Adding
This commit is contained in:
@@ -0,0 +1,10 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1alpha1
|
||||
kind: Component
|
||||
|
||||
patches:
|
||||
- target:
|
||||
kind: Deployment
|
||||
path: set_secrets_deployment.yaml
|
||||
- target:
|
||||
kind: SecretProviderClass
|
||||
path: set_secrets_provider.yaml
|
||||
+41
@@ -0,0 +1,41 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/volumes/-
|
||||
value:
|
||||
name: repo-api-secrets
|
||||
csi:
|
||||
driver: secrets-store.csi.k8s.io
|
||||
readOnly: true
|
||||
volumeAttributes:
|
||||
secretProviderClass: normal-repo-api-secrets-provider
|
||||
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/volumeMounts/-
|
||||
value:
|
||||
name: repo-api-secrets
|
||||
mountPath: /vault/secrets/repo-api-seq-api-key.json
|
||||
readOnly: true
|
||||
subPath: repo-api-seq-api-key
|
||||
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/volumeMounts/-
|
||||
value:
|
||||
name: repo-api-secrets
|
||||
mountPath: /vault/secrets/repo-api-database-connection-string.json
|
||||
readOnly: true
|
||||
subPath: repo-api-database-connection-string
|
||||
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/volumeMounts/-
|
||||
value:
|
||||
name: repo-api-secrets
|
||||
mountPath: /vault/secrets/repo-api-queue-user-name.json
|
||||
readOnly: true
|
||||
subPath: repo-api-queue-user-name
|
||||
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/volumeMounts/-
|
||||
value:
|
||||
name: repo-api-secrets
|
||||
mountPath: /vault/secrets/repo-api-queue-password.json
|
||||
readOnly: true
|
||||
subPath: repo-api-queue-password
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
- op: add
|
||||
path: /spec/parameters/objects
|
||||
value: |
|
||||
array:
|
||||
- |
|
||||
objectName: repo-api-seq-api-key
|
||||
objectType: secret
|
||||
objectVersion: ""
|
||||
- |
|
||||
objectName: repo-api-database-connection-string
|
||||
objectType: secret
|
||||
objectVersion: ""
|
||||
- |
|
||||
objectName: repo-api-queue-user-name
|
||||
objectType: secret
|
||||
objectVersion: ""
|
||||
- |
|
||||
objectName: repo-api-queue-password
|
||||
objectType: secret
|
||||
objectVersion: ""
|
||||
|
||||
Reference in New Issue
Block a user