search

cloud-native-toolkit / terraform-tools-gitops

Module to create a GitOps repository
6 stars 6 forks source link

gitops-module-global-pullsecret is not capable of editing existing pull secrets #99

Open deleeuwblue opened 2 years ago

deleeuwblue commented 2 years ago

gitops-module-global-pullsecret

I haven't been able to test this module due to some other issues, but I don't think it exactly meets the requirements for my use case. Please could somebody confirm my understanding?

I believe this module will create pull secrets on the OpenShift Cluster. It will locally create and seal secrets, based on the terraform input variables. I think the sealed secrets are then committed to the GitOps repo, and therefore later created on the cluster by ArgoCD. At this point, the Sealed Secret controller should decrypt the sealed secret resources and create the k8s pull secrets.

To deploy my workload, I need to create new pull secrets AND edit the existing global pull secret (pull-secret).

Is it possible for this module to amend existing pull secrets? If not, could it be enhanced to do so?

Thanks

triceam commented 2 years ago

The global pull secret module appends credentials to the cluster at a global level. It does not create new secrets.