apiVersion: dapr.io/v1alpha1
kind: Configuration
metadata:
  name: secretappconfig
spec:
  secrets:
    scopes:
        - storeName: "kubernetes"
          defaultAccess: "allow"
          # adding nonexistentsecret to test scenario where it is allowed but not defined
          allowedSecrets: ["daprsecret","redissecret","emptysecret","nonexistentsecret"] 
  components:
    deny:
      # The built-in Kubernetes secret store is loaded regardless
      - secretstores.kubernetes
      - secretstores.hashicorp.vault
