titan-iac/services/crypto/xmr-miner/secretproviderclass.yaml

30 lines
895 B
YAML

# services/crypto/xmr-miner/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: crypto-vault
namespace: crypto
spec:
provider: vault
parameters:
vaultAddress: "http://vault.vault.svc.cluster.local:8200"
roleName: "crypto"
objects: |
- objectName: "xmr-payout__address"
secretPath: "kv/data/atlas/crypto/xmr-payout"
secretKey: "address"
- objectName: "harbor-pull__dockerconfigjson"
secretPath: "kv/data/atlas/harbor-pull/crypto"
secretKey: "dockerconfigjson"
secretObjects:
- secretName: xmr-payout
type: Opaque
data:
- objectName: xmr-payout__address
key: address
- secretName: harbor-regcred
type: kubernetes.io/dockerconfigjson
data:
- objectName: harbor-pull__dockerconfigjson
key: .dockerconfigjson