values-secret.yaml.template

# A more formal description of this format can be found here:
# https://github.com/hybrid-cloud-patterns/common/tree/main/ansible/roles/vault_utils#values-secret-file-format

version: "2.0"
# Ideally you NEVER COMMIT THESE VALUES TO GIT (although if all passwords are
# automatically generated inside the vault this should not really matter)

secrets:
  - name: minio_tenant_root
    vaultPrefixes:
    - global
    fields:
    - name: 'config.env'
      value: |-
        export MINIO_ROOT_USER=ROOTUSERNAME
        export MINIO_ROOT_PASSWORD=ROOTUSERPASSWORD
      onMissingValue: prompt
      vaultPolicy: validatedPatternDefaultPolicy
  - name: test-project-a-aws
    vaultPrefixes:
    - global
    fields:
    - name: AWS_ACCESS_KEY_ID
      value: ''
      onMissingValue: prompt
      vaultPolicy: validatedPatternDefaultPolicy
    - name: AWS_SECRET_ACCESS_KEY
      value: ''
      onMissingValue: prompt
      vaultPolicy: validatedPatternDefaultPolicy
  - name: test-project-b-aws
    vaultPrefixes:
    - global
    fields:
    - name: AWS_ACCESS_KEY_ID
      value: ''
      onMissingValue: prompt
      vaultPolicy: validatedPatternDefaultPolicy
    - name: AWS_SECRET_ACCESS_KEY
      value: ''
      onMissingValue: prompt
      vaultPolicy: validatedPatternDefaultPolicy