Skip to content

Commit

Permalink
Add eso image pull secrets terraform transformer
Browse files Browse the repository at this point in the history
  • Loading branch information
kajogo777 committed Dec 29, 2024
1 parent a76a824 commit 2174e1f
Showing 1 changed file with 73 additions and 0 deletions.
73 changes: 73 additions & 0 deletions k8s/services/eso/transformers/terraform/k8s/transformers.cue
Original file line number Diff line number Diff line change
Expand Up @@ -112,3 +112,76 @@ import (
}
}
}

#AddImagePullSecret: v1.#Transformer & {
traits.#ImagePullSecret
$metadata: _
secret: _

k8s: {
namespace: string
...
}
externalSecret: {
refreshInterval: *"1h" | string
}

$resources: terraform: schema.#Terraform & {
if secret.provider == "aws" {
resource: kubernetes_manifest: {
"\($metadata.id)_authorization_token": {
manifest: resources.#ECRAuthorizationToken & {
metadata: {
name: "\($metadata.id)-authorization-token"
namespace: k8s.namespace
}
spec: {
region: secret.region
auth: secretRef: {
accessKeyIDSecretRef: {
name: secret.accessKey.name
key: secret.accessKey.key
}
secretAccessKeySecretRef: {
name: secret.secretAccessKey.name
key: secret.secretAccessKey.key
}
}
}
}
}

"\($metadata.id)_image_pull_secret": {
manifest: resources.#ExternalSecret & {
metadata: {
name: "\($metadata.id)-image-pull-secret"
namespace: k8s.namespace
}
spec: {
refreshInterval: externalSecret.refreshInterval
target: {
template: {
type: "kubernetes.io/dockerconfigjson"
data: ".dockerconfigjson": #"{"auths":{"{{ .proxy_endpoint }}":{"username":"{{ .username }}","password":"{{ .password }}","auth":"{{ printf "%s:%s" .username .password | b64enc }}"}}}"#
}
name: "\($metadata.id)-image-pull-secret"
creationPolicy: "Owner"
}
dataFrom: [
{
sourceRef: generatorRef: {
apiVersion: "generators.external-secrets.io/v1alpha1"
name: "\($metadata.id)-authorization-token"
kind: "ECRAuthorizationToken"
}
},
]
}
}
}

}
}
}

}

0 comments on commit 2174e1f

Please sign in to comment.