external-secrets-operator-package

This package provides external-secrets-operator functionality using external-secrets-operator.

Components

• external-secrets-operator

Configuration

The following configuration values can be set to customize the external-secrets-operator installation.

Global

Value	Required/Optional	Default	Description
namespace	Optional	external-secrets	The namespace in which to deploy external-secrets-operator.

Usage Example

This walkthrough guides you through using external-secrets-operator...

NOTE: develop version of the package needs to comply with semver, hence the package will be versioned as 0.0.0+develop

Test in minikube

Start minikube:

minikube start

Install kapp-controller 0.20+

kubectl apply -f https://github.com/vmware-tanzu/carvel-kapp-controller/releases/latest/download/release.yml

Install the Package Metadata:

kubectl apply -f target/k8s

Install the Required RBAC for the package install (create the control NS):

kubectl apply -f target/test/packageinstall-ns-rbac.yaml

Create the configuration file for your cluster:

kubectl create secret generic external-secrets-operator -n external-secrets-operator-package --from-file=values.yaml=src/examples-values/minikube.yaml -o yaml --dry-run=client | kubectl apply -f -

Create the package:

kubectl apply -f target/test/packageinstall.yaml

Verify the installation:

watch kubectl get packageinstall -A

If there's an issue, you can verify the problem with:

kubectl get packageinstall external-secrets-operator -n external-secrets-operator-package -o yaml

Develop checklist

1. Update your config.json with the package info
2. Add overlays and values
3. Test your bundle: ytt --data-values-file src/example-values/minikube.yaml -f src/bundle/config providing a sample values file from example-values
4. Build your bundle ./hack/build.sh
5. Add it to the failk8s-repo and publish the new repo and test the package from there, or test with local files

NOTE: develop versions will not be image locked and will have a version of 0.0.0+develop to comply with semver.