airshipctl/playbooks
Alexey Odinokov e2c56108ee Nextgen secrets implementation with separation per cluster
1. Extending templater with kyaml functions and creating combined catalogue
to be able to request/update the existing resources.
This is based on 'everything is transformer' concept introduced in kustomize 4.x
That includes gathering all secrets into 1 variable catalogue and
special mechanism to regenerate/merge with manual secrets.

2. Implementing 'catalogue per cluster' approach for secrets.

3. Rearranging secrets so it's possible to use:
pgp (each person may have his own key), age, Hachicorp Vault and etc
and the list of people who can decrypt documents is set in a special file.
Since in some cases there should be a separate list of people who can decrypt
data - this list is set for each cluster (ephemeral and target) separatelly.

Closes: #586
Change-Id: I038f84dd138d5ad4a35f4862c61ff2124c2fd530
2021-09-03 20:46:15 +00:00
..
files Disable the redundant github issue update job 2021-04-19 13:26:40 +00:00
vars Nextgen secrets implementation with separation per cluster 2021-09-03 20:46:15 +00:00
airship-aiap-build-images.yaml Add publish jobs for AIAP 2021-07-19 09:58:20 -05:00
airship-aiap-publish-images.yaml Add publish jobs for AIAP 2021-07-19 09:58:20 -05:00
airship-airshipctl-build-gate.yaml Update default CRI and cgroup driver 2021-05-24 21:02:02 +00:00
airship-airshipctl-build-images.yaml [#106] Add docker install role 2020-03-23 15:25:15 -05:00
airship-airshipctl-check-github-issues.yaml Check if commit is linked to github issue 2020-11-06 18:45:34 +00:00
airship-airshipctl-deploy-docker.yaml [#106] Add docker install role 2020-03-23 15:25:15 -05:00
airship-airshipctl-deploy-existing-k8s.yaml [#70] Resolve kubectl gate errors 2020-03-10 19:15:07 +00:00
airship-airshipctl-deploy-kustomize.yaml Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
airship-airshipctl-functional-existing-k8s.yaml Use in repo docker-install instead of install-docker from zuul-jobs 2020-05-08 18:59:00 +02:00
airship-airshipctl-golint.yaml Add golint as a non-voting gate 2020-05-29 11:40:45 -05:00
airship-airshipctl-lint.yaml Separate lint job from the test 2020-11-05 22:35:32 +00:00
airship-airshipctl-publish-images.yaml Remove publish job dependency from build job 2021-04-19 14:39:06 -05:00
airship-airshipctl-unit.yaml Separate lint job from the test 2020-11-05 22:35:32 +00:00
airship-airshipctl-validate-documents.yaml Add site doc validation gate 2020-06-04 18:04:47 -05:00
airship-collect-azure-logs.yaml Integration of Azure provider to Airship 2.0 2020-10-05 19:27:31 +00:00
airship-collect-logs.yaml Collect description of k8s object to job logs 2020-10-23 11:58:29 -05:00
airshipctl-gate-runner.yaml Nextgen secrets implementation with separation per cluster 2021-09-03 20:46:15 +00:00
get-vm-config.yaml Nextgen secrets implementation with separation per cluster 2021-09-03 20:46:15 +00:00