Add support for KV Secrets Engine - Version 2
The Vault Secrets Operator supports the KV Secrets Engine - Version 2 from now on. For this, the CRD has been expanded by two new fields. The spec.secretEngine
and the version
field.
spec.secretEngine
: Set the secret engine where the Vault secret is stored. This must bekv1
orkv2
.kv1
is used for the KV Secrets Engine - Version 1 andkv2
for the KV Secrets Engine - Version 2. If the field is omitted,kv1
will be used.spec.version
: If the KV Secrets Engine - Version 2 is used this field is used to set the Version of the Vault secret, which should be used. If the field is omitted the operator will use the latest version of the Vault secret.
apiVersion: ricoberger.de/v1alpha1
kind: VaultSecret
metadata:
name: kv2-example-vaultsecret
spec:
keys:
- foo
path: kv2/example-vaultsecret
secretEngine: kv2
type: Opaque
version: 4