# services/monitoring/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: monitoring-vault
  namespace: monitoring
spec:
  provider: vault
  parameters:
    vaultAddress: "http://vault.vault.svc.cluster.local:8200"
    roleName: "monitoring"
    objects: |
      - objectName: "grafana-admin__admin-user"
        secretPath: "kv/data/atlas/monitoring/grafana-admin"
        secretKey: "admin-user"
      - objectName: "grafana-admin__admin-password"
        secretPath: "kv/data/atlas/monitoring/grafana-admin"
        secretKey: "admin-password"
      - objectName: "postmark-exporter__relay-username"
        secretPath: "kv/data/atlas/monitoring/postmark-exporter"
        secretKey: "relay-username"
      - objectName: "postmark-exporter__relay-password"
        secretPath: "kv/data/atlas/monitoring/postmark-exporter"
        secretKey: "relay-password"
      - objectName: "postmark-exporter__sending-limit"
        secretPath: "kv/data/atlas/monitoring/postmark-exporter"
        secretKey: "sending-limit"
      - objectName: "postmark-relay__relay-username"
        secretPath: "kv/data/atlas/shared/postmark-relay"
        secretKey: "relay-username"
      - objectName: "postmark-relay__relay-password"
        secretPath: "kv/data/atlas/shared/postmark-relay"
        secretKey: "relay-password"
      - objectName: "harbor-pull__dockerconfigjson"
        secretPath: "kv/data/atlas/harbor-pull/monitoring"
        secretKey: "dockerconfigjson"
  secretObjects:
    - secretName: grafana-admin
      type: Opaque
      data:
        - objectName: grafana-admin__admin-user
          key: admin-user
        - objectName: grafana-admin__admin-password
          key: admin-password
    - secretName: postmark-exporter
      type: Opaque
      data:
        - objectName: postmark-exporter__relay-username
          key: server-token
        - objectName: postmark-exporter__relay-password
          key: server-token-fallback
        - objectName: postmark-exporter__sending-limit
          key: sending-limit
    - secretName: grafana-smtp
      type: Opaque
      data:
        - objectName: postmark-relay__relay-username
          key: username
        - objectName: postmark-relay__relay-password
          key: password
    - secretName: harbor-regcred
      type: kubernetes.io/dockerconfigjson
      data:
        - objectName: harbor-pull__dockerconfigjson
          key: .dockerconfigjson