feat: use explicit clone annotation to clone rabbitmq and redis secrets

2024-06-19 11:09:42 +02:00
parent fd2d757504
commit 05295eafe7
4 changed files with 48 additions and 34 deletions
@@ -38,14 +38,16 @@ spec:
         - Secret
         names:
         - prod-rabbitmq
-    exclude:
-     any:
-     - resources:
-         kinds:
-         - Secret
-         selector:
-           matchLabels:
-             generate.kyverno.io/clone-source: ""
+         annotations:
+           clone: "true"
+    # exclude:
+    #  any:
+    #  - resources:
+    #      kinds:
+    #      - Secret
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
  - name: sync-staging-rabbitmq-secret
    generate:
      apiVersion: v1
@@ -63,11 +65,13 @@ spec:
         - Secret
         names:
         - staging-rabbitmq
-    exclude:
-     any:
-     - resources:
-         kinds:
-         - Secret
-         selector:
-           matchLabels:
-             generate.kyverno.io/clone-source: ""
+         annotations:
+           clone: "true"
+    # exclude:
+    #  any:
+    #  - resources:
+    #      kinds:
+    #      - Secret
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""