feat: add more secrets, add cluster-monitoring to some namespaces, re…

…fined which prow jobs are required for b4mad/.github repo Signed-off-by: Christoph Görn <[email protected]>
goern · Nov 3, 2023 · 086cd37 · 086cd37
1 parent c81c7ac
commit 086cd37
Show file tree

Hide file tree

Showing 7 changed files with 131 additions and 0 deletions.
diff --git a/manifests/applications/alertmanager-github-receiver/namespace.yaml b/manifests/applications/alertmanager-github-receiver/namespace.yaml
@@ -3,6 +3,7 @@ kind: Namespace
 metadata:
   annotations:
     openshift.io/display-name: "Operate First's Alertmanager"
+    openshift.io/cluster-monitoring: "true"
   creationTimestamp: null
   labels:
     argocd.argoproj.io/managed-by: openshift-gitops

diff --git a/manifests/applications/peribolos/namespace.yaml b/manifests/applications/peribolos/namespace.yaml
@@ -3,6 +3,7 @@ kind: Namespace
 metadata:
   annotations:
     openshift.io/display-name: "Operate First's Peribolos-as-a-Service"
+    openshift.io/cluster-monitoring: "true"
   creationTimestamp: null
   labels:
     argocd.argoproj.io/managed-by: openshift-gitops

diff --git a/manifests/applications/pipelines/namespaces.yaml b/manifests/applications/pipelines/namespaces.yaml
@@ -4,6 +4,7 @@ kind: Namespace
 metadata:
   annotations:
     openshift.io/display-name: "Operate First's Pipelines"
+    openshift.io/cluster-monitoring: "true"
   labels:
     argocd.argoproj.io/managed-by: openshift-gitops
   name: op1st-pipelines
diff --git a/manifests/applications/prow/config.yaml b/manifests/applications/prow/config.yaml
@@ -225,6 +225,13 @@ tide:
     from-branch-protection: true
     skip-unknown-contexts: true
     orgs:
+      b4mad:
+        repos:
+          .github:
+            required_status_checks:
+              contexts:
+                - op1st/prow/peribolos
+                - op1st/prow/pre-commit
       operate-first:
         repos:
           peribolos-as-a-service:

diff --git a/manifests/applications/prow/namespaces.yaml b/manifests/applications/prow/namespaces.yaml
@@ -5,6 +5,7 @@ metadata:
   annotations:
     openshift.io/display-name: "Operate First's Prow"
     openshift.io/requester: goern
+    openshift.io/cluster-monitoring: "true"
   labels:
     argocd.argoproj.io/managed-by: openshift-gitops
   name: op1st-prow
@@ -15,6 +16,7 @@ metadata:
   annotations:
