy": { + "required": [], "type": "string" }, "repository": { + "required": [], "type": "string" }, "tag": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "imagePullSecrets": { + "required": [], "type": "array" }, "livenessProbe": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "failureThreshold": { + "required": [], "type": "integer" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" }, "log": { - "type": "object", "properties": { "level": { + "required": [], "type": "string" }, "timeEncoding": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "metrics": { - "type": "object", "properties": { "listen": { - "type": "object", "properties": { "auth": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "port": { + "required": [], "type": "integer" }, "secure": { - "type": "object", "properties": { "certDir": { + "required": [], "type": "string" }, "certFile": { + "required": [], "type": "string" }, "enabled": { + "required": [], "type": "boolean" }, "keyFile": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "service": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "port": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" + }, + "networkPolicy": { + "properties": { + "egress": { + "required": [], + "type": "array" + }, + "enabled": { + "required": [], + "type": "boolean" + }, + "ingress": { + "items": { + "properties": { + "ports": { + "items": { + "properties": { + "port": { + "required": [], + "type": [ + "string", + "integer" + ] + }, + "protocol": { + "required": [], + "type": "string" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" }, "nodeSelector": { + "required": [], "type": "object" }, "podAnnotations": { + "required": [], "type": "object" }, "podDisruptionBudget": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "minAvailable": { - "type": ["integer", "string"] + "required": [], + "type": [ + "integer", + "string" + ] }, "nameOverride": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "podLabels": { + "required": [], "type": "object" }, "podSecurityContext": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "priorityClassName": { + "required": [], "type": "string" }, "rbac": { - "type": "object", "properties": { "create": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "readinessProbe": { - "type": "object", "properties": { "address": { + "required": [], "type": "string" }, "enabled": { + "required": [], "type": "boolean" }, "failureThreshold": { + "required": [], "type": "integer" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" }, "replicaCount": { + "required": [], "type": "integer" }, "requeueInterval": { + "required": [], "type": "string" }, "resources": { + "required": [], "type": "object" }, "revisionHistoryLimit": { + "required": [], "type": "integer" }, "securityContext": { - "type": "object", "properties": { "allowPrivilegeEscalation": { + "required": [], "type": "boolean" }, "capabilities": { - "type": "object", "properties": { "drop": { - "type": "array", "items": { + "required": [], "type": "string" - } + }, + "required": [], + "type": "array" } - } + }, + "required": [], + "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "readOnlyRootFilesystem": { + "required": [], "type": "boolean" }, "runAsNonRoot": { + "required": [], "type": "boolean" }, "runAsUser": { + "required": [], "type": "integer" }, "seccompProfile": { - "type": "object", "properties": { "type": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "serviceAccount": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "automount": { + "required": [], "type": "boolean" }, "create": { + "required": [], "type": "boolean" }, "extraLabels": { + "required": [], "type": "object" }, "name": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "startupProbe": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, - "port": { - "type": "string" + "failureThreshold": { + "required": [], + "type": "integer" }, - "useReadinessProbePort": { - "type": "boolean" + "initialDelaySeconds": { + "required": [], + "type": "integer" + }, + "periodSeconds": { + "required": [], + "type": "integer" } - } + }, + "required": [], + "type": "object" }, "strategy": { + "required": [], "type": "object" }, "tolerations": { + "required": [], "type": "array" }, "topologySpreadConstraints": { + "required": [], "type": "array" } - } + }, + "required": [], + "type": "object" }, "commonLabels": { + "required": [], "type": "object" }, "concurrent": { + "required": [], "type": "integer" }, "controllerClass": { + "required": [], "type": "string" }, "crds": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "conversion": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "createClusterExternalSecret": { + "required