MFA generates a new TOTP token that is compliant with RFC 6238.
4 top-level fields · unchanged since External Secrets Operator v0.18.0
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
MFASpec controls the behavior of the mfa generator.
Algorithm to use for encoding. Defaults to SHA1 as per the RFC.
Length defines the token length. Defaults to 6 characters.
Secret is a secret selector to a secret containing the seed secret to generate the TOTP value from.
A key in the referenced Secret. Some instances of this field may be defaulted, in others it may be required.
The name of the Secret resource being referred to.
The namespace of the Secret resource being referred to. Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
TimePeriod defines how long the token can be active. Defaults to 30 seconds.
When defines a time parameter that can be used to pin the origin time of the generated token.
Source: bundle.yaml
Changes to MFA (generators.external-secrets.io/v1alpha1) in each External Secrets Operator version, compared to the version before it.
MFA was first seen on this version of External Secrets Operator
Released · View MFA in v0.18.0
No examples of MFA yet. Contribute one on GitHub.
kubespec.dev