TDEConfig v1.6.0 custom resource definition

Select a documentation version: 17.5.0

• Current (17.5.0)
• 17.5.0

Spec schema

TdeConfigSpec defines the desired state of TDEConfig.

kekUrlRef:
  key: string
  name: string
  optional: boolean
kmsProvider:
  vault:
    authMount: string
    authType: string
    jwt:
      pathRef:
        key: string
        name: string
        optional: boolean
      role: string

Field Type Required or optional	Description
kekUrlRef
object Required	KekUrlRef is a reference to the Key Encryption Key (KEK) URL stored in a ConfigMap.
kekUrlRef.key
string Required	The key to select.
kekUrlRef.name
string Optional	Name of the referent.
kekUrlRef.optional
boolean Optional	Specify whether the ConfigMap or its key must be defined.
kmsProvider
object Required	KmsProvider specifies the KMS provider.
kmsProvider.vault
object Required	Vault specifies the Hashicorp Vault provider.
kmsProvider.vault.authMount
string Required	Path on the Vault server where the authentication engine is mounted.
kmsProvider.vault.authType
string Required	Authentication method. Allowed values: "jwt".
kmsProvider.vault.jwt
object Required	JWT specifies the JWT authentication method.
kmsProvider.vault.jwt.pathRef
object Required	PathRef is a reference to the path to the JWT token on the host stored in a ConfigMap.
kmsProvider.vault.jwt.pathRef.key
string Required	The key to select.
kmsProvider.vault.jwt.pathRef.name
string Optional	Name of the referent.
kmsProvider.vault.jwt.pathRef.optional
boolean Optional	Specify whether the ConfigMap or its key must be defined.
kmsProvider.vault.jwt.role
string Optional	Role is the role for JWT authentication.