ansible-role-k8s-cert-manager/templates/api-key-secret.yml.j2
Adrien Reslinger 514cd5a1da
Some checks failed
continuous-integration/drone/push Build is failing
Fix api keys secret generation
2022-06-05 14:18:08 +02:00

19 lines
530 B
Django/Jinja

{% for i in item.solvers %}
{% if i.solver == "dns01" %}
---
apiVersion: v1
kind: Secret
metadata:
name: "{{ i.dns_provider }}-api-key"
type: Opaque
data:
{% if i.dns_provider == "cloudflare" %}
api-key: "{{ i.cloudflare_api_key | b64encode }}"
{% elif i.dns_provider == "route53" %}
secret-access-key: "{{ lookup('hashi_vault', 'secret=clusters/route53:secret-access-key') | b64encode }}"
{% elif i.dns_provider == "ovh" %}
applicationSecret: "{{ i.applicationSecret | b64encode }}"
{% endif %}
{% endif %}
{% endfor %}