# services/logging/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: logging-vault
  namespace: logging
spec:
  provider: vault
  parameters:
    vaultAddress: "http://vault.vault.svc.cluster.local:8200"
    roleName: "logging"
    objects: |
      - objectName: "oauth2-proxy-logs-oidc__client_id"
        secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
        secretKey: "client_id"
      - objectName: "oauth2-proxy-logs-oidc__client_secret"
        secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
        secretKey: "client_secret"
      - objectName: "oauth2-proxy-logs-oidc__cookie_secret"
        secretPath: "kv/data/atlas/logging/oauth2-proxy-logs-oidc"
        secretKey: "cookie_secret"
  secretObjects:
    - secretName: oauth2-proxy-logs-oidc
      type: Opaque
      data:
        - objectName: oauth2-proxy-logs-oidc__client_id
          key: client_id
        - objectName: oauth2-proxy-logs-oidc__client_secret
          key: client_secret
        - objectName: oauth2-proxy-logs-oidc__cookie_secret
          key: cookie_secret