external-secrets icon indicating copy to clipboard operation
external-secrets copied to clipboard

Support cluster-scoped generators (specifically Password)

Open cten opened this issue 3 years ago • 9 comments

Describe the solution you'd like I would like to declare a Password Generator that adheres to my requirements (length, complexity) once then re-use across all namespaces.

What is the added value? I don't have to create the same Password Generator in multiple namespaces. Cleaner.

cten avatar Feb 13 '23 16:02 cten

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 30 days.

github-actions[bot] avatar May 15 '23 01:05 github-actions[bot]

Keep alive

cten avatar May 15 '23 17:05 cten

Have you find a workaround ?

Davidffry avatar Jul 20 '23 09:07 Davidffry

There's no workaround. We'll need a new Kind to make generators cluster-scoped.

I've created a new Milestone to track enhancements around Generators, it seems there's interest in this from the community.

moolen avatar Jul 20 '23 10:07 moolen

Thanks you, I'll follow this.

Davidffry avatar Jul 20 '23 12:07 Davidffry

I'm facing same issue with ecrauthorizationtokens and fakes generators, when trying to create following chain: clusterexternalsecret, fake, ecrauthorizationtokens -> externalsecret (per matching namespaces) -> secret (per matching namespaces)

erikzele avatar Nov 17 '23 12:11 erikzele

I'm tagging along here. I would like to create ACRGenerators at a cluster level, so that individual namespaces can request pull credentials for the container registry. If I have to apply the ACR Generator on a per-namespace level I might as well just apply a dockerconfig secret.

It would be great to get cluster scoped generators.

avosepp avatar Jan 12 '24 20:01 avosepp

+1 to this, would like to use ClusterExternalSecrets with a generator

TheBritz avatar Jul 10 '24 13:07 TheBritz

+1. Want to have ECRAuthorizationToken generator cluster scoped to update imagePullSecret's secret in multiple namespaces using ClusterExternalSecret... For now, had to make dirty hack via storing username/password in SecretStore/ClusterSecretStore using PushSecret and then reuse those via creating additional ClusterExternalSecret :(

alexzandershevchenko avatar Aug 27 '24 11:08 alexzandershevchenko