66 lines
2.0 KiB
YAML
66 lines
2.0 KiB
YAML
apiVersion: airshipit.org/v1alpha1
|
|
kind: ReplacementTransformer
|
|
metadata:
|
|
name: generated-secrets-replacements
|
|
annotations:
|
|
config.kubernetes.io/function: |-
|
|
container:
|
|
image: localhost/replacement-transformer
|
|
replacements:
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=isoImageSecrets].values.[name=rootPasswd].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_ROOT%"]
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=isoImageSecrets].values.[name=deployerPasswd].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_DEPLOYER%"]
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=ephemeralK8sSecrets].values.[name=caKey].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_CA_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=ephemeralK8sSecrets].values.[name=caCrt].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs:
|
|
- "stringData.userData%REPLACEMENT_CP_CA_CERT%"
|
|
- "stringData.userData%REPLACEMENT_CP_KUBECONFIG_CA_CERT%"
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=ephemeralK8sSecrets].values.[name=key].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: combined-ephemeral-secrets
|
|
fieldref: ".secretGroups.[name=ephemeralK8sSecrets].values.[name=crt].data"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_CERT%"]
|