airshipctl/tools/gate
Alexey Odinokov b51e7559b6 Adding encryption of k8s secrets and iso users passwords
This patchset introduces a generated with template [1] and encrypted
VariableCatalogue generated-secrets that contains steps to
generate: ephemeral and target CA+admin key/cert and passwords for
users in ephemeral bootstrap iso.

It also introduces the way how these secrets are used in manifests:
They're decrypted by kustomize and incorporated into the folders
`catalogues` in the site, so they can be used by replacement plugin.

This patchset contains modifications in replacement plugin
configurations to put the decrypted values from VariableCatalogue
in place.

Since k8s secrets were substituted with generated values
this patchset removes pre-generated k8s secrets.

[1]
manifests/type/gating/target/generator/secret-template.yaml

Change-Id: I0898c74012833f0e171d36bb8145acf358510b69
2021-02-12 04:07:36 +00:00
..
00_setup.sh Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
10_build_gate.sh (fix) Add -E for sudo to pick user env 2020-10-27 14:27:27 +00:00
20_run_gate_runner.sh Added verbose to gate runner playbook 2021-02-10 16:40:59 +00:00
99_collect_logs.sh Added tags to control execution of tasks 2021-01-22 19:42:39 +00:00
config_template.yaml Preparing zuul tests for secrets generation 2021-02-10 20:34:39 +00:00