# services/maintenance/bootstrap/secretproviderclass.yaml
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: maintenance-vault
  namespace: maintenance
spec:
  provider: vault
  parameters:
    vaultAddress: "http://vault.vault.svc.cluster.local:8200"
    roleName: "maintenance"
    objects: |
      - objectName: "harbor-pull__dockerconfigjson"
        secretPath: "kv/data/atlas/shared/harbor-pull"
        secretKey: "dockerconfigjson"
      - objectName: "soteria-restic__AWS_ACCESS_KEY_ID"
        secretPath: "kv/data/atlas/shared/soteria-restic"
        secretKey: "AWS_ACCESS_KEY_ID"
      - objectName: "soteria-restic__AWS_SECRET_ACCESS_KEY"
        secretPath: "kv/data/atlas/shared/soteria-restic"
        secretKey: "AWS_SECRET_ACCESS_KEY"
      - objectName: "soteria-restic__RESTIC_PASSWORD"
        secretPath: "kv/data/atlas/shared/soteria-restic"
        secretKey: "RESTIC_PASSWORD"
      - objectName: "soteria-restic__AWS_ENDPOINTS"
        secretPath: "kv/data/atlas/shared/soteria-restic"
        secretKey: "AWS_ENDPOINTS"
      - objectName: "ananke-sudo-titan-04"
        secretPath: "kv/data/atlas/nodes/titan-04"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-07"
        secretPath: "kv/data/atlas/nodes/titan-07"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-08"
        secretPath: "kv/data/atlas/nodes/titan-08"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-11"
        secretPath: "kv/data/atlas/nodes/titan-11"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-12"
        secretPath: "kv/data/atlas/nodes/titan-12"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-13"
        secretPath: "kv/data/atlas/nodes/titan-13"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-14"
        secretPath: "kv/data/atlas/nodes/titan-14"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-15"
        secretPath: "kv/data/atlas/nodes/titan-15"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-17"
        secretPath: "kv/data/atlas/nodes/titan-17"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-18"
        secretPath: "kv/data/atlas/nodes/titan-18"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-19"
        secretPath: "kv/data/atlas/nodes/titan-19"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-20"
        secretPath: "kv/data/atlas/nodes/titan-20"
        secretKey: "atlas_password"
        filePermission: 256
      - objectName: "ananke-sudo-titan-21"
        secretPath: "kv/data/atlas/nodes/titan-21"
        secretKey: "atlas_password"
        filePermission: 256
  secretObjects:
    - secretName: harbor-regcred
      type: kubernetes.io/dockerconfigjson
      data:
        - objectName: harbor-pull__dockerconfigjson
          key: .dockerconfigjson
    - secretName: soteria-restic
      type: Opaque
      data:
        - objectName: soteria-restic__AWS_ACCESS_KEY_ID
          key: AWS_ACCESS_KEY_ID
        - objectName: soteria-restic__AWS_SECRET_ACCESS_KEY
          key: AWS_SECRET_ACCESS_KEY
        - objectName: soteria-restic__RESTIC_PASSWORD
          key: RESTIC_PASSWORD
        - objectName: soteria-restic__AWS_ENDPOINTS
          key: AWS_ENDPOINTS
    - secretName: ananke-sudo-titan-04
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-04
          key: password
    - secretName: ananke-sudo-titan-07
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-07
          key: password
    - secretName: ananke-sudo-titan-08
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-08
          key: password
    - secretName: ananke-sudo-titan-11
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-11
          key: password
    - secretName: ananke-sudo-titan-12
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-12
          key: password
    - secretName: ananke-sudo-titan-13
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-13
          key: password
    - secretName: ananke-sudo-titan-14
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-14
          key: password
    - secretName: ananke-sudo-titan-15
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-15
          key: password
    - secretName: ananke-sudo-titan-17
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-17
          key: password
    - secretName: ananke-sudo-titan-18
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-18
          key: password
    - secretName: ananke-sudo-titan-19
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-19
          key: password
    - secretName: ananke-sudo-titan-20
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-20
          key: password
    - secretName: ananke-sudo-titan-21
      type: Opaque
      data:
        - objectName: ananke-sudo-titan-21
          key: password