External Secrets Operator: a controller that joins a store and a request

Scroll or pinch to zoom, drag to move, double-click to zoom in 100% SVG PNG Back to the post
External Secrets Operator architecture: a Git repository holds ExternalSecret and SecretStore manifests without secret values. The core controller watches each ExternalSecret, reads the SecretStore it references to learn how to reach and authenticate to the secret provider, fetches the values from the provider, renders them through a template and creates or updates a Kubernetes Secret that a workload mounts or reads as environment variables.