AnnotationHostKey is the annotation key designating the target domain of the upstream workload.

AnnotationKey depicts that the workload is enriched by the controller.

AnnotationOauth2SecertCehcksumKey holds the checksum of the ouath2 proxy confguration secret.

AnnotationSuffixKey holds the name suffix of the mounted confguration secrets.

AnnotationTargetKey is the porotocl, port tuples of the upstream work; protocol=http, port=3000.

ContainerNameKubeRbacProxy is the name of the kube-rbac-proxy container.

ContainerNameOauth2Proxy is the name of the oauth2-proxy container.

ContainerNameOidcInit is the name of the init container.

GARDEN_ACCESS_TOKEN is an environment variable pointing at a custom access token.

GARDEN_KUBECONFIG is an environment variable pointing at the default extension access token, if the custom one is not provided.

GARDEN_NAMESPACE is the default k8s namespace containing seed workloads.

GARDEN_SEED_DOMAIN_NAME is the default domain name of the seed cluster, where the extension is running.

GARDEN_SEED_OAUTH2_PROXY_CLIENT_ID is the oidc clientId for the seed cluster, where the extension is running.

GardenerPrivateLabelsKey is aworkload label used by the gardener network policy controller to manage access to private networks.

GardenerPublicLabelsKey is a label used by the gardener network policy controller to manage access to public networks.

IngressName is the name of the oauth2 ingress.

KubeconfigLabelValue is the value of the Label.

KubeRbacProxyVolumeName is the volume name of the kube-rbac-proxy configuration.

LabelKey is the label added to dependent configuration secrets.

LabelValue is the label added to dependent configuration secrets.

NAMESPACE is the name of the required environment variable.

Oauth2LabelValue is the value of the Label.

Oauth2VolumeName is the volume name of the oauth2-proxy configuration.

OidcCa2LabelValue is the value of the Label.

PodWebHookPath is the context path of the mutating webhook for pods.

RbacLabelValue is the value of the Label.

RegistrySecretLabelValue is the value of the Label.

SecretLabelKey is the label added to dependent configuration secrets.

SecretNameKubeconfig is the name of the kubeconfig secret.

#nosec G101 -- This is a false positive.

SecretNameOidcCa is the name of the oidc ca secret.

SecretNameResourceAttributes is the name of the resource attributes secret.

ServiceNameOauth2Service is the name of the oauth2 service.

VpaWebHookPath is the context path of the mutating webhook for pods.