airshipctl/zuul.d
Alexey Odinokov b51e7559b6 Adding encryption of k8s secrets and iso users passwords
This patchset introduces a generated with template [1] and encrypted
VariableCatalogue generated-secrets that contains steps to
generate: ephemeral and target CA+admin key/cert and passwords for
users in ephemeral bootstrap iso.

It also introduces the way how these secrets are used in manifests:
They're decrypted by kustomize and incorporated into the folders
`catalogues` in the site, so they can be used by replacement plugin.

This patchset contains modifications in replacement plugin
configurations to put the decrypted values from VariableCatalogue
in place.

Since k8s secrets were substituted with generated values
this patchset removes pre-generated k8s secrets.

[1]
manifests/type/gating/target/generator/secret-template.yaml

Change-Id: I0898c74012833f0e171d36bb8145acf358510b69
2021-02-12 04:07:36 +00:00
..
jobs.yaml Adding encryption of k8s secrets and iso users passwords 2021-02-12 04:07:36 +00:00
nodesets.yaml Add new nodesets to the gates configuration 2020-02-10 17:43:52 +01:00
projects.yaml Revert "Disabling airship-airshipctl-gate-script-runner" 2021-02-04 12:27:11 +00:00
secrets.yaml Use token for github Authentication 2020-10-26 13:44:27 +00:00