     openshift.io/display-name: "Operate First's Prow"
     openshift.io/requester: goern
+    openshift.io/cluster-monitoring: "true"
   labels:
     argocd.argoproj.io/managed-by: openshift-gitops
   name: op1st-prow-test-pods
diff --git a/secrets/cloudflare-b4mad-net-dns01-solver.yaml b/secrets/cloudflare-b4mad-net-dns01-solver.yaml
@@ -0,0 +1,59 @@
+apiVersion: v1
+data:
+    api-token: ENC[AES256_GCM,data:EmgBg2HqMGp38Y8KkrHz9urTKghY1Mah0y8ef4XHuWCvloOxFifiVndzKGsy65iPerkztpdc0/Q=,iv:Ki8zt41LzeAo+AkjrlXqypDW88ouHisJRgGFfvmDMNk=,tag:lHWt8wD39tK+goasGSCQSw==,type:str]
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: cloudflare-b4mad-net-dns01-solver
+    namespace: cert-manager
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-30T16:00:17Z"
+    mac: ENC[AES256_GCM,data:9YhsTSTNRd7wkmNKCFg+uhDIkdga1aMAxEiT2bKlSglItfpe7c4GNQP1pIsbq/cFx+/4IELMY3a13CejbK4ZHhk6BjmxA463fWvUPFjvoHgqamsuYbBbADhRL0otfAlFp13/EFb4Z4isAvQrgS0O2+dL2CCDbu3HM8+IT72WFJc=,iv:Z55ccdVYyr3nO/av0QIrqDacLSGQZH5fR11C077d6oM=,tag:gLkfpar0QNXOerwUtoQ0Ig==,type:str]
+    pgp:
+        - created_at: "2023-10-30T16:00:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA+XrDaMvM3KsAQ//SAzpZgW+dj8iu51gaHUsUCTEyLtfiG0oS37IYBkRv84t
+            uH0AzKJreyg7AdgXsCADoYzjGb+Uf8McRltOkJnZKeLc4+slGguyVEiKOHu/5BOQ
+            2+WcIO8YKkaEyCh0ku954oJqWv43h8VAyCHiqU62AAl+ft1KNvBOmq+rILd/xAC5
+            2chTqk43KRfVMM53VelbMzChFnDiixhoQd2c/t3nnAqAzXqQiCv1+/xVS/kxqvYV
+            ZkWg94zWGahxaQO/wLZvSsvPVVZh00s3lS4q6B8+mC7w1wEeqEo6ucSjx0WcH7tX
+            S0VXV/hfU4YOJtcpVlf4mp9luoD3fctaToax/sZD9J1t3HQtuXetk83nxN4gbXW4
+            W4nGm3JtxBk6dj3tVXr/n24gf7K7MIjuGJsLclHIfUFYYbYpBM1JkmWpwr6u9yBp
+            HlpGtpBs4h0mp8ABQ4D4ihMVYe0yAjJF8AR5mrNjOs3wV1ixGY87gvKaDL/RyOR6
+            Z7jhiAkeqLyzdJmOkmmbn3Y/q+X38lgjaPwaYW4DA4U9fm6qIYbfI0U+TbT4W1TW
+            C8eyAQwEnIMQPS7a5ZZHlhazBi4Gpqw/BbSEZIIXl9VKbjq7iuBpOulco5bECJqP
+            JCBCaqqK2GMLOgekgcMnOUxSqfU1wR77nVZ1sWtZLb+lo3YshSvLRXG7XlDsPLjS
+            XgGzdLM59P5fUw5cTjojYCwSi/HKvMB8vgz+7vwYmF9RV/mQqkJZ4gWNwrieTQfS
+            otoqscBNU4fwD5eR/Vsq4xHFrTKPP6Mbr1sN+RK1AbbyG0gK/jiCtt213LNVhr4=
+            =Pgnx
+            -----END PGP MESSAGE-----
+          fp: 04DAFCD9470A962A2F272984E5EB0DA32F3372AC
+        - created_at: "2023-10-30T16:00:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwSHi8yuDIZWAQ//bKhQ3Oywzm34CdBhrrAFGQUztWpZ3v6/KkDRwqEItF7T
