Пример работы с секретами для добавления в Secret Management System (SecMan)#

{
  // В конфигурации определяются параметры секретов для работы Kintsugi
  "istio": {
    "egress": {
      "istio-egressgateway-certs-tls.crt": "-----BEGIN CERTIFICATE-----MIIEzDCCAzSgAwIBAgICBIUw-----END CERTIFICATE-----",
      "istio-egressgateway-certs-tls.key": "-----BEGIN PRIVATEKEY-----MIIEvgIBADANBgkqhkiG9w0BA-----END PRIVATEKEY-----",
      "istio-egressgateway-ca-certs": "-----BEGIN CERTIFICATE-----MIIDeDCCAmCgAwIBAgIBATAN-----END CERTIFICATE---------- BEGIN CERTIFICATE-----MIIEjjCCAvagAwIBAgIBATAN-----END CERTIFICATE----",
      "kintsugi.p12": "MIIH5AIBAzCCB50GCSqGSIb3DQEHAaCCB44EggeKMIIH",
      "truststore.p12": "MIIMrgIBAzCCDGcGCSqGSIb3DQEHAaCCDFgEggxUMIIMUDCCDEwGCSqGSIb3"
    },
    "ingress": {
      "istio-ingressgateway-certs-tls.crt": "-----BEGIN CERTIFICATE-----MIIEzDCCAzSgAwIBAgICBIUwDQY-----END CERTIFICATE-----",
      "istio-ingressgateway-certs-tls.key": "-----BEGIN PRIVATEKEY-----MIIEvgIBADANBgkqhkiG9w0BAQEF-----END PRIVATEKEY-----",
      "istio-ingressgateway-ca-certs-ca.crt": "-----BEGIN CERTIFICATE-----MIIEjjCCAvagAwIBAgIBATANBgk-----END CERTIFICATE-----"
    }
  },
  "ott": {
    "OTT_CERTSTORE_PRIVATE_KEY_PWD": "store123",
    "OTT_CERTSTORE_PWD": "store123",
    "OTT_TRUST_STORE_PWD": "store123",
    "kintsugi.p12": "MIIH5AIBAzCCB50GCSqGSIb3DQEHAaCCB44EggeKMIIHhjCB4wYJKoZIhvcNAQ",
    "truststore.p12": "MIIMrgIBAzCCDGcGCSqGSIb3DQEHAaCCDFgEggxUMIIMUDCCDEwGCSqGSIb3DQ"
  },
  "kintsugi": {
    "backend": {
      "secret.pem": "secret",
      "repository_password.secret": "*******", // пароль от секрета
      "client_cert.secret": "-----BEGIN CERTIFICATE-----MIICozCCAYsCCQCWXJS7hb-----END CERTIFICATE-----",
      "client_key.secret": "-----BEGIN PRIVATE KEY-----MIIEvQIBADANBgkqhkiG9w0BAQEFAA-----END PRIVATE KEY-----",
      "root_cert.secret": "-----BEGIN CERTIFICATE-----MIIC+zCCAeOgAwIBAgIJAIUlgU1Y-----END CERTIFICATE-----"
    },
    "collector": {
      "repository_password.secret": "*******", // пароль от секрета
      "secret.pem": "secret",
      "monitoring_database.secret": "postgres",
      "monitoring_login.secret": "postgres",
      "monitoring_password.secret": "*******", // пароль от секрета
      "auth.secret": "fffff:fff",
      "client_cert.pem.secret": "-----BEGIN CERTIFICATE-----MIICozCCAYsCCQCWXJS7hb+w6DA-----END CERTIFICATE-----",
      "client_key.pem.secret": "-----BEGIN PRIVATE KEY-----MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSj-----END PRIVATE KEY-----",
      "root_cert.pem.secret": "-----BEGIN CERTIFICATE-----MIIC+zCCAeOgAwIBAgIJAIUlgU1-----END CERTIFICATE-----"
    },
    "curator": {
      "secret.pem": "secret",
      "repository_password.secret": "*******", // пароль от секрета
      "client_cert.secret": "-----BEGIN CERTIFICATE-----MIICozCCAYsCCQCWXJS7hb+w6DANBg-----END CERTIFICATE-----",
      "client_key.pem.secret": "-----BEGIN PRIVATE KEY-----MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBK-----END PRIVATE KEY-----",
      "root_cert.pem.secret": "-----BEGIN CERTIFICATE-----MIIC+zCCAeOgAwIBAgIJAIUlgU1-----END CERTIFICATE-----"
    },
    "dbterm": {
      "secret.pem": "secret",
      "repository_password.secret": "*******", // пароль от секрета
      "client_cert.secret": "-----BEGIN CERTIFICATE-----MIICozCCAYsCCQCWXJS7hb+w6DANBgkqhkiG9-----END CERTIFICATE-----",
      "client_key.pem.secret": "-----BEGIN PRIVATE KEY-----MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcw-----END PRIVATE KEY-----",
      "root_cert.pem.secret": "-----BEGIN CERTIFICATE-----MIIC+zCCAeOgAwIBAgIJAIUlgU1YC-----END CERTIFICATE-----"
    },
    "kmetrics": {
      "autrozation.secret": "{{ .Values.kmetrics_configmap.victoria_metrics.user_vmauth }}:{{ .Values.kmetrics_configmap.victoria_metrics.password_vmauth }}"
    }
  }
}