credentials.example.yaml

# Example credential Secrets. Apply these in the same namespace as the
# SandboxTemplate, Sandbox, or SandboxClaim that references them.
#
# The default OpenAPI Secret name is configured by
# DEFAULT_OPENAPI_CREDENTIAL_SECRET in sandbox-operator-config. CRs can override
# it with spec.openapiCredentialRef.name.
apiVersion: v1
kind: Secret
metadata:
  name: sandbox-openapi-credentials
  namespace: default
type: Opaque
stringData:
  accessKeyId: "<OPENAPI_ACCESS_KEY_ID>"
  secretAccessKey: "<OPENAPI_SECRET_ACCESS_KEY>"
  accountId: "<ACCOUNT_ID>"
  region: "cn-beijing-6"
---
# KS3 mount credential. Reference it from:
# spec.template.spec.volumes[].ks3.credentialRef.name
apiVersion: v1
kind: Secret
metadata:
  name: ks3-credential
  namespace: default
type: Opaque
stringData:
  accessKey: "<KS3_ACCESS_KEY_ID>"
  secretAccessKey: "<KS3_SECRET_ACCESS_KEY>"
  token: ""
---
# KPFS mount credential. Reference it from:
# spec.template.spec.volumes[].kpfs.credentialRef.name
apiVersion: v1
kind: Secret
metadata:
  name: kpfs-credential
  namespace: default
type: Opaque
stringData:
  accessKey: "<KPFS_ACCESS_KEY_ID>"
  secretAccessKey: "<KPFS_SECRET_ACCESS_KEY>"
  token: ""
---
# Klog credential. Reference it from:
# spec.template.spec.observability.logging.credentialRef.name
apiVersion: v1
kind: Secret
metadata:
  name: klog-credential
  namespace: default
type: Opaque
stringData:
  accessKey: "<KLOG_ACCESS_KEY_ID>"
  secretAccessKey: "<KLOG_SECRET_ACCESS_KEY>"
  token: ""
---
# Image registry credential. Reference it from:
# spec.template.spec.image.registryCredentialRef.name
apiVersion: v1
kind: Secret
metadata:
  name: image-credential
  namespace: default
type: kubernetes.io/dockerconfigjson
stringData:
  .dockerconfigjson: |
    {
      "auths": {
        "hub.kce.ksyun.com": {
          "username": "<REGISTRY_USERNAME>",
          "password": "<REGISTRY_PASSWORD>",
          "auth": "<BASE64_USERNAME_COLON_PASSWORD>"
        }
      }
    }