hypershift/values-secret.yaml.template at main · validatedpatterns-sandbox/hypershift · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# A more formal description of this format can be found here:
# https://github.com/hybrid-cloud-patterns/common/tree/main/ansible/roles/vault_utils#values-secret-file-format

version: "2.0"
# Ideally you NEVER COMMIT THESE VALUES TO GIT (although if all passwords are
# automatically generated inside the vault this should not really matter)

secrets:
  - name: aws
    fields:
    - name: AWS_ACCESS_KEY_ID
      ini_file: ~/.aws/credentials
      ini_section: default
      ini_key: aws_access_key_id
    - name: AWS_SECRET_ACCESS_KEY
      ini_file: ~/.aws/credentials
      ini_key: aws_secret_access_key
  - name: awsCreds
    fields:
    - name: credentials
      path: ~/.aws/credentials

  - name: hypershift-iam
    vaultPrefixes:
    - hub
    fields:
    - name: role-arn
      value: "arn:aws:iam:accNumber::role/hypershift_cli_role"

#  Begin groupsync/oauth config
#  - name: oauthCreds
#    fields:
#    - name: content
#      path: ~/.oauth
#  - name: githubGroupSync
#    fields:
#    - name: appId
#      value: "gh-app-appId"
#    - name: installationId
#      value: "gh-app-installationID"
#    - name: privateKey
#      path: ~/.github-group-sync.pem
#
#  End groupsync/oauth config
  #- name: publickey
  #  fields:
  #  - name: content
  #    path: ~/.ssh/id_rsa.pub
  #- name: privatekey
  #  fields:
  #  - name: content
  #    path: ~/.ssh/id_rsa
  #- name: openshiftPullSecret
  #  fields:
  #  - name: content
  #    path: ~/.pullsecret.json

# Examples:
# ~/.oauth
# 123456789abcdefghijklmnop123456789abcdef