kind: "Secret"
metadata:
  project: <string>
  name: <string>
spec: <secret_specification>

kind: "GlobalSecret"
metadata:
  name: <string>
spec: <secret_specification>

  [ basicAuth: <Basic Auth specification> ]

  # The HTTP authorization credentials for the targets.
  # Basic Auth and authorization are mutually exclusive. Use one or the other not both at the same time.
  [ authorization: <Authorization specification> ]

  # Config used to connect to the targets.
  [ tlsConfig: <TLS Config specification> ]

  username: <string>
  [ password: <string> ]
  [ passwordFile: <filename> ]

  [ type: <string> | default = "Bearer" ]

  # The HTTP credentials like a Bearer token
  [ credentials: <string> ]
  [ credentialsFile: <filename> ]

  # CA certificate to validate API server certificate with. At most one of ca and ca_file is allowed.
  [ ca: <secret> ]
  [ caFile: <filename> ]

  # Certificate and key for client cert authentication to the server.
  # At most one of cert and cert_file is allowed.
  # At most one of key and key_file is allowed.
  [ cert: <secret> ]
  [ certFile: <filename> ]
  [ key: <secret> ]
  [ keyFile: <filename> ]

  # ServerName extension to indicate the name of the server.
  # https://tools.ietf.org/html/rfc4366#section-3.1
  [ serverName: <string> ]

  # Disable validation of the server certificate.
  [ insecureSkipVerify: <boolean> | default = false ]

kind: "Secret"
metadata:
  project: <string>
  name: <string>
spec:
  authorization:
    type: "Bearer"
    credentials: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
  tlsConfig:
    insecureSkipVerify: false