This commit is contained in:
Zeeshaun
2026-03-13 09:24:21 -05:00
parent c2d6bda458
commit 256f579489
282 changed files with 50136 additions and 0 deletions
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: document-manager-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: historical-document-manager-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-seq-api-key.json
readOnly: true
subPath: document-manager-seq-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-client-secret.json
readOnly: true
subPath: document-manager-client-secret
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-client-id.json
readOnly: true
subPath: document-manager-client-id
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-api-key.json
readOnly: true
subPath: document-manager-api-key
@@ -0,0 +1,20 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: document-manager-seq-api-key
objectType: secret
objectVersion: ""
- |
objectName: document-manager-client-secret
objectType: secret
objectVersion: ""
- |
objectName: document-manager-client-id
objectType: secret
objectVersion: ""
- |
objectName: document-manager-api-key
objectType: secret
objectVersion: ""
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: document-manager-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: normal-document-manager-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-seq-api-key.json
readOnly: true
subPath: document-manager-seq-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-client-secret.json
readOnly: true
subPath: document-manager-client-secret
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-client-id.json
readOnly: true
subPath: document-manager-client-id
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: document-manager-secrets
mountPath: /vault/secrets/document-manager-api-key.json
readOnly: true
subPath: document-manager-api-key
@@ -0,0 +1,20 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: document-manager-seq-api-key
objectType: secret
objectVersion: ""
- |
objectName: document-manager-client-secret
objectType: secret
objectVersion: ""
- |
objectName: document-manager-client-id
objectType: secret
objectVersion: ""
- |
objectName: document-manager-api-key
objectType: secret
objectVersion: ""