Cluster Scope Secrets For Kubernetes

About this project

This repository adds cluster-scope secrets (as kind ClusterSecret) to Kubernetes clusters. It contains a cluster-scope custom resource definition clustersecrets.core.cs.sap.com and an according operator reconciling resources of this type.

A typical ClusterSecret could look as follows:

apiVersion: core.cs.sap.com/v1alpha1
kind: ClusterSecret
metadata:
  name: my-secret
spec:
  namespaceSelector:
    matchLabels:
      mylabel: myvalue
  template:
    type: Opaque
    data:
      mykey: bXl2YWx1ZQ==

When reconciling this object, the operator will ensure that an according regular Secret with the same name (my-secret) exists in all namespaces matching the provided label selector.

Requirements and Setup

The recommended deployment method is to use the Helm chart:

helm upgrade -i clustersecret-operator oci://ghcr.io/sap/clustersecret-operator-helm/clustersecret-operator

Documentation

The project's documentation can be found here: https://sap.github.io/clustersecret-operator.
The API reference is here: https://pkg.go.dev/github.com/sap/clustersecret-operator.

Support, Feedback, Contributing

This project is open to feature requests/suggestions, bug reports etc. via GitHub issues. Contribution and feedback are encouraged and always welcome. For more information about how to contribute, the project structure, as well as additional contribution information, see our Contribution Guidelines.

Code of Conduct

We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone. By participating in this project, you agree to abide by its Code of Conduct at all times.

Licensing

Copyright 2024 SAP SE or an SAP affiliate company and clustersecret-operator contributors. Please see our LICENSE for copyright and license information. Detailed information including third-party components and their licensing/copyright information is available via the REUSE tool.