tasker/deployment/secret-store.yaml
2025-06-05 20:51:28 +00:00

42 lines
1.3 KiB
YAML

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: dev-aks
namespace: todolist
spec:
provider: azure
secretObjects:
- secretName: todolist-sqlalchemy-database-uri
type: Opaque
data:
- objectName: todolist-sqlalchemy-database-uri
key: SQLALCHEMY_DATABASE_URI
- secretName: todolist-mysql-password
type: Opaque
data:
- objectName: todolist-mysql-password
key: MYSQL_PASSWORD
- secretName: todolist-mysql-root-password
type: Opaque
data:
- objectName: todolist-mysql-root-password
key: MYSQL_ROOT_PASSWORD
parameters:
usePodIdentity: "false"
useVMManagedIdentity: "true"
userAssignedIdentityID: "c302726f-fafb-4143-94c1-67a70975574a" # client_id of the user-assigned managed identity
clientID: "c302726f-fafb-4143-94c1-67a70975574a" # client_id of the user-assigned managed identity
keyvaultName: "dev-aks"
objects: |
array:
- |
objectName: todolist-sqlalchemy-database-uri
objectType: secret
- |
objectName: todolist-mysql-password
objectType: secret
- |
objectName: todolist-mysql-root-password
objectType: secret
tenantID: "f4e3e6f7-d21c-460e-b201-2192174e7f41"