Skip to main content
The External Secrets Inc. Agent is product suite is a premium product. It requires a specific subscription. Contact us for more information.
Deploying External Secrets Operator (ESO) in a namespaced approach can be very cumbersome and lots needs to be taken care into account: Some examples include:
  • How to install CRDs
  • How to set up roles
  • Deployment strategy order
With External Secrets Inc. Agent, it is fairly simple to deploy ESO to multiple namespaces - consisting of two simple steps:
First, lets label our target namespaces that we want to have ESO installed in a namespaced manner: kubectl label namespace default eso-deploy=true. You can do this for any namespace that you need it deployed.
Apply the following ESODeployment manifest:
apiVersion: eso.externalsecrets.com/v1
kind: EsoDeployment
metadata:
    name: esodeployment-namespaced
    labels:
      managed-by: external-secrets-agent
spec:
    scope: Namespaced
    haEnabled: true
    matchLabel:
        eso-deploy: "true"
    resources:
        limits:
          cpu: 100m
          memory: 128Mi
        requests:
          cpu: 100m
          memory: 64Mi
After these two steps, ESO distribution will be installed on every namespace labeled eso-deploy=true. These labels are configurable, so it allows you to create any specific setup you need.