---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: postgres-credentials
  namespace: litellm
spec:
  destination:
    create: true
    name: postgres-credentials
    overwrite: true
  hmacSecretData: true
  mount: kv
  path: kubernetes/namespace/litellm/default/postgres-credentials
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: oauth-credentials
  namespace: litellm
spec:
  destination:
    create: true
    name: oauth-credentials
    overwrite: true
  hmacSecretData: true
  mount: kv
  # Same secret Authentik sets on the litellm OAuth2 provider (key: client_secret).
  path: kubernetes/namespace/litellm/default/oauth-credentials
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: litellm-credentials
  namespace: litellm
spec:
  destination:
    create: true
    name: litellm-credentials
    overwrite: true
  hmacSecretData: true
  mount: kv
  path: kubernetes/namespace/litellm/default/litellm-credentials
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default