SecretsMountSecretsMount is the Schema for the SecretsMounts API. Configures any number of database secrets engines under a single mount resource
TypeMR
Providerprovider-vault
Groupdatabase.vault.m.upbound.io
Scopenamespaced
Versionv1alpha1

1apiVersion: database.vault.m.upbound.io/v1alpha1

2kind: SecretsMount

kind
string
metadata
object
spec
object

SecretsMountSpec defines the desired state of SecretsMount

forProvider
required
object

(No description available)

allowedManagedKeys
array

Set of managed key registry entry names that the mount in question is allowed to access List of managed key registry entry names that the mount in question is allowed to access

allowedResponseHeaders
array

List of headers to allow and pass from the request to the plugin

auditNonHmacRequestKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object. Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object. Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandra
array

A nested block containing configuration options for Cassandra connections. See Connection parameters for the cassandra-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
hosts
array

The hosts to connect to. Cassandra hosts to connect to.

name
string
passwordSecretRef
object

The password to authenticate with. The password to use when authenticating with Cassandra.

key
required
string
name
required
string
pemBundleSecretRef
object

Concatenated PEM blocks configuring the certificate chain. Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
pemJsonSecretRef
object

A JSON structure configuring the certificate chain. Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
couchbase
array

A nested block containing configuration options for Couchbase connections. See Connection parameters for the couchbase-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

base64PemSecretRef
object

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded. Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

key
required
string
name
required
string
data
object
hosts
array

The hosts to connect to. A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name
string
passwordSecretRef
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
delegatedAuthAccessors
array

List of headers to allow and pass from the request to the plugin

elasticsearch
array

A nested block containing configuration options for Elasticsearch connections. See Connection parameters for the elasticsearch-database-plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
caPath
string
clientKey
string
data
object
insecure
boolean
name
string
passwordSecretRef
object

The password to authenticate with. The password to be used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
username
string
hana
array

A nested block containing configuration options for SAP HanaDB connections. See Connection parameters for the hana-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
influxdb
array

A nested block containing configuration options for InfluxDB connections. See Connection parameters for the influxdb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
host
string
name
string
passwordSecretRef
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
pemBundleSecretRef
object

Concatenated PEM blocks configuring the certificate chain. Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
pemJsonSecretRef
object

A JSON structure configuring the certificate chain. Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
local
boolean
mongodb
array

A nested block containing configuration options for MongoDB connections. See Connection parameters for the mongodb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mongodbatlas
array

A nested block containing configuration options for MongoDB Atlas connections. See Connection parameters for the mongodbatlas-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
privateKeySecretRef
object

The Private Programmatic API Key used to connect with MongoDB Atlas API. The Private Programmatic API Key used to connect with MongoDB Atlas API.

key
required
string
name
required
string
projectId
string
publicKey
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

mssql
array

A nested block containing configuration options for MSSQL connections. See Connection parameters for the mssql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mysql
array

A nested block containing configuration options for MySQL connections. See Connection parameters for the mysql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlAurora
array

A nested block containing configuration options for Aurora MySQL connections. See Connection parameters for the mysql-aurora-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlLegacy
array

A nested block containing configuration options for legacy MySQL connections. See Connection parameters for the mysql-legacy-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlRds
array

A nested block containing configuration options for RDS MySQL connections. See Connection parameters for the mysql-rds-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
namespace
string
options
object
oracle
array

A nested block containing configuration options for Oracle connections. See Connection parameters for the oracle-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
passthroughRequestHeaders
array

List of headers to allow and pass from the request to the plugin

path
string
postgresql
array

A nested block containing configuration options for PostgreSQL connections. See Connection parameters for the postgresql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
privateKeySecretRef
object

The Private Programmatic API Key used to connect with MongoDB Atlas API. The secret key used for the x509 client certificate. Must be PEM encoded.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
username
string
redis
array

A nested block containing configuration options for Redis connections. See Connection parameters for the redis-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
data
object
host
string
name
string
passwordSecretRef
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
redisElasticache
array

A nested block containing configuration options for Redis ElastiCache connections. See Connection parameters for the redis-elasticache-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The AWS secret key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.

key
required
string
name
required
string
region
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
usernameSecretRef
object

The username to authenticate with. The AWS access key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.

key
required
string
name
required
string
redshift
array

A nested block containing configuration options for AWS Redshift connections. See Connection parameters for the redshift-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
sealWrap
boolean
snowflake
array

