fix: split secret sync policies to separeate files. autoconfigure rabbitmq connString

2024-02-15 16:05:18 +01:00
parent b0e876d675
commit a164f74fbd
5 changed files with 135 additions and 103 deletions
@@ -0,0 +1,48 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: sync-rabbitmq-secret
+spec:
+  background: true
+  generateExisting: true
+  rules:
+  - name: sync-rabbitmq-secret
+    generate:
+      apiVersion: v1
+      kind: Secret
+      name: '{{ request.object.metadata.name }}'
+      namespace: atlantis
+      synchronize: true
+      clone:
+        name: prod-rabbitmq
+        namespace: rabbitmq
+    match:
+     any:
+     - resources:
+         kinds:
+         - Secret
+         names:
+         - prod-rabbitmq
+         namespaces:
+         - rabbitmq
+  - name: add-rabbitmq-connstring
+    mutate:
+      patchStrategicMerge:
+        stringData:
+          connString: 'amqp://user:{{ request.object.data."rabbitmq-password" | base64_decode(@) }}@{{ request.object.metadata.labels."app.kubernetes.io/instance" }}.rabbitmq.svc'
+    match:
+     any:
+       - resources:
+           kinds:
+           - Secret
+           names:
+           - prod-rabbitmq
+           - staging-rabbitmq
+    exclude:
+     any:
+       - resources:
+           kinds:
+           - Namespace
+           names:
+           - rabbitmq
+  validationFailureAction: audit