Devin Buhl
df642e5425
* feat: update jinja delimiters back to default Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: remove cert-manager promrules Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update talos csr approver Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
23 lines
599 B
YAML
23 lines
599 B
YAML
{% if flux.enabled %}
|
|
---
|
|
creation_rules:
|
|
{% if distribution in ['talos'] %}
|
|
- # IMPORTANT: This rule MUST be above the others
|
|
path_regex: talos/.*\.sops\.ya?ml
|
|
key_groups:
|
|
- age:
|
|
- "{{ flux.sops_age_public_key }}"
|
|
{% endif %}
|
|
- path_regex: kubernetes/.*\.sops\.ya?ml
|
|
encrypted_regex: "^(data|stringData)$"
|
|
key_groups:
|
|
- age:
|
|
- "{{ flux.sops_age_public_key }}"
|
|
{% if distribution in ['k0s', 'k3s'] %}
|
|
- path_regex: ansible/.*\.sops\.ya?ml
|
|
key_groups:
|
|
- age:
|
|
- "{{ flux.sops_age_public_key }}"
|
|
{% endif %}
|
|
{% endif %}
|