Docs

docs/modules/secret-operator/pages/secretclass.adoc

@@ -217,17 +217,26 @@ Each backend should conform to at least one common format. This is intended to a
 minimal impact on secret consumers.
 
 [#format-tls]
-=== TLS
+=== TLS (PEM)
+
+*Name*: `pem-certificate`
 
 The secret contains the following files:
 
 `ca.crt`:: The certificate of the Certificate Authority (and associated chain) that has signed the certificate, in the PEM format.
 `tls.crt`:: The certificate identifying the `Pod`, in the PEM format.
 `tls.key`:: The private key corresponding to `tls.crt`, in the PEM format.
 
+[#format-tls-pkcs12]
+=== TLS (PKCS#12)
+
+*Name*: `pkcs12-certificate`
+
 [#format-kerberos]
 === Kerberos
 
+*Name*: `kerberos-keytab`
+
 The secret contains the following files:
 
 `krb5.conf`:: Kerberos configuration file for authenticating against the Kerberos realm.

docs/modules/secret-operator/pages/volume.adoc

@@ -36,6 +36,16 @@ The name of the xref:secretclass.adoc[] that is responsible for providing this s
 
 The xref:scope.adoc[scopes] used to select or provision the secret. Multiple scopes should be separated by commas (`,`), and scope parameters are separated by equals signs (`=`) where applicable.
 
+=== `secrets.stackable.tech/format`
+
+*Required*: false
+
+*Default value*: default format of backend
+
+*Backends*: All
+
+The xref:secretclass.adoc#format[] that the secret should be written as.
+
 === `secrets.stackable.tech/kerberos.service.names`
 
 *Required*: false