keda.sh / v1alpha1 / TriggerAuthentication
- string
.apiVersion
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- string
.kind
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- object
.metadata
- object required
.spec
TriggerAuthenticationSpec defines the various ways to authenticate
- object
.spec .awsSecretManager
AwsSecretManager is used to authenticate using AwsSecretManager
- object
.spec .awsSecretManager .credentials
- object required
.spec .awsSecretManager .credentials .accessKey
- object required
.spec .awsSecretManager .credentials .accessKey .valueFrom
- object required
.spec .awsSecretManager .credentials .accessKey .valueFrom .secretKeyRef
- string required
.spec .awsSecretManager .credentials .accessKey .valueFrom .secretKeyRef .key
- string required
.spec .awsSecretManager .credentials .accessKey .valueFrom .secretKeyRef .name
- object required
.spec .awsSecretManager .credentials .accessSecretKey
- object required
.spec .awsSecretManager .credentials .accessSecretKey .valueFrom
- object required
.spec .awsSecretManager .credentials .accessSecretKey .valueFrom .secretKeyRef
- string required
.spec .awsSecretManager .credentials .accessSecretKey .valueFrom .secretKeyRef .key
- string required
.spec .awsSecretManager .credentials .accessSecretKey .valueFrom .secretKeyRef .name
- object
.spec .awsSecretManager .credentials .accessToken
- object required
.spec .awsSecretManager .credentials .accessToken .valueFrom
- object required
.spec .awsSecretManager .credentials .accessToken .valueFrom .secretKeyRef
- string required
.spec .awsSecretManager .credentials .accessToken .valueFrom .secretKeyRef .key
- string required
.spec .awsSecretManager .credentials .accessToken .valueFrom .secretKeyRef .name
- object
.spec .awsSecretManager .podIdentity
AuthPodIdentity allows users to select the platform native identity mechanism
- string
.spec .awsSecretManager .podIdentity .identityAuthorityHost
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
- string
.spec .awsSecretManager .podIdentity .identityId
- string
.spec .awsSecretManager .podIdentity .identityOwner
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
- string
.spec .awsSecretManager .podIdentity .identityTenantId
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
- string required
.spec .awsSecretManager .podIdentity .provider
PodIdentityProvider contains the list of providers
- string
.spec .awsSecretManager .podIdentity .roleArn
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
- string
.spec .awsSecretManager .region
- array required
.spec .awsSecretManager .secrets
- string required
.spec .awsSecretManager .secrets[] .name
- string required
.spec .awsSecretManager .secrets[] .parameter
- string
.spec .awsSecretManager .secrets[] .secretKey
- string
.spec .awsSecretManager .secrets[] .versionId
- string
.spec .awsSecretManager .secrets[] .versionStage
- object
.spec .azureKeyVault
AzureKeyVault is used to authenticate using Azure Key Vault
- object
.spec .azureKeyVault .cloud
- string
.spec .azureKeyVault .cloud .activeDirectoryEndpoint
- string
.spec .azureKeyVault .cloud .keyVaultResourceURL
- string required
.spec .azureKeyVault .cloud .type
- object
.spec .azureKeyVault .credentials
- string required
.spec .azureKeyVault .credentials .clientId
- object required
.spec .azureKeyVault .credentials .clientSecret
- object required
.spec .azureKeyVault .credentials .clientSecret .valueFrom
- object required
.spec .azureKeyVault .credentials .clientSecret .valueFrom .secretKeyRef
- string required
.spec .azureKeyVault .credentials .clientSecret .valueFrom .secretKeyRef .key
- string required
.spec .azureKeyVault .credentials .clientSecret .valueFrom .secretKeyRef .name
- string required
.spec .azureKeyVault .credentials .tenantId
- object
.spec .azureKeyVault .podIdentity
AuthPodIdentity allows users to select the platform native identity mechanism
- string
.spec .azureKeyVault .podIdentity .identityAuthorityHost
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
- string
.spec .azureKeyVault .podIdentity .identityId
- string
.spec .azureKeyVault .podIdentity .identityOwner
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
- string
.spec .azureKeyVault .podIdentity .identityTenantId
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
- string required
.spec .azureKeyVault .podIdentity .provider
PodIdentityProvider contains the list of providers
- string
.spec .azureKeyVault .podIdentity .roleArn
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
- array required
.spec .azureKeyVault .secrets
- string required
.spec .azureKeyVault .secrets[] .name
- string required
.spec .azureKeyVault .secrets[] .parameter
- string
.spec .azureKeyVault .secrets[] .version
