(ruka/loki) IT-5699 user creation for loki to access bucket on ceph

lsst-it · Oct 15, 2024 · cedc430 · cedc430
1 parent ca70dd0
commit cedc430
Showing 1 changed file with 33 additions and 0 deletions.
diff --git a/fleet/lib/rook-ceph-conf/charts/ruka/templates/cephobjectstoreuser-loki.yaml b/fleet/lib/rook-ceph-conf/charts/ruka/templates/cephobjectstoreuser-loki.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephObjectStoreUser
+metadata:
+  name: loki
+  namespace: rook-ceph
+spec:
+  store: lfa
+  clusterNamespace: rook-ceph
+---
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: rook-ceph-object-user-lfa-loki
+  namespace: rook-ceph
+spec:
+  secretStoreRefs:
+    - kind: ClusterSecretStore
+      name: onepassword-oods
+  selector:
+    secret:
+      name: rook-ceph-object-user-lfa-loki
+  data:
+    - match:
+        secretKey: AccessKey
+        remoteRef:
+          remoteKey: loki
+          property: AWS_ACCESS_KEY_ID
+    - match:
+        secretKey: SecretKey
+        remoteRef:
+          remoteKey: loki
+          property: AWS_SECRET_ACCESS_KEY