csi-provider/examples/test.yaml

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: my-kms-csi-provider
spec:
  provider: kms
  secretObjects:
    - data:
        - key: username
          objectName: imanother
      secretName: foosecret
      type: Opaque
  parameters:
    kmsUrl: "https://117aa93c00fe.ngrok.app"
    authMethod: "kubernetes"
    identityId: "ad2f8c67-cbe2-417a-b5eb-1339776ec0b3"
    projectId: "09eda1f8-85a3-47a9-8a6f-e27f133b2a36"
    useDefaultAudience: "true"
    envSlug: "dev"
    secrets: |
      - secretPath: "/engineering"
        fileName: "test"
        secretKey: "SSSSS"
      - secretPath: "/"
        fileName: "hayz4"
        secretKey: "ZZZ"
---
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: my-kms-csi-provider-1
spec:
  provider: kms
  parameters:
    kmsUrl: "https://117aa93c00fe.ngrok.app"
    authMethod: "kubernetes"
    identityId: "ad2f8c67-cbe2-417a-b5eb-1339776ec0b3"
    projectId: "09eda1f8-85a3-47a9-8a6f-e27f133b2a36"
    envSlug: "dev"
    secrets: |
      - secretPath: "/"
        fileName: "smooth"
        secretKey: "SMOOTH_OPERATOR"
---
apiVersion: v1
kind: Pod
metadata:
  name: nginx-secrets-store
  labels:
    app: nginx
spec:
  containers:
    - name: nginx
      image: nginx
      volumeMounts:
        - name: secrets-store-inline
          mountPath: "/mnt/secrets-store"
          readOnly: true
  volumes:
    - name: secrets-store-inline
      csi:
        driver: secrets-store.csi.k8s.io
        readOnly: true
        volumeAttributes:
          secretProviderClass: "my-kms-csi-provider"
---
apiVersion: v1
kind: Pod
metadata:
  name: nginx-secrets-store-1
  labels:
    app: nginx
spec:
  containers:
    - name: nginx
      image: nginx
      volumeMounts:
        - name: secrets-store-inline
          mountPath: "/secrets"
          readOnly: true
  volumes:
    - name: secrets-store-inline
      csi:
        driver: secrets-store.csi.k8s.io
        readOnly: true
        volumeAttributes:
          secretProviderClass: "my-kms-csi-provider-1"