- string required
.spec .azureKeyVault .vaultUri
- array
.spec .boundServiceAccountToken
- string required
.spec .boundServiceAccountToken[] .parameter
- string required
.spec .boundServiceAccountToken[] .serviceAccountName
- array
.spec .configMapTargetRef
- string required
.spec .configMapTargetRef[] .key
- string required
.spec .configMapTargetRef[] .name
- string required
.spec .configMapTargetRef[] .parameter
- array
.spec .env
- string
.spec .env[] .containerName
- string required
.spec .env[] .name
- string required
.spec .env[] .parameter
- object
.spec .gcpSecretManager
- object
.spec .gcpSecretManager .credentials
- object required
.spec .gcpSecretManager .credentials .clientSecret
- object required
.spec .gcpSecretManager .credentials .clientSecret .valueFrom
- object required
.spec .gcpSecretManager .credentials .clientSecret .valueFrom .secretKeyRef
- string required
.spec .gcpSecretManager .credentials .clientSecret .valueFrom .secretKeyRef .key
- string required
.spec .gcpSecretManager .credentials .clientSecret .valueFrom .secretKeyRef .name
- object
.spec .gcpSecretManager .podIdentity
AuthPodIdentity allows users to select the platform native identity mechanism
- string
.spec .gcpSecretManager .podIdentity .identityAuthorityHost
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
- string
.spec .gcpSecretManager .podIdentity .identityId
- string
.spec .gcpSecretManager .podIdentity .identityOwner
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
- string
.spec .gcpSecretManager .podIdentity .identityTenantId
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
- string required
.spec .gcpSecretManager .podIdentity .provider
PodIdentityProvider contains the list of providers
- string
.spec .gcpSecretManager .podIdentity .roleArn
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
- array required
.spec .gcpSecretManager .secrets
- string required
.spec .gcpSecretManager .secrets[] .id
- string required
.spec .gcpSecretManager .secrets[] .parameter
- string
.spec .gcpSecretManager .secrets[] .version
- object
.spec .hashiCorpVault
HashiCorpVault is used to authenticate using Hashicorp Vault
- string required
.spec .hashiCorpVault .address
- string required
.spec .hashiCorpVault .authentication
VaultAuthentication contains the list of Hashicorp Vault authentication methods
- object
.spec .hashiCorpVault .credential
Credential defines the Hashicorp Vault credentials depending on the authentication method
- string
.spec .hashiCorpVault .credential .serviceAccount
- string
.spec .hashiCorpVault .credential .token
- string
.spec .hashiCorpVault .mount
- string
.spec .hashiCorpVault .namespace
- string
.spec .hashiCorpVault .role
- array required
.spec .hashiCorpVault .secrets
- string required
.spec .hashiCorpVault .secrets[] .key
- string required
.spec .hashiCorpVault .secrets[] .parameter
- string required
.spec .hashiCorpVault .secrets[] .path
- object
.spec .hashiCorpVault .secrets[] .pkiData
- string
.spec .hashiCorpVault .secrets[] .pkiData .altNames
- string
.spec .hashiCorpVault .secrets[] .pkiData .commonName
- string
.spec .hashiCorpVault .secrets[] .pkiData .format
- string
.spec .hashiCorpVault .secrets[] .pkiData .ipSans
- string
.spec .hashiCorpVault .secrets[] .pkiData .otherSans
- string
.spec .hashiCorpVault .secrets[] .pkiData .ttl
- string
.spec .hashiCorpVault .secrets[] .pkiData .uriSans
- string
.spec .hashiCorpVault .secrets[] .type
VaultSecretType defines the type of vault secret
- object
.spec .podIdentity
AuthPodIdentity allows users to select the platform native identity mechanism
- string
.spec .podIdentity .identityAuthorityHost
Set identityAuthorityHost to override the default Azure authority host. If this is set, then the IdentityTenantID must also be set
- string
.spec .podIdentity .identityId
- string
.spec .podIdentity .identityOwner
IdentityOwner configures which identity has to be used during auto discovery, keda or the scaled workload. Mutually exclusive with roleArn
- string
.spec .podIdentity .identityTenantId
Set identityTenantId to override the default Azure tenant id. If this is set, then the IdentityID must also be set
- string required
.spec .podIdentity .provider
PodIdentityProvider contains the list of providers
- string
.spec .podIdentity .roleArn
RoleArn sets the AWS RoleArn to be used. Mutually exclusive with IdentityOwner
- array
.spec .secretTargetRef
- string required
.spec .secretTargetRef[] .key
- string required
.spec .secretTargetRef[] .name
- string required
.spec .secretTargetRef[] .parameter
- object
.status
TriggerAuthenticationStatus defines the observed state of TriggerAuthentication
- string
.status .scaledjobs
- string
.status .scaledobjects