airship/airshipctl
Code Issues Proposed changes
1eed1efd91
airshipctl/manifests/site/test-site/ephemeral
History
Alexey Odinokov b51e7559b6 Adding encryption of k8s secrets and iso users passwords 
This patchset introduces a generated with template [1] and encrypted
VariableCatalogue generated-secrets that contains steps to
generate: ephemeral and target CA+admin key/cert and passwords for
users in ephemeral bootstrap iso.

It also introduces the way how these secrets are used in manifests:
They're decrypted by kustomize and incorporated into the folders
`catalogues` in the site, so they can be used by replacement plugin.

This patchset contains modifications in replacement plugin
configurations to put the decrypted values from VariableCatalogue
in place.

Since k8s secrets were substituted with generated values
this patchset removes pre-generated k8s secrets.

[1]
manifests/type/gating/target/generator/secret-template.yaml

Change-Id: I0898c74012833f0e171d36bb8145acf358510b69
2021-02-12 04:07:36 +00:00
..
bootstrap Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
catalogues Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
controlplane Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
initinfra Deploy Calico using Tigera Operator 2021-01-01 04:32:22 +00:00
initinfra-networking Deploy Calico using Tigera Operator 2021-01-01 04:32:22 +00:00