ESO - copy secrets from ns to another ns #5832
Description
Describe the bug
Hi all,
trying to use ESO to sync secrets from a ns to another ns, but i m making a mistake or seems to be a bug.
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: kubernetes
spec:
provider:
kubernetes:
server:
caProvider:
type: ConfigMap
name: kube-root-ca.crt
namespace: eso
key: ca.crt
auth:
serviceAccount:
name: external-secrets
namespace: esoapiVersion: external-secrets.io/v1alpha1
kind: PushSecret
metadata:
name: copy-secrets-pushsecret
namespace: ns_orig
spec:
refreshInterval: 1h0m0s
updatePolicy: Replace
deletionPolicy: Delete
secretStoreRefs:
- name: kubernetes
kind: ClusterSecretStore
selector:
secret:
name: regcred
data:
- match:
remoteRef:
remoteKey: my-regcred
metadata:
apiVersion: kubernetes.external-secrets.io/v1alpha1
kind: PushSecretMetadata
spec:
remoteNamespace: esobut i m getting:
"error":"could not write remote ref to target secretstore kubernetes: the namespace of the provided object does not match the namespace sent on the request"
Error that is related with remoteNamespace being different namespace, if they are the same , its work and secret is copied to same namespace.
But i guess one important use case is to copy to different namespaces
To Reproduce
Steps to reproduce the behaviour:
Using the previous manifest, with external-secrets:v1.2.1
Expected behavior
Get the secret copied from one ns to another