hex 🪄

Appearance

hex.k8s.external-secrets ​

  • Latest: 2.2.0
  • Latest date: 2026-03-20
  • Version count: 53
  • Source: json module
  • values.yaml: link
  • pinned latest sha256: 0lrb7hhz0i0qxl9iz2ma9k6k3pz1xq1dhky5mx5902iz50h7x7ds
  • extra helper functions: 4

Copy Pinned Spec ​

nix
(hex.k8s.external-secrets.version.v2-2-0 {
  valuesAttrs = {};
})

Helper Functions ​

hex.k8s.external-secrets.cluster_store.build ​

Usage

render a ClusterSecretStore manifest with AWS or GCP provider auth wiring.

Copy Call Skeleton ​

nix
(hex.k8s.external-secrets.cluster_store.build {
})

Required Args ​

ArgTypeNotes

Optional Args ​

ArgTypeDefaultNotes
awsboolfalseenable AWS Secrets Manager provider
aws_regionstring"us-east-1"AWS region for Secrets Manager
gcp_project`stringnull`null
namestringdefaults.store_nameClusterSecretStore resource name
aws_role`stringnull`null
secret`stringnull`"${name}-creds"
filenamestring"${name}-creds.json"key in credential secret for GCP JSON credentials
namespacestring"external-secrets"namespace containing credential secret
_betaboolfalseforce v1beta1 API when needed
apiVersionstring_apiVersion _betaoverride external-secrets API version

hex.k8s.external-secrets.cluster_store.store ​

Usage

build a raw ClusterSecretStore attrset for advanced composition.

Copy Call Skeleton ​

nix
(hex.k8s.external-secrets.cluster_store.store {
  name = "store";
  aws = false;
  aws_region = "TODO";
  aws_role = "TODO";
  gcp_project = "TODO";
  secret = "TODO";
  filename = "TODO";
  namespace = "TODO";
  apiVersion = "TODO";
})

Required Args ​

ArgTypeNotes
namestringClusterSecretStore resource name
awsboolenable AWS Secrets Manager provider
aws_regionstringAWS region for Secrets Manager
aws_role`stringnull`
gcp_project`stringnull`
secret`stringnull`
filenamestringkey in credential secret for GCP JSON credentials
namespacestringnamespace containing credential secret
apiVersionstringexternal-secrets API version

Optional Args ​

ArgTypeDefaultNotes

hex.k8s.external-secrets.external_secret.build ​

Usage

render an ExternalSecret manifest with defaults for target/template behavior.

Copy Call Skeleton ​

nix
(hex.k8s.external-secrets.external_secret.build {
  name = "build";
  filename = "TODO";
})

Required Args ​

ArgTypeNotes
namestringtarget Kubernetes Secret name
filenamestringsecret key written in target Kubernetes Secret

Optional Args ​

ArgTypeDefaultNotes
envstring""optional prefix added to remote secret key lookup
storestringdefaults.store_nameSecretStore or ClusterSecretStore name
store_kindstring"ClusterSecretStore"SecretStore reference kind
refresh_intervalstring"30m"refresh interval for reconciliation
secret_refstring""explicit remote secret key override
namespacestring"default"namespace for ExternalSecret resource
extractboolfalseuse dataFrom.extract mode instead of data list
decoding_strategystring"Auto"decodingStrategy passed to external-secrets
metadata_policystring"None"metadataPolicy passed to external-secrets
conversion_strategystring"Default"conversionStrategy passed to external-secrets
extra_datalist[ ]extra entries appended to spec.data
labelsattrset{ }extra labels merged into target secret template metadata
string_dataattrset{ }template string data rendered into target secret
engineVersionstring"v2"external-secrets template engine version
mergePolicystringif string_data == { } then "Replace" else "Merge"template merge policy
_betaboolfalseforce v1beta1 API when needed
apiVersionstring_apiVersion _betaoverride external-secrets API version

hex.k8s.external-secrets.external_secret.secret ​

Usage

build a raw ExternalSecret attrset for advanced composition.

Copy Call Skeleton ​

nix
(hex.k8s.external-secrets.external_secret.secret {
  name = "secret";
  filename = "TODO";
  env = "TODO";
  store = "TODO";
  store_kind = "TODO";
  refresh_interval = "TODO";
  secret_ref = "TODO";
  namespace = "TODO";
  extract = false;
  decoding_strategy = "TODO";
  metadata_policy = "TODO";
  conversion_strategy = "TODO";
  extra_data = [ ];
  labels = { app = "secret"; };
  string_data = { };
  engineVersion = "TODO";
  mergePolicy = "TODO";
  _beta = false;
})

