# services/health/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: health-vault
  namespace: health
spec:
  provider: vault
  parameters:
    vaultAddress: "http://vault.vault.svc.cluster.local:8200"
    roleName: "health"
    objects: |
      - objectName: "endurain-db__DB_HOST"
        secretPath: "kv/data/atlas/health/endurain-db"
        secretKey: "DB_HOST"
      - objectName: "endurain-db__DB_PORT"
        secretPath: "kv/data/atlas/health/endurain-db"
        secretKey: "DB_PORT"
      - objectName: "endurain-db__DB_USER"
        secretPath: "kv/data/atlas/health/endurain-db"
        secretKey: "DB_USER"
      - objectName: "endurain-db__DB_PASSWORD"
        secretPath: "kv/data/atlas/health/endurain-db"
        secretKey: "DB_PASSWORD"
      - objectName: "endurain-db__DB_DATABASE"
        secretPath: "kv/data/atlas/health/endurain-db"
        secretKey: "DB_DATABASE"
      - objectName: "endurain-secrets__SECRET_KEY"
        secretPath: "kv/data/atlas/health/endurain-secrets"
        secretKey: "SECRET_KEY"
      - objectName: "endurain-secrets__FERNET_KEY"
        secretPath: "kv/data/atlas/health/endurain-secrets"
        secretKey: "FERNET_KEY"
      - objectName: "endurain-admin__username"
        secretPath: "kv/data/atlas/health/endurain-admin"
        secretKey: "username"
      - objectName: "endurain-admin__password"
        secretPath: "kv/data/atlas/health/endurain-admin"
        secretKey: "password"
      - objectName: "endurain-oidc__client_id"
        secretPath: "kv/data/atlas/health/endurain-oidc"
        secretKey: "client_id"
      - objectName: "endurain-oidc__client_secret"
        secretPath: "kv/data/atlas/health/endurain-oidc"
        secretKey: "client_secret"
      - objectName: "endurain-oidc__issuer_url"
        secretPath: "kv/data/atlas/health/endurain-oidc"
        secretKey: "issuer_url"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_DB_HOST"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_DB_HOST"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_DB_PORT"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_DB_PORT"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_DB_NAME"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_DB_NAME"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_DB_USER"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_DB_USER"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_DB_PASSWORD"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_DB_PASSWORD"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_APP_DB_USER"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_APP_DB_USER"
      - objectName: "sparkyfitness-db__SPARKY_FITNESS_APP_DB_PASSWORD"
        secretPath: "kv/data/atlas/health/sparkyfitness-db"
        secretKey: "SPARKY_FITNESS_APP_DB_PASSWORD"
      - objectName: "sparkyfitness-secrets__JWT_SECRET"
        secretPath: "kv/data/atlas/health/sparkyfitness-secrets"
        secretKey: "JWT_SECRET"
      - objectName: "sparkyfitness-secrets__SPARKY_FITNESS_API_ENCRYPTION_KEY"
        secretPath: "kv/data/atlas/health/sparkyfitness-secrets"
        secretKey: "SPARKY_FITNESS_API_ENCRYPTION_KEY"
      - objectName: "sparkyfitness-admin__email"
        secretPath: "kv/data/atlas/health/sparkyfitness-admin"
        secretKey: "email"
      - objectName: "sparkyfitness-admin__password"
        secretPath: "kv/data/atlas/health/sparkyfitness-admin"
        secretKey: "password"
      - objectName: "sparkyfitness-oidc__client_id"
        secretPath: "kv/data/atlas/health/sparkyfitness-oidc"
        secretKey: "client_id"
      - objectName: "sparkyfitness-oidc__client_secret"
        secretPath: "kv/data/atlas/health/sparkyfitness-oidc"
        secretKey: "client_secret"
      - objectName: "sparkyfitness-oidc__issuer_url"
        secretPath: "kv/data/atlas/health/sparkyfitness-oidc"
        secretKey: "issuer_url"
  secretObjects:
    - secretName: endurain-db
      type: Opaque
      data:
        - objectName: endurain-db__DB_HOST
          key: DB_HOST
        - objectName: endurain-db__DB_PORT
          key: DB_PORT
        - objectName: endurain-db__DB_USER
          key: DB_USER
        - objectName: endurain-db__DB_PASSWORD
          key: DB_PASSWORD
        - objectName: endurain-db__DB_DATABASE
          key: DB_DATABASE
    - secretName: endurain-secrets
      type: Opaque
      data:
        - objectName: endurain-secrets__SECRET_KEY
          key: SECRET_KEY
        - objectName: endurain-secrets__FERNET_KEY
          key: FERNET_KEY
    - secretName: endurain-admin
      type: Opaque
      data:
        - objectName: endurain-admin__username
          key: username
        - objectName: endurain-admin__password
          key: password
    - secretName: endurain-oidc
      type: Opaque
      data:
        - objectName: endurain-oidc__client_id
          key: client_id
        - objectName: endurain-oidc__client_secret
          key: client_secret
        - objectName: endurain-oidc__issuer_url
          key: issuer_url
    - secretName: sparkyfitness-db
      type: Opaque
      data:
        - objectName: sparkyfitness-db__SPARKY_FITNESS_DB_HOST
          key: SPARKY_FITNESS_DB_HOST
        - objectName: sparkyfitness-db__SPARKY_FITNESS_DB_PORT
          key: SPARKY_FITNESS_DB_PORT
        - objectName: sparkyfitness-db__SPARKY_FITNESS_DB_NAME
          key: SPARKY_FITNESS_DB_NAME
        - objectName: sparkyfitness-db__SPARKY_FITNESS_DB_USER
          key: SPARKY_FITNESS_DB_USER
        - objectName: sparkyfitness-db__SPARKY_FITNESS_DB_PASSWORD
          key: SPARKY_FITNESS_DB_PASSWORD
        - objectName: sparkyfitness-db__SPARKY_FITNESS_APP_DB_USER
          key: SPARKY_FITNESS_APP_DB_USER
        - objectName: sparkyfitness-db__SPARKY_FITNESS_APP_DB_PASSWORD
          key: SPARKY_FITNESS_APP_DB_PASSWORD
    - secretName: sparkyfitness-secrets
      type: Opaque
      data:
        - objectName: sparkyfitness-secrets__JWT_SECRET
          key: JWT_SECRET
        - objectName: sparkyfitness-secrets__SPARKY_FITNESS_API_ENCRYPTION_KEY
          key: SPARKY_FITNESS_API_ENCRYPTION_KEY
    - secretName: sparkyfitness-admin
      type: Opaque
      data:
        - objectName: sparkyfitness-admin__email
          key: email
        - objectName: sparkyfitness-admin__password
          key: password
    - secretName: sparkyfitness-oidc
      type: Opaque
      data:
        - objectName: sparkyfitness-oidc__client_id
          key: client_id
        - objectName: sparkyfitness-oidc__client_secret
          key: client_secret
        - objectName: sparkyfitness-oidc__issuer_url
          key: issuer_url