# services/vaultwarden/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: vaultwarden-vault
  namespace: vaultwarden
spec:
  provider: vault
  parameters:
    vaultAddress: "http://vault.vault.svc.cluster.local:8200"
    roleName: "vaultwarden"
    objects: |
      - objectName: "vaultwarden-db-url__DATABASE_URL"
        secretPath: "kv/data/atlas/vaultwarden/vaultwarden-db-url"
        secretKey: "DATABASE_URL"
      - objectName: "vaultwarden-admin__ADMIN_TOKEN"
        secretPath: "kv/data/atlas/vaultwarden/vaultwarden-admin"
        secretKey: "ADMIN_TOKEN"
      - objectName: "postmark-relay__relay-username"
        secretPath: "kv/data/atlas/shared/postmark-relay"
        secretKey: "relay-username"
      - objectName: "postmark-relay__relay-password"
        secretPath: "kv/data/atlas/shared/postmark-relay"
        secretKey: "relay-password"