ClusterTriggerAuthentication
keda.sh / v1alpha1
apiVersion: keda.sh/v1alpha1
kind: ClusterTriggerAuthentication
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object required
TriggerAuthenticationSpec defines the various ways to authenticate
awsSecretManager object
AwsSecretManager is used to authenticate using AwsSecretManager
credentials object
accessKey object required
valueFrom object required
secretKeyRef object required
key
string required
name
string required
accessSecretKey object required
valueFrom object required
secretKeyRef object required
key
string required
name
string required
accessToken object
valueFrom object required
secretKeyRef object required
key
string required
name
string required
podIdentity object
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHost
string
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityId
string
identityOwner
string
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum:
keda, workload
identityTenantId
string
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
provider
string required
PodIdentityProvider contains the list of providers
enum:
azure-workload, gcp, aws, aws-eks, none
roleArn
string
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
region
string
secrets []object required
name
string required
parameter
string required
secretKey
string
versionId
string
versionStage
string
azureKeyVault object
AzureKeyVault is used to authenticate using Azure Key Vault
cloud object
activeDirectoryEndpoint
string
keyVaultResourceURL
string
type
string required
credentials object
clientId
string required
clientSecret object required
valueFrom object required
secretKeyRef object required
key
string required
name
string required
tenantId
string required
podIdentity object
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHost
string
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityId
string
identityOwner
string
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum:
keda, workload
identityTenantId
string
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
provider
string required
PodIdentityProvider contains the list of providers
enum:
azure-workload, gcp, aws, aws-eks, none
roleArn
string
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secrets []object required
name
string required
parameter
string required
version
string
vaultUri
string required
boundServiceAccountToken []object
parameter
string required
serviceAccountName
string required
configMapTargetRef []object
key
string required
name
string required
parameter
string required
env []object
containerName
string
name
string required
parameter
string required
filePath
string
FilePath specifies a file containing auth parameters as JSON map[string]string.
When set, auth params are read directly from this file instead.
gcpSecretManager object
credentials object
clientSecret object required
valueFrom object required
secretKeyRef object required
key
string required
name
string required
podIdentity object
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHost
string
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityId
string
identityOwner
string
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum:
keda, workload
identityTenantId
string
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
provider
string required
PodIdentityProvider contains the list of providers
enum:
azure-workload, gcp, aws, aws-eks, none
roleArn
string
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secrets []object required
id
string required
parameter
string required
version
string
hashiCorpVault object
HashiCorpVault is used to authenticate using Hashicorp Vault
address
string required
authentication
string required
VaultAuthentication contains the list of Hashicorp Vault authentication methods
credential object
Credential defines the Hashicorp Vault credentials depending on the authentication method
serviceAccount
string
serviceAccountName
string
token
string
mount
string
namespace
string
role
string
secrets []object required
key
string required
parameter
string required
path
string required
pkiData object
altNames
string
commonName
string
format
string
ipSans
string
otherSans
string
ttl
string
uriSans
string
type
string
VaultSecretType defines the type of vault secret
podIdentity object
AuthPodIdentity allows users to select the platform native identity
mechanism
identityAuthorityHost
string
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
identityId
string
identityOwner
string
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
enum:
keda, workload
identityTenantId
string
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
provider
string required
PodIdentityProvider contains the list of providers
enum:
azure-workload, gcp, aws, aws-eks, none
roleArn
string
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
secretTargetRef []object
key
string required
name
string required
parameter
string required
status object
TriggerAuthenticationStatus defines the observed state of TriggerAuthentication
scaledjobs
string
scaledobjects
string
No matches. Try .spec.awsSecretManager for an exact path