openshift/secrets/type¶
Secret-store plugin provider type backing OpenShift cluster secrets
The plugin provider type of the secret store named by
openshift/secrets/store. Except for the default local (which means no
external store and is not a plugin), values are the DRP plugin provider
names as listed by drpcli plugin_providers list, not friendly names.
Usage¶
The default is local: cluster secrets live in DRP itself, no external
store is involved, and store-specific automation does not run. Operators
do not set this by hand: each openshift-secrets-<backend> profile in
this bundle carries the correct value as a plain param, so applying the
profile declares the type. Content that must branch or validate per
backend (for example secret-rotation tooling, or a task that only supports
one provider's URI grammar) reads this param instead of guessing from the
reference shape.
The schema is a closed enum of the shipped providers on purpose, so
downstream automation can rely on the value set. When applying
openshift-secrets directly (see its escape hatch), set this param along
with the two URI params; only a backend outside the enum runs without a
type designation.
Objects that Reference openshift/secrets/type¶
- profiles openshift-secrets-vault in Openshift as part of Params (declared)
- profiles openshift-secrets-awssecman in Openshift as part of Params (declared)
- profiles openshift-secrets-azkeyvault in Openshift as part of Params (declared)
Objects used by openshift/secrets/type¶
Not used in current content packs