Provider class for secret store

azure-kv-provider.yaml

apiVersion: secrets-store.csi.x-k8s.io/v1alpha1
kind: SecretProviderClass
metadata:
  name: azure-kv-provider
spec:
  provider: azure
  parameters:
    usePodIdentity: "false"   # We will not use pod identity for this example. We will use SP
    keyvaultName: "db-keys"   # This is the name of KeyVault resource that we created in previous step
    cloudName: "AzurePublicCloud"   
    objects:  |
      array:
        - |
          objectName: db-username
          objectType: secret      # object types: secret, key or cert
          objectVersion: "" 
        - |
          objectName: db-password
          objectType: secret   
          objectVersion: ""       
    resourceGroup: "$RG-NAME"    # Resource goup that you have used to create KeyVault
    subscriptionId: "$SUBSCRIPTION-ID"       
    tenantId: "$TENANT-ID"