": [], "type": "boolean" }, "createClusterGenerator": { + "required": [], "type": "boolean" }, "createClusterPushSecret": { + "required": [], "type": "boolean" }, "createClusterSecretStore": { + "required": [], "type": "boolean" }, "createPushSecret": { + "required": [], "type": "boolean" }, "createSecretStore": { + "required": [], "type": "boolean" }, "unsafeServeV1Beta1": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "createOperator": { + "required": [], "type": "boolean" }, "deploymentAnnotations": { + "required": [], "type": "object" }, "dnsConfig": { + "required": [], "type": "object" }, "dnsPolicy": { + "required": [], "type": "string" }, "enableHTTP2": { + "required": [], "type": "boolean" }, "extendedMetricLabels": { + "required": [], "type": "boolean" }, "extraArgs": { + "required": [], "type": "object" }, "extraContainers": { + "required": [], "type": "array" }, "extraEnv": { + "required": [], "type": "array" }, "extraInitContainers": { + "required": [], "type": "array" }, "extraObjects": { + "required": [], "type": "array" }, "extraVolumeMounts": { + "required": [], "type": "array" }, "extraVolumes": { + "required": [], "type": "array" }, "fullnameOverride": { + "required": [], "type": "string" }, "genericTargets": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "resources": { + "required": [], "type": "array" } - } + }, + "required": [], + "type": "object" }, "global": { - "type": "object", "properties": { "affinity": { + "required": [], "type": "object" }, "compatibility": { - "type": "object", "properties": { "openshift": { - "type": "object", "properties": { "adaptSecurityContext": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "hostAliases": { + "required": [], "type": "array" }, "imagePullSecrets": { + "required": [], "type": "array" }, "nodeSelector": { + "required": [], "type": "object" }, "podAnnotations": { + "required": [], "type": "object" }, "podLabels": { + "required": [], "type": "object" }, "repository": { + "required": [], "type": "string" }, "tolerations": { + "required": [], "type": "array" }, "topologySpreadConstraints": { + "required": [], "type": "array" } - } + }, + "required": [], + "type": "object" }, "grafanaDashboard": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "extraLabels": { + "required": [], "type": "object" }, "sidecarLabel": { + "required": [], "type": "string" }, "sidecarLabelValue": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "hostAliases": { + "required": [], "type": "array" }, "hostNetwork": { + "required": [], "type": "boolean" }, "hostUsers": { - "type": ["boolean", "null"] + "required": [], + "type": [ + "boolean", + "null" + ] }, "image": { - "type": "object", "properties": { "flavour": { + "required": [], "type": "string" }, "pullPolicy": { + "required": [], "type": "string" }, "repository": { + "required": [], "type": "string" }, "tag": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "imagePullSecrets": { + "required": [], "type": "array" }, "installCRDs": { + "required": [], "type": "boolean" }, "leaderElect": { + "required": [], "type": "boolean" }, "leaderElectionID": { + "required": [], + "type": "string" + }, + "leaderElectionLeaseDuration": { + "required": [], + "type": "string" + }, + "leaderElectionRenewDeadline": { + "required": [], + "type": "string" + }, + "leaderElectionRetryPeriod": { + "required": [], "type": "string" }, "livenessProbe": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "spec": { - "type": "object", "properties": { "address": { + "required": [], "type": "string" }, "failureThreshold": { + "required": [], "type": "integer" }, "httpGet": { - "type": "object", "properties": { "path": { + "required": [], "type": "string" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] } - } + }, + "required": [], + "type": "object" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "port": { + "required": [], "type": "integer" }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "log": { - "type": "object", "properties": { "level": { + "required": [], "type": "string" }, "timeEncoding": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "metrics": { - "type": "object", "properties": { "listen": { - "type": "object", "properties": { "auth": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "port": { + "required": [], "type": "integer" }, "secure": { - "type": "object", "properties": { "certDir": { + "required": [], "type": "string" }, "certFile": { + "required": [], "type": "string" }, "enabled": { + "required": [], "type": "boolean" }, "keyFile": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "service": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "port": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "nameOverride": { + "required": [], "type": "string" }, "namespaceOverride": { + "required": [], "type": "string" }, + "networkPolicy": { + "properties": { + "egress": { + "required": [], + "type": "array" + }, + "enabled": { + "required": [], + "type": "boolean" + }, + "ingress": { + "items": { + "properties": { + "ports": { + "items": { + "properties": { + "port": { + "required": [], + "type": [ + "string", + "integer" + ] + }, + "protocol": { + "required": [], + "type": "string" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" + }, "nodeSelector": { + "required": [], "type": "object" }, "openshiftFinalizers": { + "required": [], "type": "boolean" }, "podAnnotations": { + "required": [], "type": "object" }, "podDisruptionBudget": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "minAvailable": { - "type": ["integer", "string"] + "required": [], + "type": [ + "integer", + "string" + ] }, "nameOverride": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "podLabels": { + "required": [], "type": "object" }, "podSecurityContext": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "podSpecExtra": { + "required": [], "type": "object" }, "priorityClassName": { + "required": [], "type": "string" }, "processClusterExternalSecret": { + "required": [], "type": "boolean" }, "processClusterGenerator": { + "required": [], "type": "boolean" }, "processClusterPushSecret": { + "required": [], "type": "boolean" }, "processClusterStore": { + "required": [], "type": "boolean" }, "processPushSecret": { + "required": [], "type": "boolean" }, "processSecretStore": { + "required": [], "type": "boolean" }, "rbac": { - "type": "object", "properties": { + "aggregateToAdmin": { + "required": [], + "type": "boolean" + }, "aggregateToEdit": { + "required": [], "type": "boolean" }, "aggregateToView": { + "required": [], "type": "boolean" }, "create": { + "required": [], "type": "boolean" }, "serviceAccountTokenCreate": { + "required": [], "type": "boolean" }, "servicebindings": { - "type": "object", "properties": { "create": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "readinessProbe": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "spec": { - "type": "object", "properties": { "failureThreshold": { + "required": [], "type": "integer" }, "httpGet": { - "type": "object", "properties": { "path": { + "required": [], "type": "string" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] } - } + }, + "required": [], + "type": "object" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "replicaCount": { + "required": [], "type": "integer" }, "resources": { + "required": [], "type": "object" }, "revisionHistoryLimit": { + "required": [], "type": "integer" }, "scopedNamespace": { + "required": [], "type": "string" }, "scopedRBAC": { + "required": [], "type": "boolean" }, "securityContext": { - "type": "object", "properties": { "allowPrivilegeEscalation": { + "required": [], "type": "boolean" }, "capabilities": { - "type": "object", "properties": { "drop": { - "type": "array", "items": { + "required": [], "type": "string" - } + }, + "required": [], + "type": "array" } - } + }, + "required": [], + "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "readOnlyRootFilesystem": { + "required": [], "type": "boolean" }, "runAsNonRoot": { + "required": [], "type": "boolean" }, "runAsUser": { + "required": [], "type": "integer" }, "seccompProfile": { - "type": "object", "properties": { "type": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "service": { - "type": "object", "properties": { "ipFamilies": { + "required": [], "type": "array" }, "ipFamilyPolicy": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "serviceAccount": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "automount": { + "required": [], "type": "boolean" }, "create": { + "required": [], "type": "boolean" }, "extraLabels": { + "required": [], "type": "object" }, "name": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "serviceMonitor": { - "type": "object", "properties": { "additionalLabels": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "honorLabels": { + "required": [], "type": "boolean" }, "interval": { + "required": [], "type": "string" }, "metricRelabelings": { + "required": [], "type": "array" }, "namespace": { + "required": [], "type": "string" }, "relabelings": { + "required": [], "type": "array" }, "renderMode": { - "type": "string", - "enum": ["skipIfMissing", "failIfMissing", "alwaysRender"] + "enum": [ + "skipIfMissing", + "failIfMissing", + "alwaysRender" + ], + "required": [], + "type": "string" }, "scrapeTimeout": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" + }, + "storeRequeueInterval": { + "required": [], + "type": "string" }, "strategy": { + "required": [], "type": "object" }, "systemAuthDelegator": { + "required": [], "type": "boolean" }, "tolerations": { + "required": [], "type": "array" }, "topologySpreadConstraints": { + "required": [], "type": "array" }, "vault": { - "type": "object", "properties": { "enableTokenCache": { + "required": [], "type": "boolean" }, "tokenCacheSize": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" }, "webhook": { - "type": "object", "properties": { "affinity": { + "required": [], "type": "object" }, "annotations": { + "required": [], "type": "object" }, "certCheckInterval": { + "required": [], "type": "string" }, "certDir": { + "required": [], "type": "string" }, "certManager": { - "type": "object", "properties": { "addInjectorAnnotations": { + "required": [], "type": "boolean" }, "cert": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "create": { + "required": [], "type": "boolean" }, "duration": { + "required": [], "type": "string" }, "issuerRef": { - "type": "object", "properties": { "group": { + "required": [], "type": "string" }, "kind": { + "required": [], "type": "string" }, "name": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "privateKey": { + "required": [], "type": "object" }, "renewBefore": { + "required": [], "type": "string" }, "revisionHistoryLimit": { + "required": [], "type": "integer" }, "signatureAlgorithm": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "create": { + "required": [], "type": "boolean" }, "deploymentAnnotations": { + "required": [], "type": "object" }, "extraArgs": { + "required": [], "type": "object" }, "extraEnv": { + "required": [], "type": "array" }, "extraInitContainers": { + "required": [], "type": "array" }, "extraVolumeMounts": { + "required": [], "type": "array" }, "extraVolumes": { + "required": [], "type": "array" }, "failurePolicy": { + "required": [], "type": "string" }, "hostAliases": { + "required": [], "type": "array" }, "hostNetwork": { + "required": [], "type": "boolean" }, "hostUsers": { - "type": ["boolean", "null"] + "required": [], + "type": [ + "boolean", + "null" + ] }, "image": { - "type": "object", "properties": { "flavour": { + "required": [], "type": "string" }, "pullPolicy": { + "required": [], "type": "string" }, "repository": { + "required": [], "type": "string" }, "tag": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "imagePullSecrets": { + "required": [], "type": "array" }, "livenessProbe": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "failureThreshold": { + "required": [], "type": "integer" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" }, "log": { - "type": "object", "properties": { "level": { + "required": [], "type": "string" }, "timeEncoding": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "lookaheadInterval": { + "required": [], "type": "string" }, "metrics": { - "type": "object", "properties": { "listen": { - "type": "object", "properties": { "auth": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "port": { + "required": [], "type": "integer" }, "secure": { - "type": "object", "properties": { "certDir": { + "required": [], "type": "string" }, "certFile": { + "required": [], "type": "string" }, "enabled": { + "required": [], "type": "boolean" }, "keyFile": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "service": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "port": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" + }, + "networkPolicy": { + "properties": { + "egress": { + "required": [], + "type": "array" + }, + "enabled": { + "required": [], + "type": "boolean" + }, + "ingress": { + "items": { + "properties": { + "ports": { + "items": { + "properties": { + "port": { + "required": [], + "type": [ + "string", + "integer" + ] + }, + "protocol": { + "required": [], + "type": "string" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" + }, + "required": [], + "type": "array" + } + }, + "required": [], + "type": "object" }, "nodeSelector": { + "required": [], "type": "object" }, "podAnnotations": { + "required": [], "type": "object" }, "podDisruptionBudget": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" }, "minAvailable": { - "type": ["integer", "string"] + "required": [], + "type": [ + "integer", + "string" + ] }, "nameOverride": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "podLabels": { + "required": [], "type": "object" }, "podSecurityContext": { - "type": "object", "properties": { "enabled": { + "required": [], "type": "boolean" } - } + }, + "required": [], + "type": "object" }, "port": { + "required": [], "type": "integer" }, "priorityClassName": { + "required": [], "type": "string" }, "readinessProbe": { - "type": "object", "properties": { "address": { + "required": [], "type": "string" }, "enabled": { + "required": [], "type": "boolean" }, "failureThreshold": { + "required": [], "type": "integer" }, "initialDelaySeconds": { + "required": [], "type": "integer" }, "periodSeconds": { + "required": [], "type": "integer" }, "port": { - "type": ["string", "integer"] + "required": [], + "type": [ + "string", + "integer" + ] }, "successThreshold": { + "required": [], "type": "integer" }, "timeoutSeconds": { + "required": [], "type": "integer" } - } + }, + "required": [], + "type": "object" }, "replicaCount": { + "required": [], "type": "integer" }, "resources": { + "required": [], "type": "object" }, "revisionHistoryLimit": { + "required": [], "type": "integer" }, "secretAnnotations": { + "required": [], "type": "object" }, "securityContext": { - "type": "object", "properties": { "allowPrivilegeEscalation": { + "required": [], "type": "boolean" }, "capabilities": { - "type": "object", "properties": { "drop": { - "type": "array", "items": { + "required": [], "type": "string" - } + }, + "required": [], + "type": "array" } - } + }, + "required": [], + "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "readOnlyRootFilesystem": { + "required": [], "type": "boolean" }, "runAsNonRoot": { + "required": [], "type": "boolean" }, "runAsUser": { + "required": [], "type": "integer" }, "seccompProfile": { - "type": "object", "properties": { "type": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" } - } + }, + "required": [], + "type": "object" }, "service": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "enabled": { + "required": [], "type": "boolean" }, "labels": { + "required": [], "type": "object" }, "loadBalancerIP": { + "required": [], "type": "string" }, "type": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" }, "serviceAccount": { - "type": "object", "properties": { "annotations": { + "required": [], "type": "object" }, "automount": { + "required": [], "type": "boolean" }, "create": { + "required": [], "type": "boolean" }, "extraLabels": { + "required": [], "type": "object" }, "name": { + "required": [], "type": "string" } - } + }, + "required": [], + "type": "object" + }, + "startupProbe": { + "properties": { + "enabled": { + "required": [], + "type": "boolean" + }, + "failureThreshold": { + "required": [], + "type": "integer" + }, + "initialDelaySeconds": { + "required": [], + "type": "integer" + }, + "periodSeconds": { + "required": [], + "type": "integer" + } + }, + "required": [], + "type": "object" }, "strategy": { + "required": [], "type": "object" }, "tolerations": { + "required": [], "type": "array" }, "topologySpreadConstraints": { + "required": [], "type": "array" } - } + }, + "required": [], + "type": "object" } }, - "$schema": "https://json-schema.org/draft/2020-12/schema" -} + "required": [], + "type": "object" +} \ No newline at end of file diff --git a/docs/examples/src/charts/external_secrets/values.schema.k b/docs/examples/src/charts/external_secrets/values.schema.k index 29c4a03a..cdf41189 100644 --- a/docs/examples/src/charts/external_secrets/values.schema.k +++ b/docs/examples/src/charts/external_secrets/values.schema.k @@ -23,29 +23,33 @@ schema Values: enableHTTP2 : bool, optional extendedMetricLabels : bool, optional extraArgs : ValuesExtraArgs, optional - extraContainers : [any], optional - extraEnv : [any], optional - extraInitContainers : [any], optional - extraObjects : [any], optional - extraVolumeMounts : [any], optional - extraVolumes : [any], optional + extraContainers : any, optional + extraEnv : any, optional + extraInitContainers : any, optional + extraObjects : any, optional + extraVolumeMounts : any, optional + extraVolumes : any, optional fullnameOverride : str, optional genericTargets : ValuesGenericTargets, optional global : ValuesGlobal, optional grafanaDashboard : ValuesGrafanaDashboard, optional - hostAliases : [any], optional + hostAliases : any, optional hostNetwork : bool, optional hostUsers : bool, optional image : ValuesImage, optional - imagePullSecrets : [any], optional + imagePullSecrets : any, optional installCRDs : bool, optional leaderElect : bool, optional leaderElectionID : str, optional + leaderElectionLeaseDuration : str, optional + leaderElectionRenewDeadline : str, optional + leaderElectionRetryPeriod : str, optional livenessProbe : ValuesLivenessProbe, optional log : ValuesLog, optional metrics : ValuesMetrics, optional nameOverride : str, optional namespaceOverride : str, optional + networkPolicy : ValuesNetworkPolicy, optional nodeSelector : ValuesNodeSelector, optional openshiftFinalizers : bool, optional podAnnotations : ValuesPodAnnotations, optional @@ -71,10 +75,11 @@ schema Values: service : ValuesService, optional serviceAccount : ValuesServiceAccount, optional serviceMonitor : ValuesServiceMonitor, optional + storeRequeueInterval : str, optional strategy : ValuesStrategy, optional systemAuthDelegator : bool, optional - tolerations : [any], optional - topologySpreadConstraints : [any], optional + tolerations : any, optional + topologySpreadConstraints : any, optional vault : ValuesVault, optional webhook : ValuesWebhook, optional """ @@ -92,29 +97,33 @@ schema Values: enableHTTP2?: bool extendedMetricLabels?: bool extraArgs?: ValuesExtraArgs - extraContainers?: [any] - extraEnv?: [any] - extraInitContainers?: [any] - extraObjects?: [any] - extraVolumeMounts?: [any] - extraVolumes?: [any] + extraContainers?: any + extraEnv?: any + extraInitContainers?: any + extraObjects?: any + extraVolumeMounts?: any + extraVolumes?: any fullnameOverride?: str genericTargets?: ValuesGenericTargets global?: ValuesGlobal grafanaDashboard?: ValuesGrafanaDashboard - hostAliases?: [any] + hostAliases?: any hostNetwork?: bool hostUsers?: bool image?: ValuesImage - imagePullSecrets?: [any] + imagePullSecrets?: any installCRDs?: bool leaderElect?: bool leaderElectionID?: str + leaderElectionLeaseDuration?: str + leaderElectionRenewDeadline?: str + leaderElectionRetryPeriod?: str livenessProbe?: ValuesLivenessProbe log?: ValuesLog metrics?: ValuesMetrics nameOverride?: str namespaceOverride?: str + networkPolicy?: ValuesNetworkPolicy nodeSelector?: ValuesNodeSelector openshiftFinalizers?: bool podAnnotations?: ValuesPodAnnotations @@ -140,10 +149,11 @@ schema Values: service?: ValuesService serviceAccount?: ValuesServiceAccount serviceMonitor?: ValuesServiceMonitor + storeRequeueInterval?: str strategy?: ValuesStrategy systemAuthDelegator?: bool - tolerations?: [any] - topologySpreadConstraints?: [any] + tolerations?: any + topologySpreadConstraints?: any vault?: ValuesVault webhook?: ValuesWebhook @@ -175,18 +185,19 @@ schema ValuesCertController: create : bool, optional deploymentAnnotations : ValuesCertControllerDeploymentAnnotations, optional extraArgs : ValuesCertControllerExtraArgs, optional - extraEnv : [any], optional - extraInitContainers : [any], optional - extraVolumeMounts : [any], optional - extraVolumes : [any], optional - hostAliases : [any], optional + extraEnv : any, optional + extraInitContainers : any, optional + extraVolumeMounts : any, optional + extraVolumes : any, optional + hostAliases : any, optional hostNetwork : bool, optional hostUsers : bool, optional image : ValuesCertControllerImage, optional - imagePullSecrets : [any], optional + imagePullSecrets : any, optional livenessProbe : ValuesCertControllerLivenessProbe, optional log : ValuesCertControllerLog, optional metrics : ValuesCertControllerMetrics, optional + networkPolicy : ValuesCertControllerNetworkPolicy, optional nodeSelector : ValuesCertControllerNodeSelector, optional podAnnotations : ValuesCertControllerPodAnnotations, optional podDisruptionBudget : ValuesCertControllerPodDisruptionBudget, optional @@ -203,25 +214,26 @@ schema ValuesCertController: serviceAccount : ValuesCertControllerServiceAccount, optional startupProbe : ValuesCertControllerStartupProbe, optional strategy : ValuesCertControllerStrategy, optional - tolerations : [any], optional - topologySpreadConstraints : [any], optional + tolerations : any, optional + topologySpreadConstraints : any, optional """ affinity?: ValuesCertControllerAffinity create?: bool deploymentAnnotations?: ValuesCertControllerDeploymentAnnotations extraArgs?: ValuesCertControllerExtraArgs - extraEnv?: [any] - extraInitContainers?: [any] - extraVolumeMounts?: [any] - extraVolumes?: [any] - hostAliases?: [any] + extraEnv?: any + extraInitContainers?: any + extraVolumeMounts?: any + extraVolumes?: any + hostAliases?: any hostNetwork?: bool hostUsers?: bool image?: ValuesCertControllerImage - imagePullSecrets?: [any] + imagePullSecrets?: any livenessProbe?: ValuesCertControllerLivenessProbe log?: ValuesCertControllerLog metrics?: ValuesCertControllerMetrics + networkPolicy?: ValuesCertControllerNetworkPolicy nodeSelector?: ValuesCertControllerNodeSelector podAnnotations?: ValuesCertControllerPodAnnotations podDisruptionBudget?: ValuesCertControllerPodDisruptionBudget @@ -238,8 +250,8 @@ schema ValuesCertController: serviceAccount?: ValuesCertControllerServiceAccount startupProbe?: ValuesCertControllerStartupProbe strategy?: ValuesCertControllerStrategy - tolerations?: [any] - topologySpreadConstraints?: [any] + tolerations?: any + topologySpreadConstraints?: any schema