APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kindstring
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadataobject
specobjectrequired
TriggerAuthenticationSpec defines the various ways to authenticate
awsSecretManagerobject
AwsSecretManager is used to authenticate using AwsSecretManager
credentialsobject
accessKeyobjectrequired
valueFromobjectrequired
secretKeyRefobjectrequired
keystringrequired
namestringrequired
accessSecretKeyobjectrequired
valueFromobjectrequired
secretKeyRefobjectrequired
keystringrequired
namestringrequired
accessTokenobject
valueFromobjectrequired
secretKeyRefobjectrequired
keystringrequired
namestringrequired
podIdentityobject
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHoststring
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityIdstring
identityOwnerstring
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum: keda, workload
identityTenantIdstring
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
providerstringrequired
PodIdentityProvider contains the list of providers
enum: azure-workload, gcp, aws, aws-eks, none
roleArnstring
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
regionstring
secrets[]objectrequired
namestringrequired
parameterstringrequired
secretKeystring
versionIdstring
versionStagestring
azureKeyVaultobject
AzureKeyVault is used to authenticate using Azure Key Vault
cloudobject
activeDirectoryEndpointstring
keyVaultResourceURLstring
typestringrequired
credentialsobject
clientIdstringrequired
clientSecretobjectrequired
valueFromobjectrequired
secretKeyRefobjectrequired
keystringrequired
namestringrequired
tenantIdstringrequired
podIdentityobject
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHoststring
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityIdstring
identityOwnerstring
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum: keda, workload
identityTenantIdstring
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
providerstringrequired
PodIdentityProvider contains the list of providers
enum: azure-workload, gcp, aws, aws-eks, none
roleArnstring
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secrets[]objectrequired
namestringrequired
parameterstringrequired
versionstring
vaultUristringrequired
boundServiceAccountToken[]object
parameterstringrequired
serviceAccountNamestringrequired
configMapTargetRef[]object
keystringrequired
namestringrequired
parameterstringrequired
env[]object
containerNamestring
namestringrequired
parameterstringrequired
filePathstring
FilePath specifies a file containing auth parameters as JSON map[string]string.
When set, auth params are read directly from this file instead.
gcpSecretManagerobject
credentialsobject
clientSecretobjectrequired
valueFromobjectrequired
secretKeyRefobjectrequired
keystringrequired
namestringrequired
podIdentityobject
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHoststring
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityIdstring
identityOwnerstring
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum: keda, workload
identityTenantIdstring
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
providerstringrequired
PodIdentityProvider contains the list of providers
enum: azure-workload, gcp, aws, aws-eks, none
roleArnstring
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secrets[]objectrequired
idstringrequired
parameterstringrequired
versionstring
hashiCorpVaultobject
HashiCorpVault is used to authenticate using Hashicorp Vault
addressstringrequired
authenticationstringrequired
VaultAuthentication contains the list of Hashicorp Vault authentication methods
credentialobject
Credential defines the Hashicorp Vault credentials depending on the authentication method
serviceAccountstring
serviceAccountNamestring
tokenstring
mountstring
namespacestring
rolestring
secrets[]objectrequired
keystringrequired
parameterstringrequired
pathstringrequired
pkiDataobject
altNamesstring
commonNamestring
formatstring
ipSansstring
otherSansstring
ttlstring
uriSansstring
typestring
VaultSecretType defines the type of vault secret
podIdentityobject
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHoststring
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityIdstring
identityOwnerstring
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum: keda, workload
identityTenantIdstring
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
providerstringrequired
PodIdentityProvider contains the list of providers
enum: azure-workload, gcp, aws, aws-eks, none
roleArnstring
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secretTargetRef[]object
keystringrequired
namestringrequired
parameterstringrequired
statusobject
TriggerAuthenticationStatus defines the observed state of TriggerAuthentication