apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: azure-keyvault
  namespace: argo
spec:
  provider: azure
  secretObjects:
    - secretName: acr-creds
      type: Opaque
      data:
        - objectName: acr-password
        - key: password
  parameters:
    usePodIdentity: "false"
    useVMManagedIdentity: "true"
    userAssignedIdentityID: "0c2780e4-8594-4aab-8f1a-8a19f71924bd" # client_id of the user-assigned managed identity
    clientID: "0c2780e4-8594-4aab-8f1a-8a19f71924bd"               # client_id of the user-assigned managed identity
    keyvaultName: "dev-aks"
    objects:  |
      array:
        - |
          objectName: acr-password
          objectType: secret
    tenantID: "f4e3e6f7-d21c-460e-b201-2192174e7f41"