fix: fix preprod wankery

policies/oceanbox/kyverno/sync-atlantis-secrets.yaml

@@ -38,8 +38,8 @@ spec:
       namespace: '{{ request.object.metadata.namespace }}'
       synchronize: true
       clone:
-        name: staging-atlantis-env
+        name: prod-atlantis-env
-        namespace: staging-atlantis
+        namespace: prod-atlantis
     match:
      any:
      - resources:
@@ -63,7 +63,7 @@ spec:
       synchronize: true
       clone:
         name: azure-keyvault
-        namespace: atlantis
+        namespace: prod-atlantis
     match:
      any:
      - resources:
@@ -87,7 +87,7 @@ spec:
       synchronize: true
       clone:
         name: dapr-api-token
-        namespace: staging-atlantis
+        namespace: prod-atlantis
     match:
      any:
      - resources:

values/atlantis/prod/appsettings.json

@@ -46,7 +46,7 @@
             "roles": [ "admin" ]
         }
     ],
-    "redis": "prod-atlantis-redis-master:6379",
+    "redis": "preprod-atlantis-redis-master:6379",
     "objectStore": "https://atlantis.blob.core.windows.net",
     "connString": "Username=postgres;Password=secret;Host=localhost;Port=5432;Database=app;Pooling=true;",
     "sorcerer" : "https://sorcerer.ekman.oceanbox.io",

values/atlantis/prod/bindings.yaml

@@ -8,10 +8,10 @@ spec:
   metadata:
   - name: host
     secretKeyRef:
-      name: prod-atlantis-rabbitmq
+      name: preprod-atlantis-rabbitmq
       key:  connString
   - name: queueName
-    value: rc-slurm-job-events
+    value: preprod-slurm-job-events
   - name: durable
     value: true
   - name: contentType

values/atlantis/prod/configurations.yaml

@@ -7,12 +7,12 @@ spec:
   version: v1
   metadata:
   - name: redisHost
-    value: prod-atlantis-redis-master:6379
+    value: preprod-atlantis-redis-master:6379
   - name: redisUsername
     value: default
   - name: redisPassword
     secretKeyRef:
-      name: prod-atlantis-redis
+      name: preprod-atlantis-redis
       key:  redis-password
   - name: redisDB
     value: "1"

values/atlantis/prod/kustomization.yaml

@@ -13,7 +13,6 @@ patches:
 resources:
   - ../base
   - rbac.yaml
-  - secrets.yaml
   - tracing.yaml
   - bindings.yaml
   - pubsub.yaml

values/atlantis/prod/pubsub.yaml

@@ -7,12 +7,12 @@ spec:
   type: pubsub.rabbitmq
   metadata:
   - name: hostname
-    value: prod-rabbitmq.rabbitmq
+    value: preprod-rabbitmq.rabbitmq
   - name: username
     value: user
   - name: password
     secretKeyRef:
-      name: prod-atlantis-rabbitmq
+      name: preprod-atlantis-rabbitmq
       key:  rabbitmq-password
   - name: protocol
     value: amqp

values/atlantis/prod/rbac.yaml

@@ -1,7 +1,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: prod-atlantis
+  name: preprod-atlantis
   namespace: prod-atlantis
 rules:
 - apiGroups:
@@ -17,7 +17,7 @@ rules:
   - ""
   resourceNames:
   - azure-keyvault
-  - prod-atlantis-redis
+  - preprod-atlantis-redis
   resources:
   - secrets
   verbs:
@@ -27,13 +27,13 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: prod-atlantis
+  name: preprod-atlantis
   namespace: prod-atlantis
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: prod-atlantis
+  name: preprod-atlantis
 subjects:
 - kind: ServiceAccount
-  name: prod-atlantis
+  name: preprod-atlantis
   namespace: prod-atlantis

values/atlantis/prod/secrets.yaml

@@ -1,17 +0,0 @@
-# apiVersion: v1
-# kind: Secret
-# metadata:
-#   annotations:
-#     kyverno/clone: "true"
-#   name: prod-atlantis-env
-# type: Opaque
-# data:
----
-apiVersion: v1
-kind: Secret
-metadata:
-  annotations:
-    kyverno/clone: "true"
-  name: azure-keyvault
-type: Opaque
-data:

values/atlantis/prod/statestore.yaml

@@ -7,12 +7,12 @@ spec:
   version: v1
   metadata:
   - name: redisHost
-    value: prod-atlantis-redis-master:6379
+    value: preprod-atlantis-redis-master:6379
   - name: redisUsername
     value: default
   - name: redisPassword
     secretKeyRef:
-      name: prod-atlantis-redis
+      name: preprod-atlantis-redis
       key:  redis-password
   - name: actorStateStore
     value: "true"

values/atlantis/staging/secrets.yaml

@@ -1,11 +1,11 @@
-# apiVersion: v1
+apiVersion: v1
-# kind: Secret
+kind: Secret
-# metadata:
+metadata:
-#   annotations:
+  annotations:
-#     kyverno/clone: "true"
+    kyverno/clone: "true"
-#   name: staging-atlantis-env
+  name: staging-atlantis-env
-# type: Opaque
+type: Opaque
-# data:
+data:
 ---
 apiVersion: v1
 kind: Secret
@@ -15,3 +15,13 @@ metadata:
   name: azure-keyvault
 type: Opaque
 data:
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  annotations:
+    kyverno/clone: "true"
+  name: dapr-api-token
+type: Opaque
+data:
+

values/atlantis/values-prod.yaml

@@ -18,21 +18,21 @@ env:
   - name: REDIS_PASSWORD
     valueFrom:
       secretKeyRef:
-        name: prod-atlantis-redis
+        name: preprod-atlantis-redis
         key: redis-password
   - name: DB_HOST
-    value: prod-atlantis-db-rw
+    value: preprod-atlantis-db-rw
   - name: DB_PORT
     value: "5432"
   - name: DB_USER
     valueFrom:
       secretKeyRef:
-        name: prod-atlantis-db-superuser
+        name: preprod-atlantis-db-superuser
         key: username
   - name: DB_PASSWORD
     valueFrom:
       secretKeyRef:
-        name: prod-atlantis-db-superuser
+        name: preprod-atlantis-db-superuser
         key: password
   - name: DAPR_API_TOKEN
     valueFrom: