fix: split secret sync policies to separeate files. autoconfigure rabbitmq connString

2024-02-15 16:05:18 +01:00
parent b0e876d675
commit a164f74fbd
5 changed files with 135 additions and 103 deletions
@@ -0,0 +1,41 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: sync-prod-archmeister-replication-secrets
+spec:
+  background: true
+  generateExisting: true
+  rules:
+  - name: sync-archmeister-ca
+    generate:
+      apiVersion: v1
+      kind: Secret
+      name: prod-archmeister-ca
+      namespace: '{{request.object.metadata.name}}'
+      synchronize: true
+      clone:
+        namespace: atlantis
+        name: prod-archmeister-ca
+    match:
+      resources:
+        kinds:
+        - Namespace
+        names:
+        - '*-vcluster'
+  - name: sync-archmeister-replication
+    generate:
+      apiVersion: v1
+      kind: Secret
+      name: prod-archmeister-replication
+      namespace: '{{request.object.metadata.name}}'
+      synchronize: true
+      clone:
+        namespace: atlantis
+        name: prod-archmeister-replication
+    match:
+      resources:
+        kinds:
+        - Namespace
+        names:
+        - '*-vcluster'
+  validationFailureAction: audit