-
Notifications
You must be signed in to change notification settings - Fork 97
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
intial resources for testing, more to come (#748)
- Loading branch information
1 parent
7def202
commit 5833b26
Showing
7 changed files
with
113 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: certificate-sync | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-cert | ||
type: certificate | ||
output: | ||
secret: | ||
name: my-certificate-from-akv # kubernetes secret name | ||
type: kubernetes.io/tls # kubernetes secret type |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: secret-configmap-sync | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-secret # name of the akv object | ||
type: secret # akv object type | ||
output: | ||
configMap: | ||
name: my-secret-from-akv # kubernetes configmap name | ||
dataKey: secret-value # key to store object value in kubernetes configmap |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: db-config | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv | ||
object: | ||
contentType: application/x-json # make sure this matches the content of the secret, can be either 'application/x-json' or 'application/x-yaml' | ||
name: akv2k8s-multi-key-test | ||
type: multi-key-value-secret | ||
output: | ||
secret: | ||
name: db-config |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: secret-sync | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-secret # name of the akv object | ||
type: secret # akv object type | ||
output: | ||
secret: | ||
name: my-secret-from-akv # kubernetes secret name | ||
dataKey: secret-value # key to store object value in kubernetes secret |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: signing-key-sync | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-key # name of the akv object | ||
type: key # akv object type | ||
output: | ||
secret: | ||
name: my-signing-key-from-akv # kubernetes secret name | ||
dataKey: signing-key # key to store object value in kubernetes secret |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: secret-sync-1 | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-secret # name of the akv object | ||
type: secret # akv object type | ||
output: | ||
secret: | ||
name: my-secrets-from-akv # kubernetes secret name | ||
dataKey: secret-value-1 # key to store object value in kubernetes secret | ||
--- | ||
apiVersion: spv.no/v2beta1 | ||
kind: AzureKeyVaultSecret | ||
metadata: | ||
name: secret-sync-2 | ||
namespace: akv-test | ||
spec: | ||
vault: | ||
name: akv2k8sinttestskv # name of key vault | ||
object: | ||
name: akv2k8s-test-secret-two # name of the akv object | ||
type: secret # akv object type | ||
output: | ||
secret: | ||
name: my-secrets-from-akv # kubernetes secret name | ||
dataKey: secret-value-2 # key to store object value in kubernetes secret |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
apiVersion: v1 | ||
kind: Namespace | ||
metadata: | ||
name: akv-test | ||
labels: | ||
azure-key-vault-env-injection: enabled | ||
|