EnvVariables_SecretProviderClass.yaml

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: aks-akv-secret-provider
spec:
  provider: azure
  secretObjects:
  - secretName: foosecret
    type: Opaque
    data:
    - objectName: secret1
      key: secret1
    - objectName: secret2
      key: secret2
  parameters:
    usePodIdentity: "false"
    useVMManagedIdentity: "true"          # Set to true for using managed identity
    userAssignedIdentityID: <clientId>    # to which we got in the earlier stesp and for which have assigned the policies
    keyvaultName: test-azure-csi   
    cloudName: ""              # default azure                  
    objects: |
      array:
        - |
          objectName: secret1
          objectType: secret              # you can use keys/secrets/certs
          objectVersion: ""               # [OPTIONAL] takes lates if its empty
        - |
          objectName: secret2
          objectType: secret
          objectVersion: "" 
    tenantId: <tenant ID>