Namespaced Deployments

The External Secrets Inc. Agent is product suite is a premium product. It requires a specific subscription. Contact us for more information.

Deploying External Secrets Operator (ESO) in a namespaced approach can be very cumbersome and lots needs to be taken care into account: Some examples include:

How to install CRDs
How to set up roles
Deployment strategy order

With External Secrets Inc. Agent, it is fairly simple to deploy ESO to multiple namespaces - consisting of two simple steps:

Label target namespaces

Setup ESODeployment

Apply the following ESODeployment manifest:

apiVersion: eso.externalsecrets.com/v1
kind: EsoDeployment
metadata:
    name: esodeployment-namespaced
    labels:
      managed-by: external-secrets-agent
spec:
    scope: Namespaced
    haEnabled: true
    matchLabel:
        eso-deploy: "true"
    resources:
        limits:
          cpu: 100m
          memory: 128Mi
        requests:
          cpu: 100m
          memory: 64Mi

After these two steps, ESO distribution will be installed on every namespace labeled eso-deploy=true. These labels are configurable, so it allows you to create any specific setup you need.

ESI Agent