1package v1alpha1
  2
  3import "time"
  4
  5// SealedSecret is the K8s representation of a "sealed Secret" - a
  6// regular k8s Secret that has been sealed (encrypted) using the
  7// controller's key.
  8#SealedSecret: {
  9	_embeddedResource
 10
 11	// APIVersion defines the versioned schema of this representation of an object.
 12	// Servers should convert recognized schemas to the latest internal value, and
 13	// may reject unrecognized values.
 14	// More info:
 15	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
 16	"apiVersion"?: string
 17
 18	// Kind is a string value representing the REST resource this object represents.
 19	// Servers may infer this from the endpoint the client submits requests to.
 20	// Cannot be updated.
 21	// In CamelCase.
 22	// More info:
 23	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 24	"kind"?:     string
 25	"metadata"?: {}
 26
 27	// SealedSecretSpec is the specification of a SealedSecret.
 28	"spec"!: {
 29		// Data is deprecated and will be removed eventually. Use per-value EncryptedData instead.
 30		"data"?: string
 31		"encryptedData"!: {
 32			[string]: string
 33			...
 34		}
 35
 36		// Template defines the structure of the Secret that will be
 37		// created from this sealed secret.
 38		"template"?: {
 39			// Keys that should be templated using decrypted data.
 40			"data"?: null | {[string]: string}
 41
 42			// Immutable, if set to true, ensures that data stored in the Secret cannot
 43			// be updated (only object metadata can be modified).
 44			// If not set to true, the field can be modified at any time.
 45			// Defaulted to nil.
 46			"immutable"?: bool
 47
 48			// Standard object's metadata.
 49			// More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata
 50			"metadata"?: null | {
 51				"annotations"?: [string]: string
 52				"finalizers"?: [...string]
 53				"labels"?: [string]: string
 54				"name"?:      string
 55				"namespace"?: string
 56				...
 57			}
 58
 59			// Used to facilitate programmatic handling of secret data.
 60			"type"?: string
 61		}
 62	}
 63
 64	// SealedSecretStatus is the most recently observed status of the SealedSecret.
 65	"status"?: {
 66		// Represents the latest available observations of a sealed secret's current state.
 67		"conditions"?: [...{
 68			// Last time the condition transitioned from one status to another.
 69			"lastTransitionTime"?: time.Time
 70
 71			// The last time this condition was updated.
 72			"lastUpdateTime"?: time.Time
 73
 74			// A human readable message indicating details about the transition.
 75			"message"?: string
 76
 77			// The reason for the condition's last transition.
 78			"reason"?: string
 79
 80			// Status of the condition for a sealed secret.
 81			// Valid values for "Synced": "True", "False", or "Unknown".
 82			"status"!: string
 83
 84			// Type of condition for a sealed secret.
 85			// Valid value: "Synced"
 86			"type"!: string
 87		}]
 88
 89		// ObservedGeneration reflects the generation most recently observed by the
 90		// sealed-secrets controller.
 91		"observedGeneration"?: int64 & int
 92	}
 93
 94	_embeddedResource: {
 95		"apiVersion"!: string
 96		"kind"!:       string
 97		"metadata"?:   {...}
 98	}
 99	apiVersion: "bitnami.com/v1alpha1"
100	kind:       "SealedSecret"
101	metadata!: {
102		"name"!:        string
103		"namespace"!:   string
104		"labels"?:      {[string]: string}
105		"annotations"?: {[string]: string}
106		...
107	}
108}