airshipctl/manifests/function/workers-capm3
Alexey Odinokov e2c56108ee Nextgen secrets implementation with separation per cluster
1. Extending templater with kyaml functions and creating combined catalogue
to be able to request/update the existing resources.
This is based on 'everything is transformer' concept introduced in kustomize 4.x
That includes gathering all secrets into 1 variable catalogue and
special mechanism to regenerate/merge with manual secrets.

2. Implementing 'catalogue per cluster' approach for secrets.

3. Rearranging secrets so it's possible to use:
pgp (each person may have his own key), age, Hachicorp Vault and etc
and the list of people who can decrypt documents is set in a special file.
Since in some cases there should be a separate list of people who can decrypt
data - this list is set for each cluster (ephemeral and target) separatelly.

Closes: #586
Change-Id: I038f84dd138d5ad4a35f4862c61ff2124c2fd530
2021-09-03 20:46:15 +00:00
..
replacements Merge "Revert "Add chrony config"" 2021-06-23 13:59:54 +00:00
replacements-secrets Nextgen secrets implementation with separation per cluster 2021-09-03 20:46:15 +00:00
kubeadmconfigtemplate.yaml Merge "Revert "Add chrony config"" 2021-06-23 13:59:54 +00:00
kustomization.yaml Move CAPI resources to target-infra namespace 2021-06-03 23:40:00 +00:00
machinedeployment.yaml Functionalize workers/provision 2021-05-18 16:09:49 +00:00
metal3machinetemplate.yaml Add replacements for workers qcow url ip 2021-06-15 01:24:40 -05:00
namespace.yaml Move CAPI resources to target-infra namespace 2021-06-03 23:40:00 +00:00