Merge pull request #998 from lsst-it/IT-6361/dev-rotate-lsstcam-s3-creds

(ruka) add cephbuckettopic CRs

Author: jhoblitt

fleet/lib/rook-ceph-conf/charts/ruka/templates/cephbuckettopic-lsst.s3.raw.comcam.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephBucketTopic
+metadata:
+  name: lsst.s3.raw.comcam
+  namespace: rook-ceph
+spec:
+  objectStoreName: lfa
+  objectStoreNamespace: rook-ceph
+  persistent: false
+  endpoint:
+    kafka:
+      uri: kafka://sasquatch-base-kafka-bootstrap.lsst.codes:9094
+      ackLevel: broker
+      useSSL: true
+      mechanism: SCRAM-SHA-512
+      userSecretRef:
+        name: &item kafka-bucket-notifications
+        key: username
+      passwordSecretRef:
+        name: *item
+        key: password

fleet/lib/rook-ceph-conf/charts/ruka/templates/cephbuckettopic-lsst.s3.raw.latiss.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephBucketTopic
+metadata:
+  name: lsst.s3.raw.latiss
+  namespace: rook-ceph
+spec:
+  objectStoreName: lfa
+  objectStoreNamespace: rook-ceph
+  persistent: false
+  endpoint:
+    kafka:
+      uri: kafka://sasquatch-base-kafka-bootstrap.lsst.codes:9094
+      ackLevel: broker
+      useSSL: true
+      mechanism: SCRAM-SHA-512
+      userSecretRef:
+        name: &item kafka-bucket-notifications
+        key: username
+      passwordSecretRef:
+        name: *item
+        key: password

fleet/lib/rook-ceph-conf/charts/ruka/templates/cephbuckettopic-lsst.s3.raw.lsstcam.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephBucketTopic
+metadata:
+  name: lsst.s3.raw.lsstcam
+  namespace: rook-ceph
+spec:
+  objectStoreName: lfa
+  objectStoreNamespace: rook-ceph
+  persistent: false
+  endpoint:
+    kafka:
+      uri: kafka://sasquatch-base-kafka-bootstrap.lsst.codes:9094
+      ackLevel: broker
+      useSSL: true
+      mechanism: SCRAM-SHA-512
+      userSecretRef:
+        name: &item kafka-bucket-notifications
+        key: username
+      passwordSecretRef:
+        name: *item
+        key: password

fleet/lib/rook-ceph-conf/charts/ruka/templates/externalsecrets-kafka-bucket-notifications.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: kafka-bucket-notifications
+  namespace: rook-ceph
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword
+  data:
+    - secretKey: username
+      remoteRef:
+        key: &item kafka-bucket-notifications
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: *item
+        property: password