SecretServer provider CA

[srekkas]

As this operator is based on old ESO version, and do not support CA in "ClusterSecretStore" Delinea provider:

  provider:
    secretserver:
      caProvider:
        type: "ConfigMap"
        name: "external-secrets-operator-trusted-ca-bundle"
        key: "ca-bundle.crt"

When using community External Secrets operator, we configured it using "OperatorConfig" and passed CA like this.

apiVersion: operator.external-secrets.io/v1alpha1
kind: OperatorConfig
metadata:
  name: cluster
  namespace: external-secrets
spec:
  extraVolumes:
    - configMap:
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: ca-bundle
      name: ca-bundle

  ## -- Extra volumes to mount to the container.
  # extraVolumeMounts: []
  extraVolumeMounts:
    - mountPath: /etc/ssl/certs
      name: ca-bundle
      readOnly: true
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: ca-bundle
  namespace: external-secrets
  labels:
    config.openshift.io/inject-trusted-cabundle: 'true'

How to pass CA to this RH operator?

[bharath-b-rh]

This is in our backlog, we are planning to have provision in ExternalSecretsConfig API to allow configuring configmap containing trusted CA bundle.