299b2833b2
This pins krm function calls to version `v2` which represents [0] [1] the latest 2.x.x semantic version. If we need to make breaking changes to any krm functions, that can now be done by incrementing their major version and thus not breaking these references. [0]: https://review.opendev.org/c/airship/airshipctl/+/762924 [1]: https://review.opendev.org/c/airship/airshipctl/+/780875 Closes: #419 Change-Id: I6cf6519511c77da6cac7e46a6b56ea338bcf150c
73 lines
1.9 KiB
YAML
73 lines
1.9 KiB
YAML
apiVersion: airshipit.org/v1alpha1
|
|
kind: ReplacementTransformer
|
|
metadata:
|
|
name: generated-secrets-replacements
|
|
annotations:
|
|
config.kubernetes.io/function: |-
|
|
container:
|
|
image: quay.io/airshipit/replacement-transformer:v2
|
|
replacements:
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.isoImage.passwords.root}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_ROOT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.isoImage.passwords.deployer}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_ISO_PASSWORD_DEPLOYER%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralClusterCa.key}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_CA_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralClusterCa.crt}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_CA_CERT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.certificate-authority-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_CA_CERT%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-key-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_KEY%"]
|
|
- source:
|
|
objref:
|
|
name: generated-secrets
|
|
fieldref: "{.ephemeralKubeconfig.client-certificate-data}"
|
|
target:
|
|
objref:
|
|
kind: Secret
|
|
name: ephemeral-bmc-secret
|
|
fieldrefs: ["stringData.userData%REPLACEMENT_CP_KUBECONFIG_ADMIN_CERT%"]
|