nameReference Transformer 未在所有配置的资源类型中更新字段

kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources:

• resources.yaml secretGenerator:
• name: test files:
  • test.pem namespace: cert-manager configurations:
• kustomizeconfig.yaml generatorOptions: disableNameSuffixHash: true nameSuffix: -FOOBAR

resources.yaml

apiVersion: v1 kind: ServiceAccount metadata: name: my-test-sa namespace: external-secrets

apiVersion: external-secrets.io/v1beta1 kind: ClusterSecretStore metadata: name: secret-store spec: provider: AWS: service: SecretsManager region: eu-west-1 auth: jwt: serviceAccountRef: name: my-test-sa namespace: external-secrets

---

apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: vault namespace: cert-manager spec: vault: caBundleSecretRef: name: test key: test.pem

---

apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: cert-manager-vault-approle namespace: cert-manager spec: secretStoreRef: name: secret-store kind: ClusterSecretStore

kustomizeconfig.yaml

nameReference:

• kind: Secret fieldSpecs:
  • kind: ClusterIssuer group: cert-manager.io path: spec/vault/caBundleSecretRef/name
• kind: ServiceAccount fieldSpecs:
  • kind: ClusterSecretStore group: external-secrets.io path: spec/provider/AWS/auth/jwt/serviceAccountRef/name
• kind: ClusterSecretStore group: external-secrets.io fieldSpecs:
  • kind: ExternalSecret group: external-secrets.io path: spec/secretStoreRef/name

test.pem

Cg==