ValuesCertControllerAffinity: r""" @@ -381,6 +393,42 @@ schema ValuesCertControllerMetricsServiceAnnotations: """ [...str]: any +schema ValuesCertControllerNetworkPolicy: + r""" + ValuesCertControllerNetworkPolicy + + Attributes + ---------- + egress : any, optional + enabled : bool, optional + ingress : [ValuesCertControllerNetworkPolicyIngressItems0], optional + """ + egress?: any + enabled?: bool + ingress?: [ValuesCertControllerNetworkPolicyIngressItems0] + +schema ValuesCertControllerNetworkPolicyIngressItems0: + r""" + ValuesCertControllerNetworkPolicyIngressItems0 + + Attributes + ---------- + ports : [ValuesCertControllerNetworkPolicyIngressItems0PortsItems0], optional + """ + ports?: [ValuesCertControllerNetworkPolicyIngressItems0PortsItems0] + +schema ValuesCertControllerNetworkPolicyIngressItems0PortsItems0: + r""" + ValuesCertControllerNetworkPolicyIngressItems0PortsItems0 + + Attributes + ---------- + port : str | int, optional + $protocol : str, optional + """ + port?: str | int + $protocol?: str + schema ValuesCertControllerNodeSelector: r""" ValuesCertControllerNodeSelector @@ -542,12 +590,14 @@ schema ValuesCertControllerStartupProbe: Attributes ---------- enabled : bool, optional - port : str, optional - useReadinessProbePort : bool, optional + failureThreshold : int, optional + initialDelaySeconds : int, optional + periodSeconds : int, optional """ enabled?: bool - port?: str - useReadinessProbePort?: bool + failureThreshold?: int + initialDelaySeconds?: int + periodSeconds?: int schema ValuesCertControllerStrategy: r""" @@ -628,10 +678,10 @@ schema ValuesGenericTargets: Attributes ---------- enabled : bool, optional - resources : [any], optional + resources : any, optional """ enabled?: bool - resources?: [any] + resources?: any schema ValuesGlobal: r""" @@ -641,25 +691,25 @@ schema ValuesGlobal: ---------- affinity : ValuesGlobalAffinity, optional compatibility : ValuesGlobalCompatibility, optional - hostAliases : [any], optional - imagePullSecrets : [any], optional + hostAliases : any, optional + imagePullSecrets : any, optional nodeSelector : ValuesGlobalNodeSelector, optional podAnnotations : ValuesGlobalPodAnnotations, optional podLabels : ValuesGlobalPodLabels, optional repository : str, optional - tolerations : [any], optional - topologySpreadConstraints : [any], optional + tolerations : any, optional + topologySpreadConstraints : any, optional """ affinity?: ValuesGlobalAffinity compatibility?: ValuesGlobalCompatibility - hostAliases?: [any] - imagePullSecrets?: [any] + hostAliases?: any + imagePullSecrets?: any nodeSelector?: ValuesGlobalNodeSelector podAnnotations?: ValuesGlobalPodAnnotations podLabels?: ValuesGlobalPodLabels repository?: str - tolerations?: [any] - topologySpreadConstraints?: [any] + tolerations?: any + topologySpreadConstraints?: any schema ValuesGlobalAffinity: r""" @@ -883,6 +933,42 @@ schema ValuesMetricsServiceAnnotations: """ [...str]: any +schema ValuesNetworkPolicy: + r""" + ValuesNetworkPolicy + + Attributes + ---------- + egress : any, optional + enabled : bool, optional + ingress : [ValuesNetworkPolicyIngressItems0], optional + """ + egress?: any + enabled?: bool + ingress?: [ValuesNetworkPolicyIngressItems0] + +schema ValuesNetworkPolicyIngressItems0: + r""" + ValuesNetworkPolicyIngressItems0 + + Attributes + ---------- + ports : [ValuesNetworkPolicyIngressItems0PortsItems0], optional + """ + ports?: [ValuesNetworkPolicyIngressItems0PortsItems0] + +schema ValuesNetworkPolicyIngressItems0PortsItems0: + r""" + ValuesNetworkPolicyIngressItems0PortsItems0 + + Attributes + ---------- + port : str | int, optional + $protocol : str, optional + """ + port?: str | int + $protocol?: str + schema ValuesNodeSelector: r""" ValuesNodeSelector @@ -937,12 +1023,14 @@ schema ValuesRbac: Attributes ---------- + aggregateToAdmin : bool, optional aggregateToEdit : bool, optional aggregateToView : bool, optional create : bool, optional serviceAccountTokenCreate : bool, optional servicebindings : ValuesRbacServicebindings, optional """ + aggregateToAdmin?: bool aggregateToEdit?: bool aggregateToView?: bool create?: bool @@ -1057,10 +1145,10 @@ schema ValuesService: Attributes ---------- - ipFamilies : [any], optional + ipFamilies : any, optional ipFamilyPolicy : str, optional """ - ipFamilies?: [any] + ipFamilies?: any ipFamilyPolicy?: str schema ValuesServiceAccount: @@ -1103,9 +1191,9 @@ schema ValuesServiceMonitor: enabled : bool, optional honorLabels : bool, optional interval : str, optional - metricRelabelings : [any], optional + metricRelabelings : any, optional namespace : str, optional - relabelings : [any], optional + relabelings : any, optional renderMode : "skipIfMissing" | "failIfMissing" | "alwaysRender", optional scrapeTimeout : str, optional """ @@ -1113,9 +1201,9 @@ schema ValuesServiceMonitor: enabled?: bool honorLabels?: bool interval?: str - metricRelabelings?: [any] + metricRelabelings?: any namespace?: str - relabelings?: [any] + relabelings?: any renderMode?: "skipIfMissing" | "failIfMissing" | "alwaysRender" scrapeTimeout?: str @@ -1157,20 +1245,21 @@ schema ValuesWebhook: create : bool, optional deploymentAnnotations : ValuesWebhookDeploymentAnnotations, optional extraArgs : ValuesWebhookExtraArgs, optional - extraEnv : [any], optional - extraInitContainers : [any], optional - extraVolumeMounts : [any], optional - extraVolumes : [any], optional + extraEnv : any, optional + extraInitContainers : any, optional + extraVolumeMounts : any, optional + extraVolumes : any, optional failurePolicy : str, optional - hostAliases : [any], optional + hostAliases : any, optional hostNetwork : bool, optional hostUsers : bool, optional image : ValuesWebhookImage, optional - imagePullSecrets : [any], optional + imagePullSecrets : any, optional livenessProbe : ValuesWebhookLivenessProbe, optional log : ValuesWebhookLog, optional lookaheadInterval : str, optional metrics : ValuesWebhookMetrics, optional + networkPolicy : ValuesWebhookNetworkPolicy, optional nodeSelector : ValuesWebhookNodeSelector, optional podAnnotations : ValuesWebhookPodAnnotations, optional podDisruptionBudget : ValuesWebhookPodDisruptionBudget, optional @@ -1186,9 +1275,10 @@ schema ValuesWebhook: securityContext : ValuesWebhookSecurityContext, optional service : ValuesWebhookService, optional serviceAccount : ValuesWebhookServiceAccount, optional + startupProbe : ValuesWebhookStartupProbe, optional strategy : ValuesWebhookStrategy, optional - tolerations : [any], optional - topologySpreadConstraints : [any], optional + tolerations : any, optional + topologySpreadConstraints : any, optional """ affinity?: ValuesWebhookAffinity annotations?: ValuesWebhookAnnotations @@ -1198,20 +1288,21 @@ schema ValuesWebhook: create?: bool deploymentAnnotations?: ValuesWebhookDeploymentAnnotations extraArgs?: ValuesWebhookExtraArgs - extraEnv?: [any] - extraInitContainers?: [any] - extraVolumeMounts?: [any] - extraVolumes?: [any] + extraEnv?: any + extraInitContainers?: any + extraVolumeMounts?: any + extraVolumes?: any failurePolicy?: str - hostAliases?: [any] + hostAliases?: any hostNetwork?: bool hostUsers?: bool image?: ValuesWebhookImage - imagePullSecrets?: [any] + imagePullSecrets?: any livenessProbe?: ValuesWebhookLivenessProbe log?: ValuesWebhookLog lookaheadInterval?: str metrics?: ValuesWebhookMetrics + networkPolicy?: ValuesWebhookNetworkPolicy nodeSelector?: ValuesWebhookNodeSelector podAnnotations?: ValuesWebhookPodAnnotations podDisruptionBudget?: ValuesWebhookPodDisruptionBudget @@ -1227,9 +1318,10 @@ schema ValuesWebhook: securityContext?: ValuesWebhookSecurityContext service?: ValuesWebhookService serviceAccount?: ValuesWebhookServiceAccount + startupProbe?: ValuesWebhookStartupProbe strategy?: ValuesWebhookStrategy - tolerations?: [any] - topologySpreadConstraints?: [any] + tolerations?: any + topologySpreadConstraints?: any schema ValuesWebhookAffinity: r""" @@ -1441,6 +1533,42 @@ schema ValuesWebhookMetricsServiceAnnotations: """ [...str]: any +schema ValuesWebhookNetworkPolicy: + r""" + ValuesWebhookNetworkPolicy + + Attributes + ---------- + egress : any, optional + enabled : bool, optional + ingress : [ValuesWebhookNetworkPolicyIngressItems0], optional + """ + egress?: any + enabled?: bool + ingress?: [ValuesWebhookNetworkPolicyIngressItems0] + +schema ValuesWebhookNetworkPolicyIngressItems0: + r""" + ValuesWebhookNetworkPolicyIngressItems0 + + Attributes + ---------- + ports : [ValuesWebhookNetworkPolicyIngressItems0PortsItems0], optional + """ + ports?: [ValuesWebhookNetworkPolicyIngressItems0PortsItems0] + +schema ValuesWebhookNetworkPolicyIngressItems0PortsItems0: + r""" + ValuesWebhookNetworkPolicyIngressItems0PortsItems0 + + Attributes + ---------- + port : str | int, optional + $protocol : str, optional + """ + port?: str | int + $protocol?: str + schema ValuesWebhookNodeSelector: r""" ValuesWebhookNodeSelector @@ -1621,6 +1749,22 @@ schema ValuesWebhookServiceLabels: """ [...str]: any +schema ValuesWebhookStartupProbe: + r""" + ValuesWebhookStartupProbe + + Attributes + ---------- + enabled : bool, optional + failureThreshold : int, optional + initialDelaySeconds : int, optional + periodSeconds : int, optional + """ + enabled?: bool + failureThreshold?: int + initialDelaySeconds?: int + periodSeconds?: int + schema ValuesWebhookStrategy: r""" ValuesWebhookStrategy