Required Args ​

ArgTypeNotes
namestringtarget Kubernetes Secret name
filenamestringsecret key written in target Kubernetes Secret
envstringoptional prefix added to remote secret key lookup
storestringSecretStore or ClusterSecretStore name
store_kindstringSecretStore reference kind
refresh_intervalstringrefresh interval for reconciliation
secret_refstringexplicit remote secret key override
namespacestringnamespace for ExternalSecret resource
extractbooluse dataFrom.extract mode instead of data list
decoding_strategystringdecodingStrategy passed to external-secrets
metadata_policystringmetadataPolicy passed to external-secrets
conversion_strategystringconversionStrategy passed to external-secrets
extra_datalistextra entries appended to spec.data
labelsattrsetextra labels merged into target secret template metadata
string_dataattrsettemplate string data rendered into target secret
engineVersionstringexternal-secrets template engine version
mergePolicystringtemplate merge policy
_betaboolforce v1beta1 API when needed

Optional Args ​

ArgTypeDefaultNotes
apiVersionstring_apiVersion _betaoverride external-secrets API version

Versions ​

VersionDateAttr
2.2.02026-03-20hex.k8s.external-secrets.version.v2-2-0
2.1.02026-03-07hex.k8s.external-secrets.version.v2-1-0
2.0.12026-02-20hex.k8s.external-secrets.version.v2-0-1
2.0.02026-02-06hex.k8s.external-secrets.version.v2-0-0
1.3.22026-02-03hex.k8s.external-secrets.version.v1-3-2
1.3.12026-01-23hex.k8s.external-secrets.version.v1-3-1
1.2.12026-01-02hex.k8s.external-secrets.version.v1-2-1
1.2.02025-12-19hex.k8s.external-secrets.version.v1-2-0
1.1.12025-12-05hex.k8s.external-secrets.version.v1-1-1
1.1.02025-11-21hex.k8s.external-secrets.version.v1-1-0
1.0.02025-11-07hex.k8s.external-secrets.version.v1-0-0
0.20.42025-10-24hex.k8s.external-secrets.version.v0-20-4
0.20.32025-10-14hex.k8s.external-secrets.version.v0-20-3
0.20.22025-10-03hex.k8s.external-secrets.version.v0-20-2
0.20.12025-09-22hex.k8s.external-secrets.version.v0-20-1
0.19.22025-08-13hex.k8s.external-secrets.version.v0-19-2
0.19.12025-08-08hex.k8s.external-secrets.version.v0-19-1
0.19.02025-08-02hex.k8s.external-secrets.version.v0-19-0
0.18.22025-07-03hex.k8s.external-secrets.version.v0-18-2
0.18.12025-06-26hex.k8s.external-secrets.version.v0-18-1
0.18.02025-06-17hex.k8s.external-secrets.version.v0-18-0
0.18.0-rc12025-06-16hex.k8s.external-secrets.version.v0-18-0-rc1
0.17.02025-05-15hex.k8s.external-secrets.version.v0-17-0
0.16.22025-05-07hex.k8s.external-secrets.version.v0-16-2
0.16.12025-04-16hex.k8s.external-secrets.version.v0-16-1
0.16.02025-04-14hex.k8s.external-secrets.version.v0-16-0
0.15.12025-03-28hex.k8s.external-secrets.version.v0-15-1
0.15.02025-03-19hex.k8s.external-secrets.version.v0-15-0
0.14.42025-03-10hex.k8s.external-secrets.version.v0-14-4
0.14.32025-02-26hex.k8s.external-secrets.version.v0-14-3
0.14.22025-02-13hex.k8s.external-secrets.version.v0-14-2
0.14.12025-02-08hex.k8s.external-secrets.version.v0-14-1
0.14.02025-02-04hex.k8s.external-secrets.version.v0-14-0
0.13.02025-01-21hex.k8s.external-secrets.version.v0-13-0
0.12.12024-12-23hex.k8s.external-secrets.version.v0-12-1
0.11.02024-12-02hex.k8s.external-secrets.version.v0-11-0
0.10.72024-11-23hex.k8s.external-secrets.version.v0-10-7
0.10.62024-11-20hex.k8s.external-secrets.version.v0-10-6
0.10.52024-10-25hex.k8s.external-secrets.version.v0-10-5
0.10.42024-09-25hex.k8s.external-secrets.version.v0-10-4
0.9.202024-07-06hex.k8s.external-secrets.version.v0-9-20
0.9.192024-06-04hex.k8s.external-secrets.version.v0-9-19
0.9.182024-05-14hex.k8s.external-secrets.version.v0-9-18
0.9.172024-05-01hex.k8s.external-secrets.version.v0-9-17
0.9.162024-04-18hex.k8s.external-secrets.version.v0-9-16
0.9.142024-03-30hex.k8s.external-secrets.version.v0-9-14
0.9.132024-02-17hex.k8s.external-secrets.version.v0-9-13
0.9.122024-02-09hex.k8s.external-secrets.version.v0-9-12
0.9.112023-12-25hex.k8s.external-secrets.version.v0-9-11
0.8.7-hex.k8s.external-secrets.version.v0-8-7
0.7.2-hex.k8s.external-secrets.version.v0-7-2
0.6.1-hex.k8s.external-secrets.version.v0-6-1
0.5.9-hex.k8s.external-secrets.version.v0-5-9

Back to Chart Index