Vault is the Schema for the Vaults API. Manages a Key Vault.
Type
CRD
Group
keyvault.azure.upbound.io
Version
v1beta1
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
VaultSpec defines the desired state of Vault
No description provided.
A network_acls block as defined below.
One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
One or more Subnet IDs which should be able to access this Key Vault.
Reference to a ResourceGroup in azure to populate resourceGroupName.
Policies for referencing.
Selector for a ResourceGroup in azure to populate resourceGroupName.
Policies for selection.
ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.
Policies for referencing.
ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. providerConfigRef
Policies for referencing.
PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.
WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.
VaultStatus defines the observed state of Vault.
No description provided.
A list of up to 1024 objects describing access policies, as described below.
List of certificate permissions, must be one or more from the following: Backup, Create, Delete, DeleteIssuers, Get, GetIssuers, Import, List, ListIssuers, ManageContacts, ManageIssuers, Purge, Recover, Restore, SetIssuers and Update.
List of key permissions. Possible values are Backup, Create, Decrypt, Delete, Encrypt, Get, Import, List, Purge, Recover, Restore, Sign, UnwrapKey, Update, Verify, WrapKey, Release, Rotate, GetRotationPolicy and SetRotationPolicy.
List of secret permissions, must be one or more from the following: Backup, Delete, Get, List, Purge, Recover, Restore and Set.
List of storage permissions, must be one or more from the following: Backup, Delete, DeleteSAS, Get, GetSAS, List, ListSAS, Purge, Recover, RegenerateKey, Restore, Set, SetSAS and Update.
Conditions of the resource.
${Rand.RFC1123Subdomain}
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: keyvault/v1beta1/secret
labels:
testing.upbound.io/example-name: example
name: ${Rand.RFC1123Subdomain}
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example
skuName: premium
softDeleteRetentionDays: 7
tenantId: ${data.azurerm_client_config.current.tenant_id}
test-certificatecontacts
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: keyvault/v1beta1/certificatecontacts
upjet.upbound.io/manual-intervention: This resource is dependency of
CertificateContacts. This resource is skipping because parent resource was
skipped.
labels:
testing.upbound.io/example-name: example
name: test-certificatecontacts
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example
skuName: premium
tenantId: ${data.azurerm_client_config.current.tenant_id}
example-upbound
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
upjet.upbound.io/manual-intervention: The resource depends on a Server and it needs a manual intervention.
labels:
testing.upbound.io/example-name: example
name: example-upbound
spec:
forProvider:
location: West Europe
purgeProtectionEnabled: true
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example
skuName: premium
tenantId: ${data.azurerm_client_config.current.tenant_id}
example
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
crossplane.io/external-name: ${Rand.RFC1123Subdomain}
labels:
testing.upbound.io/example-name: example
name: example
spec:
forProvider:
enabledForDiskEncryption: true
location: West Europe
purgeProtectionEnabled: true
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example
skuName: premium
tenantId: ${data.azurerm_client_config.current.tenant_id}
wssqlaadadmin-vault
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: synapse/v1beta1/workspacesqlaadadmin
upjet.upbound.io/manual-intervention: This resource requires one more Access Policy with real ID
labels:
testing.upbound.io/example-name: wssqlaadadmin-vault
name: wssqlaadadmin-vault
spec:
forProvider:
location: West Europe
purgeProtectionEnabled: true
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: wssqlaadadmin-rg
skuName: standard
tenantId: ${data.azurerm_client_config.current.tenant_id}
${Rand.RFC1123Subdomain}
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
labels:
testing.upbound.io/example-name: example
name: ${Rand.RFC1123Subdomain}
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example-keyvault
skuName: standard
tenantId: ${data.azurerm_client_config.current.tenant_id}
lkservicekvltkvlt
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: datafactory/v1beta1/linkedservicekeyvault
labels:
testing.upbound.io/example-name: lkservicekvltkvlt
name: lkservicekvltkvlt
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: linkedservicekeyvault-rg
skuName: standard
tenantId: ${data.azurerm_client_config.current.tenant_id}
exampledatabrickkeyvault
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: databricks/v1beta1/workspacecustomermanagedkey
upjet.upbound.io/manual-intervention: This resource requires Data Bricks real object ID.
labels:
testing.upbound.io/example-name: exampledatabrickkeyvault
name: exampledatabrickkeyvault
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: examplebricksrg
skuName: premium
tenantId: ${data.azurerm_client_config.current.tenant_id}
ssplrexample
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: signalrservice/v1beta1/signalrsharedprivatelinkresource
labels:
testing.upbound.io/example-name: example
name: ssplrexample
spec:
forProvider:
location: east us
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: example
skuName: standard
softDeleteRetentionDays: 7
tenantId: b9925bc4-8383-4c37-b9d2-fa456d1bb1c7
exampleworkspace01
apiVersion: keyvault.azure.upbound.io/v1beta1
kind: Vault
metadata:
annotations:
meta.upbound.io/example-id: machinelearningservices/v1beta1/workspace
labels:
testing.upbound.io/example-name: exampleworkspace01
name: exampleworkspace01
spec:
forProvider:
location: West Europe
resourceGroupNameSelector:
matchLabels:
testing.upbound.io/example-name: rgworkspace
skuName: premium
tenantId: ${data.azurerm_client_config.current.tenant_id}
© 2022 Upbound, Inc.
Discover the building blocksfor your internal cloud platform.