This commit is contained in:
Zeeshaun
2026-03-31 14:32:23 -05:00
parent f4646dc97f
commit 9be174da46
485 changed files with 37290 additions and 0 deletions
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,105 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: core-api-wrapper-api-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: scanbi-core-api-wrapper-api-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-core-api-wrapper-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-core-api-wrapper-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-core-soap-api-wrapper-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-core-soap-api-wrapper-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-remote-deposit-capture-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-remote-deposit-capture-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-reserve-management-system-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-reserve-management-system-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-member-preferences-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-member-preferences-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-data-cleanup-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-data-cleanup-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-client-secret-id.json
readOnly: true
subPath: scanbi-core-api-wrapper-client-secret-id
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-environment-from-vault.json
readOnly: true
subPath: scanbi-core-api-wrapper-environment-from-vault
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-seq-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-seq-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-temenos-action-handler-api-key.json
readOnly: true
subPath: scanbi-core-api-wrapper-temenos-action-handler-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-core-relying-password.json
readOnly: true
subPath: scanbi-core-api-wrapper-core-relying-password
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: core-api-wrapper-api-secrets
mountPath: /vault/secrets/core-api-wrapper-core-database-connection-string.json
readOnly: true
subPath: scanbi-core-api-wrapper-core-database-connection-string
@@ -0,0 +1,52 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: scanbi-core-api-wrapper-environment-from-vault
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-client-secret-id
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-data-cleanup-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-seq-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-member-preferences-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-reserve-management-system-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-remote-deposit-capture-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-core-api-wrapper-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-core-soap-api-wrapper-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-temenos-action-handler-api-key
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-core-relying-password
objectType: secret
objectVersion: ""
- |
objectName: scanbi-core-api-wrapper-core-database-connection-string
objectType: secret
objectVersion: ""