Merge pull request #7914 from upodroid/ibm-secrets-patch

fix ibm build cluster secrets

Author: k8s-ci-robot

kubernetes/apps/kyverno.yaml

@@ -34,3 +34,4 @@ spec:
           selfHeal: true
         syncOptions:
           - CreateNamespace=true
+          - Replace=true

kubernetes/ibm-ppc64le/helm/external-secrets.yaml

@@ -7,6 +7,32 @@ extraObjects:
       provider:
         gcpsm:
           projectID: k8s-infra-prow-build
+  - apiVersion: external-secrets.io/v1beta1
+    kind: ClusterSecretStore
+    metadata:
+      name: secretstore-ibm-k8s
+    spec:
+      provider:
+        ibm:
+          serviceUrl: "https://3297fd32-6322-45e2-af3f-00b1a5af3565.us-south.secrets-manager.appdomain.cloud"
+          auth:
+            secretRef:
+              secretApiKeySecretRef:
+                name: ibm-sm-apikey
+                key: API_KEY
+                namespace: external-secrets
+  - apiVersion: external-secrets.io/v1beta1
+    kind: ExternalSecret
+    metadata:
+      name: ibm-sm-apikey
+    spec:
+      data:
+        - remoteRef:
+            key: ibm-sm-apikey
+          secretKey: API_KEY
+      secretStoreRef:
+        kind: ClusterSecretStore
+        name: k8s-infra-prow-build
   - apiVersion: v1
     kind: ConfigMap
     metadata:

kubernetes/ibm-ppc64le/helm/kyverno.yaml

@@ -18,3 +18,39 @@ stringData:
         }
       }
     }
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: k8s-infra-ibmcloud-iam
+  namespace: test-pods
+spec:
+  refreshInterval: 60m
+  secretStoreRef:
+    name: secretstore-ibm-k8s
+    kind: ClusterSecretStore
+  target:
+    name: k8s-infra-ibmcloud-iam
+    creationPolicy: Owner
+  data:
+    - secretKey: key
+      remoteRef:
+        key: iam_credentials/c4c5e90a-408d-69de-38b2-0d56d58d29db
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: k8s-infra-ssh-key
+  namespace: test-pods
+spec:
+  refreshInterval: 60m
+  secretStoreRef:
+    name: secretstore-ibm-k8s
+    kind: ClusterSecretStore
+  target:
+    name: k8s-infra-ssh-key
+    creationPolicy: Owner
+  data:
+    - secretKey: ssh-privatekey
+      remoteRef:
+        key: 72d8039f-6cfc-1bbf-ba8e-d85985b42ee0