titan-iac/services/monitoring/secretproviderclass.yaml

66 lines
2.4 KiB
YAML
Raw Normal View History

2026-01-14 06:16:42 -03:00
# services/monitoring/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: monitoring-vault
namespace: monitoring
spec:
provider: vault
parameters:
vaultAddress: "http://vault.vault.svc.cluster.local:8200"
roleName: "monitoring"
objects: |
- objectName: "grafana-admin__admin-user"
secretPath: "kv/data/atlas/monitoring/grafana-admin"
secretKey: "admin-user"
- objectName: "grafana-admin__admin-password"
secretPath: "kv/data/atlas/monitoring/grafana-admin"
secretKey: "admin-password"
- objectName: "postmark-exporter__relay-username"
secretPath: "kv/data/atlas/monitoring/postmark-exporter"
secretKey: "relay-username"
- objectName: "postmark-exporter__relay-password"
secretPath: "kv/data/atlas/monitoring/postmark-exporter"
secretKey: "relay-password"
- objectName: "postmark-exporter__sending-limit"
secretPath: "kv/data/atlas/monitoring/postmark-exporter"
secretKey: "sending-limit"
2026-01-14 06:41:34 -03:00
- objectName: "postmark-relay__relay-username"
secretPath: "kv/data/atlas/shared/postmark-relay"
secretKey: "relay-username"
- objectName: "postmark-relay__relay-password"
secretPath: "kv/data/atlas/shared/postmark-relay"
secretKey: "relay-password"
2026-01-14 10:07:31 -03:00
- objectName: "harbor-pull__dockerconfigjson"
secretPath: "kv/data/atlas/harbor-pull/monitoring"
secretKey: "dockerconfigjson"
2026-01-14 06:16:42 -03:00
secretObjects:
- secretName: grafana-admin
type: Opaque
data:
- objectName: grafana-admin__admin-user
key: admin-user
- objectName: grafana-admin__admin-password
key: admin-password
- secretName: postmark-exporter
type: Opaque
data:
- objectName: postmark-exporter__relay-username
key: server-token
- objectName: postmark-exporter__relay-password
key: server-token-fallback
- objectName: postmark-exporter__sending-limit
key: sending-limit
2026-01-14 06:41:34 -03:00
- secretName: grafana-smtp
type: Opaque
data:
- objectName: postmark-relay__relay-username
key: username
- objectName: postmark-relay__relay-password
key: password
2026-01-14 10:07:31 -03:00
- secretName: harbor-regcred
type: kubernetes.io/dockerconfigjson
data:
- objectName: harbor-pull__dockerconfigjson
key: .dockerconfigjson