bradmccoydev / argo-demo

Argo Demo Repo
Apache License 2.0
1 stars 4 forks source link

Uplift sealed secret generation #2

Open bradmccoydev opened 2 years ago

bradmccoydev commented 2 years ago

Given I need to automate secrets for GitOps When I add a new secret to the secrets folder Then I want the GitHub action to generate and commit it without hardcoding

AC:

.github/workflows/secrets

`kubeseal <secrets/tap-injector-k8s-tls.yaml >kube-infra/kustomize/service-mesh/linkerd/overlays/demo/tap-injector-k8s-tls.yaml --format yaml --controller-namespace security

git add kube-infra/kustomize/dns-infra/external-dns-aws/overlays/demo/aws-dns-creds-sealed.yaml`

bradmccoydev commented 2 years ago

Metadata for folder sub folder in secrets labels: folder: dns-infra subFolder: external-dns-aws environment: demo