Chapter 11. External Secrets Operator for Red Hat OpenShift

You can customize the behavior of the {external-secrets-operator} operand components by configuring custom annotations, deployment lifecycle settings, and environment variables through the ExternalSecretsConfig custom resource (CR).

The ExternalSecretsConfig CR supports deployment and runtime settings such as custom annotations, revision history limits, environment variables, resource limits, tolerations, and proxy settings. Through these settings, administrators can control how the operand is deployed and runs without editing operand resources directly.

The Operator reconciles operand resources from the ExternalSecretsConfig CR. Changes made directly to managed operand resources are overwritten during reconciliation. Use the ExternalSecretsConfig CR as the supported method for applying custom configuration.

For the complete list of fields and allowed values, see the ExternalSecretsConfig API reference in the {external-secrets-operator} documentation.