1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: external-secrets-secret-accessor
5 namespace: external-secrets
6 annotations:
7 cnrm.cloud.google.com/project-id: ${gcp_project_id}
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: external-secrets-operator
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14 labels:
15 cluster_hash: ${cluster_hash}
16 cluster_uuid: ${cluster_uuid}
17spec:
18 member: serviceAccount:ext-sec-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
19 resourceRef:
20 apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
21 kind: Project
22 external: "projects/${gcp_project_id}"
23 role: roles/secretmanager.secretAccessor
24---
25apiVersion: iam.cnrm.cloud.google.com/v1beta1
26kind: IAMServiceAccount
27metadata:
28 name: external-secrets
29 namespace: external-secrets
30 annotations:
31 cnrm.cloud.google.com/project-id: ${gcp_project_id}
32 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
33 pallet.edge.ncr.com/name: external-secrets-operator
34 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
35 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
36 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
37 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
38 labels:
39 cluster_hash: ${cluster_hash}
40 cluster_uuid: ${cluster_uuid}
41spec:
42 displayName: ${cluster_hash} external-secrets
43 resourceID: ext-sec-${cluster_hash}
44---
45apiVersion: iam.cnrm.cloud.google.com/v1beta1
46kind: IAMServiceAccountKey
47metadata:
48 name: external-secrets-gcp-api-key
49 namespace: external-secrets
50 annotations:
51 cnrm.cloud.google.com/project-id: ${gcp_project_id}
52 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
53 pallet.edge.ncr.com/name: external-secrets-operator
54 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
55 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
56 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
57 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
58 labels:
59 cluster_hash: ${cluster_hash}
60 cluster_uuid: ${cluster_uuid}
61spec:
62 serviceAccountRef:
63 name: external-secrets
64---
65apiVersion: iam.cnrm.cloud.google.com/v1beta1
66kind: IAMServiceAccountKey
67metadata:
68 name: gcp-creds
69 namespace: external-secrets
70 annotations:
71 cnrm.cloud.google.com/project-id: ${gcp_project_id}
72 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
73 pallet.edge.ncr.com/name: external-secrets-operator
74 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
75 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
76 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
77 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
78 labels:
79 cluster_hash: ${cluster_hash}
80 cluster_uuid: ${cluster_uuid}
81spec:
82 serviceAccountRef:
83 name: external-secrets
84---
85apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
86kind: SecretManagerSecret
87metadata:
88 name: external-secrets-${cluster_uuid}-gcp-api-key
89 namespace: external-secrets
90 annotations:
91 cnrm.cloud.google.com/project-id: ${gcp_project_id}
92 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
93 pallet.edge.ncr.com/name: external-secrets-operator
94 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
95 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
96 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
97 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
98 labels:
99 cluster_hash: ${cluster_hash}
100 cluster_uuid: ${cluster_uuid}
101spec:
102 replication:
103 automatic: true
104---
105apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
106kind: SecretManagerSecretVersion
107metadata:
108 name: external-secrets-${cluster_uuid}-gcp-api-key
109 namespace: external-secrets
110 annotations:
111 cnrm.cloud.google.com/project-id: ${gcp_project_id}
112 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
113 pallet.edge.ncr.com/name: external-secrets-operator
114 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
115 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
116 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
117 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
118 labels:
119 cluster_hash: ${cluster_hash}
120 cluster_uuid: ${cluster_uuid}
121spec:
122 secretRef:
123 name: external-secrets-${cluster_uuid}-gcp-api-key
124 enabled: false
125 secretData:
126 valueFrom:
127 secretKeyRef:
128 name: external-secrets-gcp-api-key
129 key: key.json
130---
131apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
132kind: SecretManagerSecretVersion
133metadata:
134 name: external-secrets-${cluster_uuid}-gcp-api-key-2
135 namespace: external-secrets
136 annotations:
137 cnrm.cloud.google.com/project-id: ${gcp_project_id}
138 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
139 pallet.edge.ncr.com/name: external-secrets-operator
140 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
141 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
142 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra'
143 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
144 labels:
145 cluster_hash: ${cluster_hash}
146 cluster_uuid: ${cluster_uuid}
147spec:
148 secretRef:
149 name: external-secrets-${cluster_uuid}-gcp-api-key
150 enabled: true
151 secretData:
152 valueFrom:
153 secretKeyRef:
154 name: gcp-creds
155 key: key.json
View as plain text