43f8dab09a
* Fixes validate_docs for treasuremap * Align the secret encryption/decryption changes of airshipctl * Aligning the manifest changes of airshipctl. * Added HWCC. * Replaced helm-operator with flux-helm * Updated node parameters. Relates-To: #77 Closes: #95 Change-Id: I30408de468ac2794703b95a2afc6191908567816
70 lines
2.0 KiB
YAML
70 lines
2.0 KiB
YAML
apiVersion: airshipit.org/v1alpha1
|
|
kind: ReplacementTransformer
|
|
metadata:
|
|
name: k8scontrol-cluster-replacements
|
|
annotations:
|
|
config.kubernetes.io/function: |-
|
|
container:
|
|
image: quay.io/airshipit/replacement-transformer:latest
|
|
replacements:
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.targetKubeconfig.certificate-authority-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.clusters.[name=target-cluster].cluster.certificate-authority-data"]
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.targetKubeconfig.client-certificate-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.users.[name=target-cluster-admin].user.client-certificate-data"]
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.targetKubeconfig.client-key-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.users.[name=target-cluster-admin].user.client-key-data"]
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.certificate-authority-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.clusters.[name=ephemeral-cluster].cluster.certificate-authority-data"]
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-certificate-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.users.[name=ephemeral-cluster-admin].user.client-certificate-data"]
|
|
- source:
|
|
objref:
|
|
kind: VariableCatalogue
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-key-data}"
|
|
target:
|
|
objref:
|
|
kind: KubeConfig
|
|
name: default
|
|
fieldrefs: [".config.users.[name=ephemeral-cluster-admin].user.client-key-data"]
|