airshipctl/manifests
Vladislav Kuzmin 8dba799c18 Add secrets generator phase
This phase builded on top of generic executor container.
It uses kustomize generator to generate secrets
and SOPS function to encrypt secrets.

Usage:
    1. `curl -fsSL -o key.asc https://raw.githubusercontent.com/mozilla/sops/master/pgp/sops_functional_tests_key.asc`
       Copy existing key from sops project
    2. `export SOPS_IMPORT_PGP="$(cat key.asc)" && export SOPS_PGP_FP="FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4"`
    3. `airshipctl phase run secret-generate`
        It will generate and encrypt secret in
        manifests/site/test-site/target/generator/results/generated/
    4. `KUSTOMIZE_PLUGIN_HOME=$(pwd)/manifests SOPS_IMPORT_PGP=$(cat key.asc) kustomize build --enable_alpha_plugins
        manifests/site/test-site/target/catalogues/ > output.txt`
	It will decrypt encrypted secret

Co-authored-by: Alexey Odinokov <aodinokov@mirantis.com>
Change-Id: I1682d71b7805eb36c407e712dcb747de799bc8bb
Relates-To: #379
2021-01-14 18:57:15 +00:00
..
composite Update Flux manifests 2021-01-05 13:58:03 -06:00
function Image override for CAPG components 2021-01-13 03:09:44 +00:00
global/crd Enhance target node deployment on gates 2020-08-27 11:12:05 -05:00
phases Add secrets generator phase 2021-01-14 18:57:15 +00:00
site Add secrets generator phase 2021-01-14 18:57:15 +00:00
type/gating Add phase tree command in cmd module 2021-01-08 13:26:08 +00:00