---
apiVersion: v1
kind: Secret
metadata:
  namespace: openshift-config
  name: migstorage-creds
type: Opaque
data:
  # [!] If using S3 / AWS, change aws-access-key-id and aws-secret-access-key to contain the base64
  #      encoded keys needed to authenticate with the storage specified in migstorage.
  
  # [!] CAUTION: It's easy to miss the step of base64 encoding your AWS credentials when inputting
  #     them to this secret. since AWS credentials are base64 compatible already. Be _sure_ to run
  #     `echo -n "<key>" | base64 -w 0` on your access and secret key before providing them below.
  
  # [Note] these credentials will be injected into cloud-credentials in the 'velero' namespace.
  aws-access-key-id: aGVsbG8K
  aws-secret-access-key: aGVsbG8K

  # [!] If using Azure, change `azure-credentials` below to contain base64 encoded credentials
  #     Azure Credential format (pre b64 encoding)
  #     AZURE_SUBSCRIPTION_ID=${AZURE_SUBSCRIPTION_ID}
  #     AZURE_TENANT_ID=${AZURE_TENANT_ID}
  #     AZURE_CLIENT_ID=${AZURE_CLIENT_ID}
  #     AZURE_CLIENT_SECRET=${AZURE_CLIENT_SECRET}
  #     AZURE_RESOURCE_GROUP=${AZURE_RESOURCE_GROUP}
  #     AZURE_CLOUD_NAME=AzurePublicCloud
  azure-credentials: aGVsbG8K

  # [!] If using GCP, change `gcp-credentials` below to contain base64 encoded credentials
  gcp-credentials: aGVsbG8K