-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Understand the Task
Description
In order to consume secrets (image pull secrets, git secrets, Kubernetes cluster secrets) we need to deploy the external secrets operator before the openmcp-operator is being deployed.
Therefore the suggestion is to add a new command deploy-eso
which would deploy the external secrets operator.
The external secrets operator would receive temporary image pull secrets to get the initial deployment up and running. After being deployed it would then manage also its own image pull secrets.
The scope of this task is to only deploy the external secrets operator. It is out of scope to configure the external secrets operator with any secrets source etc.
The external secrets operator shall be deployed with its helm chart using the already deployed FluxCD controllers.
Any further valuable resources.
No response
What is required to accept the Task as done.
Done Criteria
- The openmcp bootstrapper has a
deploy-eso
command - The
deploy-eso
command accepts a initial set of image pull secrets - The
deploy-eso
command can then deploy the external secrets operator with the already deployed FluxCD