Check SecretStore status

Show all SecretStores and their sync status

kubectl get secretstore,clustersecretstore -A -o wide
tool
external-secrets9 commands
tags
external-secretsdebug

More external-secrets commands

  • Force ExternalSecret refresh
    kubectl annotate externalsecret mysecret force-sync=$(date +%s) --overwrite

    Trigger immediate re-sync by updating annotation

  • Check ExternalSecret sync status
    kubectl get externalsecret mysecret -o jsonpath='{.status.conditions[*]}'

    View sync conditions: Ready, SecretSynced

  • ExternalSecret with templating
    kubectl get externalsecret mysecret -o yaml | grep -A10 'template:'

    Inspect value templating in ExternalSecret spec

  • List all ExternalSecrets
    kubectl get externalsecrets -A -o custom-columns='NS:.metadata.namespace,NAME:.metadata.name,STORE:.spec.secretStoreRef.name,READY:.status.conditions[0].status'

    Compact table of all ExternalSecrets with sync state

  • Describe ExternalSecret
    kubectl describe externalsecret <name> -n <ns>

    Show sync status, last sync time, and error message if failed

all 9 external-secrets commands