Merge branch 'nixidy' of gitlab.com:oceanbox/manifests into nixidy

2024-11-21 09:56:51 +01:00
parent e8e652039c c75378a0e3
commit e6788bbc41
2 changed files with 53 additions and 55 deletions
@@ -0,0 +1,46 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: sync-prod-archmaester-replication-secrets
+spec:
+  background: true
+  generateExisting: false
+  rules:
+  - name: sync-archmaester-ca
+    generate:
+      apiVersion: v1
+      kind: Secret
+      name: prod-archmeister-ca
+      namespace: '{{ request.object.metadata.namespace }}'
+      synchronize: true
+      clone:
+        namespace: atlantis
+        name: prod-archmeister-ca
+    match:
+     any:
+     - resources:
+         kinds:
+         - Secret
+         names:
+         - prod-archmeister-ca
+         annotations:
+           kyverno/clone: "true"
+  - name: sync-archmaester-replication
+    generate:
+      apiVersion: v1
+      kind: Secret
+      name: prod-archmeister-replication
+      namespace: '{{ request.object.metadata.namespace }}'
+      synchronize: true
+      clone:
+        namespace: atlantis
+        name: prod-archmeister-replication
+    match:
+     any:
+     - resources:
+         kinds:
+         - Secret
+         names:
+         - prod-archmeister-replication
+         annotations:
+           kyverno/clone: "true"