apiVersion: v1
kind: Secret

metadata:
  name: secret-one

# Almost a plain old Kubernetes 'Secret' manifest, just the data values are encrypted.

# For possible types see: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types
# 'Opaque' allows arbitrary key-value pairs
type: Opaque

# "stringData" finally contains secrets as String, these are Base64 encoded by Kubernetes.
# Useful for values that are related to the actual secrets but don't have to be protected.
stringData:
  greeting: "Welcome"
  host: "example.org"

# "data" finally contains secrets Base64 encoded.
# Note: Only these 'data' values are treated as vaulted secrets and are decrypted by the plugin!
data:
  username: SITU_VAULT_V1##C:AES256_GCM#KDF:PBKDF2_SHA256_I10K#SALT:R8B#ENC:BASE32#LB:NO##TNSIVLVV6EOGI===##GRDENILPW24R4YDA2I6MKT6JPLG5GM2HWC5S2PR7##END
  password: SITU_VAULT_V1##C:AES256_GCM#KDF:PBKDF2_SHA256_I10K#SALT:R8B#ENC:BASE32#LB:NO##TCHHO4DN33TGE===##E6MGPZHIF4BKSWARCXN4HD7ZRCA7O6DSPCUUTW43SIAYX5RVOBGA====##END
  risky_flag: SITU_VAULT_V1##C:AES256_GCM#KDF:PBKDF2_SHA256_I10K#SALT:R8B#ENC:BASE32#LB:NO##FWEPX65OJVCEE===##QD226ZVYYQHYFNPRPYAZZZTBTHT2JL2M##END
