refactor: refactor and gitopify

2024-02-05 21:04:53 +01:00
parent 1bff28ab6c
commit 10a06fd058
21 changed files with 249 additions and 268 deletions
@@ -0,0 +1,12 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-loft-analytics
+  namespace: atlantis
+spec:
+  egress:
+  - toFQDNs:
+    - matchName: analytics.loft.rocks
+  endpointSelector:
+    matchLabels:
+      app: vcluster
@@ -0,0 +1,46 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: sync-atlantis-secrets
+spec:
+  background: true
+  generateExistingOnPolicyUpdate: true
+  rules:
+  - name: sync-redis-secrets
+    generate:
+      apiVersion: v1
+      namespace: atlantis
+      synchronize: true
+      cloneList:
+        namespace: redis
+        kinds:
+          - Secret
+        selector:
+          matchLabels:
+            app.kubernetes.io/name: redis
+    match:
+      resources:
+        kinds:
+        - Namespace
+        names:
+        - atlantis
+  - name: sync-rabbitmq-secrets
+    generate:
+      apiVersion: v1
+      namespace: atlantis
+      synchronize: true
+      cloneList:
+        namespace: rabbitmq
+        kinds:
+          - Secret
+        selector:
+          matchLabels:
+            clone: "true"
+    match:
+      resources:
+        kinds:
+        - Namespace
+        names:
+        - atlantis
+  validationFailureAction: audit
+