+            sF7s5/Xxs8P8uH9vPAmMkkiuAwCF3k55YEgtwxMwZPtW2hAzJt5/l/ZagkTKFKyB
+            pTuvGmxSapMRMfIYTOzmHYjE9M0rLp6whvUjLqrpghdeq7+LvNRv5KcDhugLyj7i
+            SwltzAhdpDYQBvG0m42DNPVG6Z6HG1e+1QSGqfS74FDfTVsJtxJPCq5/pjAXsyId
+            NFyoJIpY0czCcJmGEDCznE3IU3K6srTI6oPMhnn5/SqqKH+lHSuVHpH1n5RCvplo
+            yZ78ZOULWwPo7+Klg1p2SMZ1DJ1Z9MEBE1f+DKoNJkFdlmLcb8lqsjKw0jnvg6jU
+            BKwjI5oGjDthscNgKdVSONxfOZSBAi76rSSFv+rC376t4JbQlbdejfa9TFqOGqdZ
+            J19FpV4N9DBXjDxTgXIw9dGdjVa/AEBESL8TWVD92ned+XuNnglxAOBPfW/QtJgh
+            GC1XHFbpH7YO5qLOBhI/ZDZoapl/oI4LBlfny3qV0M/N7Kf9PitWz7XtJwK8Y1uu
+            R3F9ILj9Z8GauPMby/LHXEmT3Q7t5LkgYmiajoEWJ4sLO4uC+qFLJCuAmV1Mek4C
+            7b3lg/Bao0+PsIpalZ0sMchmZfe17foUGR9AJMzcjdNyFuFlX/9+mIgpEM3wPf3S
+            XgG0RNbfuygVJqZef4ndKDi5qXgS79aL9Xyzg0uYU53SCssEs+Uifh78WHZLijpH
+            pgm+yWRorJexnFAFfPc77cglU8edtrNW+rvRTdYgWGBFHS0ffK9sHBSMKkkYrrY=
+            =Xwre
+            -----END PGP MESSAGE-----
+          fp: 8A07D816280A983BBC35E85C280DB66A3E8C012E
+    encrypted_regex: ^(data|stringData|tls)$
+    version: 3.8.0-rc.1
diff --git a/secrets/thorsdottir.yaml b/secrets/thorsdottir.yaml
@@ -0,0 +1,60 @@
+apiVersion: v1
+data:
+    ssh-privatekey: ENC[AES256_GCM,data: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,iv:peo72EL15SaCGme5DayfUvijvwzs9iK/O1rwDkDBqE0=,tag:n/dWRxQoo7adohTZJ3GL7Q==,type:str]
+    ssh-publickey: ENC[AES256_GCM,data:0qTNVFVFEKJnBab1akQ2eGEHrtaSK2le8vXRDhTQEjrY7F0hH4lHTT36L4vFqPuvYgPBFhZpvS7oN8l/KkQIEZPd5WT9gyMAUA7uDTNl1AG9TxvIWc8l9EWMmm+oFUm5WQP8jlukWtOfZtIgpOrccnzebLH30iSvneLnaePUEAo47nHxSZYiB63Jgs0=,iv:vgd0q1vz8+ffdUOMs4AMTOBQR1z/ZUIWgujCg8iT50g=,tag:cbK/4raFeghQV38DNed+YA==,type:str]
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: thorsdottir
+    namespace: default
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-11-01T20:32:18Z"
+    mac: ENC[AES256_GCM,data:Q0HGWMyy3jS5ZIOG0ioEr+UpEKyLrfZWvF3ZHym2HVIzQli0lkK7SUupS+9tPivihdskEKCGFGGfJSY/Wlkd0posvcqPLWVT6KITKubtkcc/TCr15juKbLGDMMZDuzj9mPFvt4kVPNIXo0OkpClra4PYPiUD0nBLGcXlJnM20HA=,iv:57jMPW2+8RkRfHqTCwBllFyM4QfFApCC9A1IfvtB/Eg=,tag:IKEpUuPgnPBRw1ACMJAN2A==,type:str]
+    pgp:
+        - created_at: "2023-11-01T20:32:18Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA+XrDaMvM3KsAQ//dgHhcNoJM6rJ267P5dLtyIK21wU5ZuH+te6iZ0vrWtt8
