adrien/ansible-role-k8s-cert-manager
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix api keys secret generation
Some checks failed
continuous-integration/drone/push Build is failing
Details

Browse source
This commit is contained in:
Adrien Reslinger 2022-06-05 14:18:08 +02:00
parent 7bd2605c1f
commit 514cd5a1da
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
2 changed files with 16 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

17
templates/api-key-secret.yml.j2
View file

@ -1,14 +1,19 @@
{% for i in item.solvers %}
{% if i.solver == "dns01" %}
---
apiVersion: v1
kind: Secret
metadata:
name: "{{ item.dns_provider }}-api-key"
name: "{{ i.dns_provider }}-api-key"
type: Opaque
data:
{% if item.dns_provider == "cloudflare" %}
api-key: "{{ item.cloudflare_api_key | b64encode }}"
{% elif item.dns_provider == "route53" %}
{% if i.dns_provider == "cloudflare" %}
api-key: "{{ i.cloudflare_api_key | b64encode }}"
{% elif i.dns_provider == "route53" %}
secret-access-key: "{{ lookup('hashi_vault', 'secret=clusters/route53:secret-access-key') | b64encode }}"
{% elif item.dns_provider == "ovh" %}
applicationSecret: "{{ item.applicationSecret | b64encode }}"
{% elif i.dns_provider == "ovh" %}
applicationSecret: "{{ i.applicationSecret | b64encode }}"
{% endif %}
{% endif %}
{% endfor %}