feat: use explicit clone annotation to clone rabbitmq and redis secrets

resources/atlantis/host-manifests/sync-rabbitmq-secrets.yaml

@@ -38,14 +38,16 @@ spec:
          - Secret
          names:
          - prod-rabbitmq
-    exclude:
+         annotations:
-     any:
+           clone: "true"
-     - resources:
+    # exclude:
-         kinds:
+    #  any:
-         - Secret
+    #  - resources:
-         selector:
+    #      kinds:
-           matchLabels:
+    #      - Secret
-             generate.kyverno.io/clone-source: ""
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
   - name: sync-staging-rabbitmq-secret
     generate:
       apiVersion: v1
@@ -63,11 +65,13 @@ spec:
          - Secret
          names:
          - staging-rabbitmq
-    exclude:
+         annotations:
-     any:
+           clone: "true"
-     - resources:
+    # exclude:
-         kinds:
+    #  any:
-         - Secret
+    #  - resources:
-         selector:
+    #      kinds:
-           matchLabels:
+    #      - Secret
-             generate.kyverno.io/clone-source: ""
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""

resources/atlantis/host-manifests/sync-redis-secrets.yaml

@@ -23,14 +23,16 @@ spec:
          - Secret
          names:
          - prod-redis
-    exclude:
+         annotations:
-     any:
+           clone: "true"
-     - resources:
+    # exclude:
-         kinds:
+    #  any:
-         - Secret
+    #  - resources:
-         selector:
+    #      kinds:
-           matchLabels:
+    #      - Secret
-             generate.kyverno.io/clone-source: ""
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
   - name: sync-staging-redis-secret
     generate:
       apiVersion: v1
@@ -48,12 +50,14 @@ spec:
          - Secret
          names:
          - staging-redis
-    exclude:
+         annotations:
-     any:
+           clone: "true"
-     - resources:
+    # exclude:
-         kinds:
+    #  any:
-         - Secret
+    #  - resources:
-         selector:
+    #      kinds:
-           matchLabels:
+    #      - Secret
-             generate.kyverno.io/clone-source: ""
+    #      selector:
+    #        matchLabels:
+    #          generate.kyverno.io/clone-source: ""
 

resources/atlantis/manifests/prod/secrets.yaml

@@ -1,15 +1,17 @@
 apiVersion: v1
 kind: Secret
 metadata:
+  annotations:
+    clone: "true"
   name: prod-redis
   namespace: atlantis
 type: Opaque
-data:
 ---
 apiVersion: v1
 kind: Secret
 metadata:
+  annotations:
+    clone: "true"
   name: prod-rabbitmq
   namespace: atlantis
 type: Opaque
-data:

resources/atlantis/manifests/staging/secrets.yaml

@@ -1,6 +1,8 @@
 apiVersion: v1
 kind: Secret
 metadata:
+  annotations:
+    clone: "true"
   name: staging-redis
   namespace: atlantis
 type: Opaque
@@ -9,6 +11,8 @@ data:
 apiVersion: v1
 kind: Secret
 metadata:
+  annotations:
+    clone: "true"
   name: staging-rabbitmq
   namespace: atlantis
 type: Opaque