user-microservice-deploy/secret-store.yaml
2025-06-11 18:42:21 +00:00

42 lines
1.2 KiB
YAML

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: azure-kvname
namespace: user-microservice
spec:
provider: azure
secretObjects:
- secretName: sqlalchemy-database-uri
type: Opaque
data:
- objectName: sqlalchemy-database-uri
key: SQLALCHEMY_DATABASE_URI
- secretName: mysql-password
type: Opaque
data:
- objectName: mysql-password
key: MYSQL_PASSWORD
- secretName: mysql-root-password
type: Opaque
data:
- objectName: mysql-root-password
key: MYSQL_ROOT_PASSWORD
parameters:
usePodIdentity: "false"
useVMManagedIdentity: "true"
userAssignedIdentityID: "f91aef65-7d2a-4df8-a884-e33b05d54a31" # client_id of the user-assigned managed identity
clientID: "f91aef65-7d2a-4df8-a884-e33b05d54a31" # client_id of the user-assigned managed identity
keyvaultName: "dev-aks"
objects: |
array:
- |
objectName: sqlalchemy-database-uri
objectType: secret
- |
objectName: mysql-password
objectType: secret
- |
objectName: mysql-root-password
objectType: secret
tenantID: "f4e3e6f7-d21c-460e-b201-2192174e7f41"