3ae0bf6c54
This pins to static tags for all airship owned images: airship/images: all: 053c992218601cc49fd4a595ee4873380b132408 airship/airshipctl: aiap-*: 892bb6a16d53a0f43571284db83901bef53ed440 released krm functions: v2.0.2 (030bb123d8fedd39125dd6eae92f48e0d32a7469) toolbox krm function (unreleased): 346196e6c1d0dda202464133377aa3ec586719e4 Change-Id: I79eedaf0f61c1bcda58640aed0540e1102b23dc8 Signed-off-by: Sean Eagan <seaneagan1@gmail.com>
73 lines
2.0 KiB
YAML
73 lines
2.0 KiB
YAML
apiVersion: airshipit.org/v1alpha1
|
|
kind: ReplacementTransformer
|
|
metadata:
|
|
name: generated-secrets-replacements
|
|
annotations:
|
|
config.kubernetes.io/function: |-
|
|
container:
|
|
image: quay.io/airshipit/replacement-transformer:v2.0.2
|
|
replacements:
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.isoImage.passwords.root}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_ROOT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.isoImage.passwords.deployer}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_DEPLOYER%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralClusterCa.key}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_CA_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralClusterCa.crt}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_CA_CERT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.certificate-authority-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_CA_CERT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-key-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-certificate-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_CERT%"]
|