titan-iac/infrastructure/postgres/secretproviderclass.yaml

16 lines
450 B
YAML
Raw Normal View History

# infrastructure/postgres/secretproviderclass.yaml
2026-01-13 12:35:59 -03:00
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: postgres-vault
namespace: postgres
spec:
provider: vault
parameters:
vaultAddress: "http://vault.vault.svc.cluster.local:8200"
roleName: "postgres"
objects: |
- objectName: "postgres_password"
secretPath: "kv/data/atlas/postgres/postgres-db"
2026-01-13 12:35:59 -03:00
secretKey: "POSTGRES_PASSWORD"