fix: fix atlantis secrets policies
This commit is contained in:
@@ -25,7 +25,7 @@ spec:
|
||||
- "*-rabbitmq"
|
||||
annotations:
|
||||
kyverno/clone: "true"
|
||||
- name: sync-redis-secret
|
||||
- name: sync-atlantis-secret
|
||||
generate:
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
@@ -33,18 +33,18 @@ spec:
|
||||
namespace: '{{ request.object.metadata.namespace }}'
|
||||
synchronize: true
|
||||
clone:
|
||||
name: staging-redis
|
||||
namespace: redis
|
||||
name: staging-atlantis-env
|
||||
namespace: staging-atlantis
|
||||
match:
|
||||
any:
|
||||
- resources:
|
||||
kinds:
|
||||
- Secret
|
||||
names:
|
||||
- "*-redis"
|
||||
- "*-atlantis-env"
|
||||
annotations:
|
||||
kyverno/clone: "true"
|
||||
- name: sync-archmaester-secret
|
||||
- name: sync-azure-keyvault-secret
|
||||
generate:
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
@@ -52,7 +52,7 @@ spec:
|
||||
namespace: '{{ request.object.metadata.namespace }}'
|
||||
synchronize: true
|
||||
clone:
|
||||
name: prod-archmeister-superuser
|
||||
name: azure-keyvault
|
||||
namespace: atlantis
|
||||
match:
|
||||
any:
|
||||
@@ -60,52 +60,6 @@ spec:
|
||||
kinds:
|
||||
- Secret
|
||||
names:
|
||||
- "*-db-superuser"
|
||||
- azure-keyvault
|
||||
annotations:
|
||||
kyverno/clone: "true"
|
||||
- name: sync-archmaester-replication-secret
|
||||
generate:
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
name: '{{ request.object.metadata.name }}'
|
||||
namespace: '{{ request.object.metadata.namespace }}'
|
||||
synchronize: true
|
||||
clone:
|
||||
name: prod-archmeister-replication
|
||||
namespace: atlantis
|
||||
match:
|
||||
any:
|
||||
- resources:
|
||||
kinds:
|
||||
- Secret
|
||||
names:
|
||||
- prod-archmeister-replication
|
||||
annotations:
|
||||
kyverno/clone: "true"
|
||||
- name: sync-archmaester-ca
|
||||
generate:
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
name: '{{ request.object.metadata.name }}'
|
||||
namespace: '{{ request.object.metadata.namespace }}'
|
||||
synchronize: true
|
||||
clone:
|
||||
name: prod-archmeister-ca
|
||||
namespace: atlantis
|
||||
match:
|
||||
any:
|
||||
- resources:
|
||||
kinds:
|
||||
- Secret
|
||||
names:
|
||||
- prod-archmeister-ca
|
||||
annotations:
|
||||
kyverno/clone: "true"
|
||||
# exclude:
|
||||
# any:
|
||||
# - resources:
|
||||
# kinds:
|
||||
# - Secret
|
||||
# selector:
|
||||
# matchLabels:
|
||||
# generate.kyverno.io/clone-source: ""
|
||||
|
||||
Reference in New Issue
Block a user