Skip to main content

Secrets

By default, this is enabled.

Sync Secret resources used by pods from the virtual cluster to the host cluster. Apps frequently need secret data to function.

Sync only utilized secrets from virtual to host cluster (Default)​

sync:
  toHost:
    secrets:
      enabled: true

Sync all secrets from virtual to host cluster​

vCluster only knows about a couple of virtual cluster resources that actually use secrets and tries to sync only those into the host cluster. You can enable syncing all virtual cluster secrets to avoid the problem that needed secrets are not synced to the host cluster.

sync:
  toHost:
    secrets:
      enabled: true
      all: true

Config reference​

Do Not Disable

Disabling the syncing of this resource could cause the vCluster to not work properly.

secrets required object pro​

Secrets defines if secrets created within the virtual cluster should get synced to the host cluster.

enabled required boolean true pro​

Enabled defines if this option should be enabled.

all required boolean false pro​

All defines if all resources of that type should get synced or only the necessary ones that are needed.

translate required object[] pro​

Translate the patch according to the given patches.

path required string pro​

Path is the path within the patch to target. If the path is not found within the patch, the patch is not applied.

expression required object pro​

Expression transforms the value according to the given JavaScript expression.

toHost required string pro​

ToHost is the expression to apply when retrieving a change from virtual to host.

fromHost required string pro​

FromHost is the patch to apply when retrieving a change from host to virtual.

reference required object pro​

Reference rewrites the value value according to the name.

apiVersion required string pro​

APIVersion is the apiVersion of the referenced object.

kind required string pro​

Kind is the kind of the referenced object.

namePath required string pro​

NamePath is the optional path to the reference name within the object. If omitted namePath equals to the translate patch path.

namespacePath required string pro​

NamespacePath is the optional path to the reference namespace within the object. If omitted namespacePath equals to the metadata.namespace path of the object.