A nested block containing configuration options for Snowflake connections. See Connection parameters for the snowflake-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
privateKeyWoSecretRef
object

The private key configured for the admin user in Snowflake.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
initProvider
object

THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.

allowedManagedKeys
array

Set of managed key registry entry names that the mount in question is allowed to access List of managed key registry entry names that the mount in question is allowed to access

allowedResponseHeaders
array

List of headers to allow and pass from the request to the plugin

auditNonHmacRequestKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object. Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object. Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandra
array

A nested block containing configuration options for Cassandra connections. See Connection parameters for the cassandra-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
hosts
array

The hosts to connect to. Cassandra hosts to connect to.

name
string
passwordSecretRef
object

The password to authenticate with. The password to use when authenticating with Cassandra.

key
required
string
name
required
string
pemBundleSecretRef
object

Concatenated PEM blocks configuring the certificate chain. Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
pemJsonSecretRef
object

A JSON structure configuring the certificate chain. Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
couchbase
array

A nested block containing configuration options for Couchbase connections. See Connection parameters for the couchbase-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

base64PemSecretRef
object

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded. Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

key
required
string
name
required
string
data
object
hosts
array

The hosts to connect to. A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name
string
passwordSecretRef
required
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
delegatedAuthAccessors
array

List of headers to allow and pass from the request to the plugin

elasticsearch
array

A nested block containing configuration options for Elasticsearch connections. See Connection parameters for the elasticsearch-database-plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
caPath
string
clientKey
string
data
object
insecure
boolean
name
string
passwordSecretRef
required
object

The password to authenticate with. The password to be used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
username
string
hana
array

A nested block containing configuration options for SAP HanaDB connections. See Connection parameters for the hana-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
influxdb
array

A nested block containing configuration options for InfluxDB connections. See Connection parameters for the influxdb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
host
string
name
string
passwordSecretRef
required
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
pemBundleSecretRef
object

Concatenated PEM blocks configuring the certificate chain. Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
pemJsonSecretRef
object

A JSON structure configuring the certificate chain. Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
local
boolean
mongodb
array

A nested block containing configuration options for MongoDB connections. See Connection parameters for the mongodb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mongodbatlas
array

A nested block containing configuration options for MongoDB Atlas connections. See Connection parameters for the mongodbatlas-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
privateKeySecretRef
required
object

The Private Programmatic API Key used to connect with MongoDB Atlas API. The Private Programmatic API Key used to connect with MongoDB Atlas API.

key
required
string
name
required
string
projectId
string
publicKey
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

mssql
array

A nested block containing configuration options for MSSQL connections. See Connection parameters for the mssql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mysql
array

A nested block containing configuration options for MySQL connections. See Connection parameters for the mysql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlAurora
array

A nested block containing configuration options for Aurora MySQL connections. See Connection parameters for the mysql-aurora-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlLegacy
array

A nested block containing configuration options for legacy MySQL connections. See Connection parameters for the mysql-legacy-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
mysqlRds
array

A nested block containing configuration options for RDS MySQL connections. See Connection parameters for the mysql-rds-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
tlsCertificateKeySecretRef
object

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined. x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

key
required
string
name
required
string
username
string
namespace
string
options
object
oracle
array

A nested block containing configuration options for Oracle connections. See Connection parameters for the oracle-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
passthroughRequestHeaders
array

List of headers to allow and pass from the request to the plugin

path
string
postgresql
array

A nested block containing configuration options for PostgreSQL connections. See Connection parameters for the postgresql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
privateKeySecretRef
object

The Private Programmatic API Key used to connect with MongoDB Atlas API. The secret key used for the x509 client certificate. Must be PEM encoded.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

serviceAccountJsonSecretRef
object

A JSON encoded credential for use with IAM authorization

key
required
string
name
required
string
tlsCa
string
username
string
redis
array

A nested block containing configuration options for Redis connections. See Connection parameters for the redis-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
data
object
host
string
name
string
passwordSecretRef
required
object

The password to authenticate with. Specifies the password corresponding to the given username.

key
required
string
name
required
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
redisElasticache
array

A nested block containing configuration options for Redis ElastiCache connections. See Connection parameters for the redis-elasticache-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The AWS secret key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.

key
required
string
name
required
string
region
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
usernameSecretRef
object

