Generators allow you to generate values. They are used through a ExternalSecret
spec.DataFrom. They are referenced from a custom resource using
If the External Secret should be refreshed via
spec.refreshInterval the generator produces a map of values with the
generator.spec as input. The generator does not keep track of the produced values. Every invocation produces a new set of values.
These values can be used with the other features like
template. I.e. you can modify, encode, decode, pack the values as needed.
Reference Custom Resource
Generators can be defined as a custom resource and re-used across different ExternalSecrets. Every invocation creates a new set of values. I.e. you can not share the same value produced by a generator across different
apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: "ecr-token" spec: refreshInterval: "30m" target: name: ecr-token dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: ECRAuthorizationToken name: "my-ecr"