Adding

2026-04-20 09:53:07 -05:00
parent 3b7195de7f
commit ed133b3470
105 changed files with 33830 additions and 0 deletions
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
+
@@ -0,0 +1,41 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: spit-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-spit-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: spit-secrets
+    mountPath: /vault/secrets/spit-seq-api-key.json
+    readOnly: true
+    subPath: spit-seq-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: spit-secrets
+    mountPath: /vault/secrets/spit-primary-subscription-key.json
+    readOnly: true
+    subPath: spit-primary-subscription-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: spit-secrets
+    mountPath: /vault/secrets/spit-azuread-client-id.json
+    readOnly: true
+    subPath: spit-azuread-client-id
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: spit-secrets
+    mountPath: /vault/secrets/spit-azuread-client-secret.json
+    readOnly: true
+    subPath: spit-azuread-client-secret
@@ -0,0 +1,21 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: spit-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: spit-primary-subscription-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: spit-azuread-client-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: spit-azuread-client-secret
+          objectType: secret
+          objectVersion: ""
+