titan-iac/services/logging/secretproviderclass.yaml

40 lines
1.4 KiB
YAML
Raw Normal View History

2026-01-14 06:16:42 -03:00
# services/logging/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: logging-vault
namespace: logging
spec:
provider: vault
parameters:
vaultAddress: "http://vault.vault.svc.cluster.local:8200"
roleName: "logging"
objects: |
- objectName: "oauth2-proxy-logs-oidc__client_id"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "client_id"
- objectName: "oauth2-proxy-logs-oidc__client_secret"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "client_secret"
- objectName: "oauth2-proxy-logs-oidc__cookie_secret"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "cookie_secret"
2026-01-14 10:07:31 -03:00
- objectName: "harbor-pull__dockerconfigjson"
secretPath: "kv/data/atlas/harbor-pull/logging"
secretKey: "dockerconfigjson"
2026-01-14 06:16:42 -03:00
secretObjects:
- secretName: oauth2-proxy-logs-oidc
type: Opaque
data:
- objectName: oauth2-proxy-logs-oidc__client_id
key: client_id
- objectName: oauth2-proxy-logs-oidc__client_secret
key: client_secret
- objectName: oauth2-proxy-logs-oidc__cookie_secret
key: cookie_secret
2026-01-14 10:07:31 -03:00
- secretName: harbor-regcred
type: kubernetes.io/dockerconfigjson
data:
- objectName: harbor-pull__dockerconfigjson
key: .dockerconfigjson