@@ -213,26 +213,26 @@ metadata:
213213 namespace: <namespace>
214214spec:
215215 provider: azure
216+ # add-highlight-start
217+ secretObjects:
218+ # each of these is a COLLECTION of secrets.
219+ # multiple separate collections can be defined, but to identify Azure secrets from other k8s secrets,
220+ # we use a collection that contains multiple secrets (as if it were an Object in fact).
221+ # important: it only needs to be created the first time, then just add a key underneath
222+ - secretName: azure-kv
223+ type: Opaque
224+ data:
225+ # the secret that we want to expose also as k8s secret should be added here.
226+ # important to distinguish objectName (reference to "KV") from key (custom name)
227+ - objectName: <secret-1-key> # secret name inside the "KV"
228+ key: example-secret # custom k8s secret's key
229+ # add-highlight-end
216230 parameters:
217231 usePodIdentity: 'false'
218232 useVMManagedIdentity: 'true'
219233 userAssignedIdentityID: 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
220234 tenantId: 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
221235 keyvaultName: 'kv-polinetwork'
222- # add-highlight-start
223- secretObjects:
224- # each of these is a COLLECTION of secrets.
225- # multiple separate collections can be defined, but to identify Azure secrets from other k8s secrets,
226- # we use a collection that contains multiple secrets (as if it were an Object in fact).
227- # important: it only needs to be created the first time, then just add a key underneath
228- - secretName: azure-kv
229- type: Opaque
230- data:
231- # the secret that we want to expose also as k8s secret should be added here.
232- # important to distinguish objectName (reference to "KV") from key (custom name)
233- - objectName: <secret-1-key> # secret name inside the "KV"
234- key: example-secret # custom k8s secret's key
235- # add-highlight-end
236236 objects: |
237237 array:
238238 - |
@@ -428,18 +428,18 @@ metadata:
428428 namespace: test-secret-env
429429spec:
430430 provider: azure
431+ secretObjects:
432+ - secretName: azure-kv
433+ type: Opaque
434+ data:
435+ - objectName: <secret-key>
436+ key: example-secret
431437 parameters:
432438 usePodIdentity: 'false'
433439 useVMManagedIdentity: 'true'
434440 userAssignedIdentityID: 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
435441 tenantId: 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
436442 keyvaultName: 'kv-polinetwork'
437- secretObjects:
438- - secretName: azure-kv
439- type: Opaque
440- data:
441- - objectName: <secret-key>
442- key: example-secret
443443 objects: |
444444 array:
445445 - |
0 commit comments