+            wLOAtlH+h7U0DeCa2fcFH2qHgnOdMXvGEsSdnbXi/ucCYJLdG/Mypf8w4kVxo81P
+            ovEEPNtsgAtfG93tcophuxB7ctd0KFnYUGI8xHdtp7lizEymstu/hAHcEkCNFGsW
+            tRhGZOiyiE8qOXz7xiOj1jNrVABsBihf0wrhNc8/8PqgC4CI1B9H6kZ1oI0E7xib
+            OIKr+1r9Yy8fccEigM0Nxc1vg98ePa/7WjQy7+rxLPuFM5z56dVHnPqSPxCIGbG1
+            SRJfmMLvcXPJ/th6lwFONoPEs1Ld1eaXAOGtRwHPTbQF9P6ZIG8eGKV5CY+mfXYf
+            7KUpSAwqoIIlTzX+sKC2ay2PwjnonnGV8zSznaNmOmO39UySB384Ml8EAqsKuL42
+            TolmEKzznIbn3IjSbdw9l4CRXE+kv0AS6OJQhhEbuYZuckFB8PhKQMy22lw/cJBd
+            +N+uUlew1uNAlKbmhq+YOthdCAoqbClqTYGq7KXHJZA0TXvcllQJM2AulRXBCfQj
+            hERcfq8ORCLMqzZ3zR5iFmyxbsSqVm5X1t1ea3pauRAnuFwBYrMtOHyguNGPMOO/
+            hFYntZabTnXhUkaK1UYo8KbIRS/P76A+UZ6cEQ3uECqIjKrBdIoGpcb8wRhdVx7S
+            XgFAopuUFpfDN5rGwa6KomjLU58fNuMFGy2RyJyt7SCv9zsCl1Y7BbPtbn0Y+eNA
+            4tqJ70PCahqyNvvkp3+expdh0VD9WDj1i2gx8wRwXalmkGGOIfD8614eYNTArkg=
+            =DYaM
+            -----END PGP MESSAGE-----
+          fp: 04DAFCD9470A962A2F272984E5EB0DA32F3372AC
+        - created_at: "2023-11-01T20:32:18Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwSHi8yuDIZWAQ/9HDFD8roe61HAw7vMHXBgGQ9HJVEaSV/wXNpUyClL+8aQ
+            m6kb8eBVAaPVJ7R7na+qInftdY8j5Q/2cCVFbzUa5+n+qKpLi3w6lTVKhS0JIzzh
+            4wbbLK/6B5BXfh/0haXfmsW2Dnr/D9xg+e1+nmT8F5IFQKTbAnpopHL/rDBfx0rk
+            gW2JAq31f7QJgdr/oE1mUxIzy33QZdC8ZVmI1JlUQKwRCzCW3VOB1sh/tKegIPQ+
+            fwOp1cBYoDzgwoEyzpKDdFUHdI9avW8IX6Vx+Xq2zw8poFjyNP/P9xihH7tphpvO
+            o1Nb6BRLM2isXOT6TynGogE2iD5ztrwlYiXR7FdkIL121D6WwzmrpWZY+xpkOzvt
+            eKJLZmm7f3rOaW7emODpluVS8tW9Dpvf2VPNYt6LwGG3qJfNiB16SlPlr/OFio+O
+            xj5pQLUrAEZLG49kSFZMrEiOMUGwROKUHjV3NzVD1rRihPPMLSD6xWX35A8O23KF
+            iBzIjG5VD2TWyfkGivlJE/OcAsp3XZWdDpxHa+aEqV6+1nHSHmZtzHLgL9+Gjqh5
+            /QWbmaW6mkKAYlqMnNDg6Ih1Ls0CxviDVYSpE63MV5/mKaa/7KXYTgLwyOhx1r6o
+            0RfJrTTlOfeY5W2CLD4qroFZgFzzAYnMJsrkkHn76CJR5EDhoceMH5ZtkmR+64PS
+            XgFEpXE9QpNVevyaV+ZrXzXWAnjfcZ9556ta3BKn8qtls3kW51nGwawAiT9zfQ67
+            G1Hdj7um3j9YlQiakVTaHgaoFZSl2JuvFc7zcidVL+7X4x5/7S608hxzuRxMZn0=
+            =24wC
+            -----END PGP MESSAGE-----
+          fp: 8A07D816280A983BBC35E85C280DB66A3E8C012E
+    encrypted_regex: ^(data|stringData|tls)$
+    version: 3.8.0-rc.1