2019-09-03 17:10:42 +02:00
|
|
|
# The secrets below are encrypted using keys stored in Cloud KMS and
|
|
|
|
|
# templated in by kontemplate when deploying.
|
|
|
|
|
#
|
|
|
|
|
# Not all of the values are actually secret (see the matching)
|
|
|
|
|
---
|
|
|
|
|
apiVersion: v1
|
2019-09-04 11:34:20 +02:00
|
|
|
kind: Secret
|
|
|
|
|
metadata:
|
|
|
|
|
name: nixery-secrets
|
|
|
|
|
namespace: kube-public
|
|
|
|
|
type: Opaque
|
2019-09-03 17:10:42 +02:00
|
|
|
data:
|
|
|
|
|
gcs-key.json: {{ passLookup "nixery-gcs-json" | b64enc }}
|
|
|
|
|
gcs-key.pem: {{ passLookup "nixery-gcs-pem" | b64enc }}
|
|
|
|
|
id_nixery: {{ passLookup "nixery-ssh-private" | b64enc }}
|
|
|
|
|
id_nixery.pub: {{ insertFile "id_nixery.pub" | b64enc }}
|
|
|
|
|
known_hosts: {{ insertFile "known_hosts" | b64enc }}
|
|
|
|
|
ssh_config: {{ insertFile "ssh_config" | b64enc }}
|
