diff --git a/policies/oceanbox/kyverno/sync-archmaester-secrets.yaml b/policies/oceanbox/kyverno/sync-archmaester-secrets.yaml deleted file mode 100644 index 2689a3d3..00000000 --- a/policies/oceanbox/kyverno/sync-archmaester-secrets.yaml +++ /dev/null @@ -1,46 +0,0 @@ -apiVersion: kyverno.io/v1 -kind: ClusterPolicy -metadata: - name: sync-prod-archmaester-replication-secrets -spec: - background: true - generateExisting: false - rules: - - name: sync-archmaester-ca - generate: - apiVersion: v1 - kind: Secret - name: prod-archmeister-ca - namespace: '{{ request.object.metadata.namespace }}' - synchronize: true - clone: - namespace: atlantis - name: prod-archmeister-ca - match: - any: - - resources: - kinds: - - Secret - names: - - prod-archmeister-ca - annotations: - kyverno/clone: "true" - - name: sync-archmaester-replication - generate: - apiVersion: v1 - kind: Secret - name: prod-archmeister-replication - namespace: '{{ request.object.metadata.namespace }}' - synchronize: true - clone: - namespace: atlantis - name: prod-archmeister-replication - match: - any: - - resources: - kinds: - - Secret - names: - - prod-archmeister-replication - annotations: - kyverno/clone: "true" diff --git a/policies/oceanbox/kyverno/sync-atlantis-secrets.yaml b/policies/oceanbox/kyverno/sync-atlantis-secrets.yaml index d826ec93..02cc15f6 100644 --- a/policies/oceanbox/kyverno/sync-atlantis-secrets.yaml +++ b/policies/oceanbox/kyverno/sync-atlantis-secrets.yaml @@ -128,3 +128,41 @@ spec: - resources: annotations: vcluster.loft.sh/controlled-by: secret/v1/GenericImport + - name: sync-atlantis-db-ca + generate: + apiVersion: v1 + kind: Secret + name: prod-atlantis-db-ca + namespace: '{{ request.object.metadata.namespace }}' + synchronize: true + clone: + namespace: prod-atlantis + name: prod-atlantis-db-ca + match: + any: + - resources: + kinds: + - Secret + names: + - prod-atlantis-db-ca + annotations: + kyverno/clone: "true" + - name: sync-atlantis-db-replication + generate: + apiVersion: v1 + kind: Secret + name: prod-atlantis-db-replication + namespace: '{{ request.object.metadata.namespace }}' + synchronize: true + clone: + namespace: prod-atlantis + name: prod-atlantis-db-replication + match: + any: + - resources: + kinds: + - Secret + names: + - prod-atlantis-db-replication + annotations: + kyverno/clone: "true"