From 5ed18eddcb055a5885dc36287bc810420df0b066 Mon Sep 17 00:00:00 2001 From: Denise Date: Mon, 22 Jul 2024 13:00:33 -0700 Subject: [PATCH] Revert "added docs for external secret operator plugin (#172)" This reverts commit d7aab7048bec97070e8b7fcb9751b46fe1a2c84e. --- .../enterprise-plugins/_category_.json | 6 -- .../enterprise-plugins/plugin.mdx | 72 ------------------- 2 files changed, 78 deletions(-) delete mode 100644 vcluster/integrations/enterprise-plugins/_category_.json delete mode 100644 vcluster/integrations/enterprise-plugins/plugin.mdx diff --git a/vcluster/integrations/enterprise-plugins/_category_.json b/vcluster/integrations/enterprise-plugins/_category_.json deleted file mode 100644 index 6210a01d7..000000000 --- a/vcluster/integrations/enterprise-plugins/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Enterprise Plugins", - "position": "3", - "collapsible": true, - "collapsed": false - } \ No newline at end of file diff --git a/vcluster/integrations/enterprise-plugins/plugin.mdx b/vcluster/integrations/enterprise-plugins/plugin.mdx deleted file mode 100644 index 5bbecd0a6..000000000 --- a/vcluster/integrations/enterprise-plugins/plugin.mdx +++ /dev/null @@ -1,72 +0,0 @@ ---- -title: External Secret Operator plugin -sidebar_label: External Secret Operator plugin -sidebar_position: 1 -sidebar_class_name: pro ---- - -import ProAdmonition from '@site/vcluster/_partials/admonitions/pro-admonition.mdx' - - - -This documents the use of the External Secret Operator (ESO) plugin for vCluster. -This plugin allows you to mutualise the host cluster's external secret operator, and seamlessly use existing stores inside virtual clusters. - -## Prerequisites - -Before proceeding, ensure you have the following: -- Kubernetes CLI (kubectl) installed and configured -- Helm 3.x installed -- Access to two Kubernetes clusters (one for the control plane and one for the workloads), with ESO installed -- Basic familiarity with Kubernetes concepts like namespaces, contexts, and YAML configurations - -## Part 1: Deploy ESO on the host cluster. - -To install ESO on your kubernetes cluster, you can run - -```shell -helm repo add external-secrets https://charts.external-secrets.io - -helm install external-secrets \ - external-secrets/external-secrets \ - -n external-secrets \ - --create-namespace -``` - -or follow the steps from ESO documentation [here](https://external-secrets.io/latest/introduction/getting-started/) - -## Part 2: Create your virtual cluster using the ESO plugin -Once the operator is installed, you can create a virtual cluster using the following `vcluster.yaml` file. - -```yaml -plugins: - eso: - image: ghcr.io/loft-sh/eso-plugin - rbac: - role: - extraRules: - - apiGroups: ["external-secrets.io"] - resources: ["*"] - verbs: ["create", "delete", "patch", "update", "get", "list", "watch"] - clusterRole: - extraRules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: ["external-secrets.io"] - resources: ["clustersecretstores"] - verbs: ["get", "list", "watch"] -# Make sure the cluster role is enabled or otherwise the plugin won't be able to watch custom -# resource definitions. -rbac: - clusterRole: - enabled: true -``` - -and then run `vcluster create my-vcluster -f vcluster.yaml` - -## Part 3: Configuration - -Once your virtual cluster is up and running, the plugin should have installed the relevant CRDs, and synchronized ClusterSecretStores into your virtual cluster. - -To add namespaced SecretStores into your virtual cluster, you will have to chose whether you want them to be converted into ClusterSecretStores inside the virtual cluster, or put into specific namespaces. To add a namespaced store as a ClusterSecretStore, just add the following annotation to it `loft.sh/convert-to-cluster-store: `. To add it to multiple namespaces as namespaced stores, add the following annotation `loft.sh/to-namespaces: ,`, the value of the annotation being a comma separated list of destination namespaces. The two annotations are mutually exclusive, and the cluster store annotation will have precedence over namespaced one.