
This folder contains a sample implementation that converts selected Secrets into ExternalSecrets.

To compile:

cd ~/s2es-kustomize-plugin
go mod init example.com/s2es
go mod tidy

go build -o bin/s2es ./cmd/s2es


To use:

Add the compiled plugin binary to your kustomize manifests folder, e.g. to site-config/patches/s2es and refer to it from kustomization.yaml:

transformers:
- site-config/s2es/s2es-config.yaml
(...)

Create the configuration file s2es-config.yaml (example provided here). Note that you need to prepare a secret store separately. The example configuration assumes an OpenBao store.

To enable the use of plugins, add these parameters to the kustomize command:

kustomize build --enable-alpha-plugins --enable-exec -o site.yaml .
