Implemented automatic fetching secrets from Azure KeyVault

This commit is contained in:
Marcin-Ramotowski
2025-05-06 21:57:43 +00:00
parent fc1d4f5154
commit b85a5dfd9a
3 changed files with 66 additions and 6 deletions

View File

@ -1,10 +1,4 @@
---
# Namespace (opcjonalnie)
apiVersion: v1
kind: Namespace
metadata:
name: user-microservice
---
# MySQL Deployment
apiVersion: apps/v1
kind: Deployment
@ -44,9 +38,18 @@ spec:
volumeMounts:
- name: mysql-pv
mountPath: /var/lib/mysql
- name: secrets-store
mountPath: "/mnt/secrets"
readOnly: true
volumes:
- name: mysql-pv
emptyDir: {}
- name: secrets-store
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: "azure-kvname"
---
# MySQL Service
apiVersion: v1
@ -87,6 +90,17 @@ spec:
secretKeyRef:
name: sqlalchemy-database-uri
key: SQLALCHEMY_DATABASE_URI
volumeMounts:
- name: secrets-store
mountPath: "/mnt/secrets"
readOnly: true
volumes:
- name: secrets-store
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: "azure-kvname"
---
# API Service
apiVersion: v1