The username to authenticate with. The AWS access key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.

key
required
string
name
required
string
redshift
array

A nested block containing configuration options for AWS Redshift connections. See Connection parameters for the redshift-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
sealWrap
boolean
snowflake
array

A nested block containing configuration options for Snowflake connections. See Connection parameters for the snowflake-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
passwordSecretRef
object

The password to authenticate with. The root credential password used in the connection URL

key
required
string
name
required
string
privateKeyWoSecretRef
object

The private key configured for the admin user in Snowflake.

key
required
string
name
required
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
managementPolicies
array

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

providerConfigRef
object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

kind
required
string
name
required
string
writeConnectionSecretToRef
object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

name
required
string
status
object

SecretsMountStatus defines the observed state of SecretsMount.

atProvider
object

(No description available)

accessor
string
allowedManagedKeys
array

Set of managed key registry entry names that the mount in question is allowed to access List of managed key registry entry names that the mount in question is allowed to access

allowedResponseHeaders
array

List of headers to allow and pass from the request to the plugin

auditNonHmacRequestKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object. Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys
array

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object. Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandra
array

A nested block containing configuration options for Cassandra connections. See Connection parameters for the cassandra-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
hosts
array

The hosts to connect to. Cassandra hosts to connect to.

name
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
couchbase
array

A nested block containing configuration options for Couchbase connections. See Connection parameters for the couchbase-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
hosts
array

The hosts to connect to. A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
delegatedAuthAccessors
array

List of headers to allow and pass from the request to the plugin

elasticsearch
array

A nested block containing configuration options for Elasticsearch connections. See Connection parameters for the elasticsearch-database-plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
caPath
string
clientKey
string
data
object
insecure
boolean
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
username
string
hana
array

A nested block containing configuration options for SAP HanaDB connections. See Connection parameters for the hana-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
id
string
influxdb
array

A nested block containing configuration options for InfluxDB connections. See Connection parameters for the influxdb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
host
string
name
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
local
boolean
mongodb
array

A nested block containing configuration options for MongoDB connections. See Connection parameters for the mongodb-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mongodbatlas
array

A nested block containing configuration options for MongoDB Atlas connections. See Connection parameters for the mongodbatlas-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
projectId
string
publicKey
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

mssql
array

A nested block containing configuration options for MSSQL connections. See Connection parameters for the mssql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
mysql
array

A nested block containing configuration options for MySQL connections. See Connection parameters for the mysql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tlsCa
string
username
string
mysqlAurora
array

A nested block containing configuration options for Aurora MySQL connections. See Connection parameters for the mysql-aurora-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tlsCa
string
username
string
mysqlLegacy
array

A nested block containing configuration options for legacy MySQL connections. See Connection parameters for the mysql-legacy-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tlsCa
string
username
string
mysqlRds
array

A nested block containing configuration options for RDS MySQL connections. See Connection parameters for the mysql-rds-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tlsCa
string
username
string
namespace
string
options
object
oracle
array

A nested block containing configuration options for Oracle connections. See Connection parameters for the oracle-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
passthroughRequestHeaders
array

List of headers to allow and pass from the request to the plugin

path
string
postgresql
array

A nested block containing configuration options for PostgreSQL connections. See Connection parameters for the postgresql-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

authType
string
data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tlsCa
string
username
string
redis
array

A nested block containing configuration options for Redis connections. See Connection parameters for the redis-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

caCert
string
data
object
host
string
name
string
port
number
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

tls
boolean
username
string
redisElasticache
array

A nested block containing configuration options for Redis ElastiCache connections. See Connection parameters for the redis-elasticache-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
region
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

url
string
redshift
array

A nested block containing configuration options for AWS Redshift connections. See Connection parameters for the redshift-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
sealWrap
boolean
snowflake
array

A nested block containing configuration options for Snowflake connections. See Connection parameters for the snowflake-database-plugin plugin.

allowedRoles
array

A list of roles that are allowed to use this connection. A list of roles that are allowed to use this connection.

data
object
name
string
rootRotationStatements
array

A list of database statements to be executed to rotate the root user's credentials. A list of database statements to be executed to rotate the root user's credentials.

username
string
conditions
array

Conditions of the resource.

lastTransitionTime
required
string
message
string
reason
required
string
status
required
string
type
required
string
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More