titan-iac/services/logging/secretproviderclass.yaml

32 lines
1.1 KiB
YAML
Raw Normal View History

2026-01-14 06:16:42 -03:00
# services/logging/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: logging-vault
namespace: logging
spec:
provider: vault
parameters:
vaultAddress: "http://vault.vault.svc.cluster.local:8200"
roleName: "logging"
objects: |
- objectName: "oauth2-proxy-logs-oidc__client_id"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "client_id"
- objectName: "oauth2-proxy-logs-oidc__client_secret"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "client_secret"
- objectName: "oauth2-proxy-logs-oidc__cookie_secret"
secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
secretKey: "cookie_secret"
secretObjects:
- secretName: oauth2-proxy-logs-oidc
type: Opaque
data:
- objectName: oauth2-proxy-logs-oidc__client_id
key: client_id
- objectName: oauth2-proxy-logs-oidc__client_secret
key: client_secret
- objectName: oauth2-proxy-logs-oidc__cookie_secret
key: cookie_secret