DEV-730: added values/secrets for cusqa+cusprod

3 years ago · ed452c8443
parent f67cc28fcd
commit ed452c8443
5 changed files with 66 additions and 11 deletions
--- a/secrets_cusprod.yaml
+++ b/secrets_cusprod.yaml
@ -8,14 +8,29 @@ tenant:
        name: ENC[AES256_GCM,data:5dd6Vk+tz4uMK3JW,iv:nkSAQrepp5FyeYGFSnDMjGDTKKjy8f1zqb9Uyi32vnw=,tag:csTFLOG3Ef82uRdaSj2lOg==,type:str]
        accessKey: ENC[AES256_GCM,data:nmracSI=,iv:XoLDt6xCh1X4T2X8I0teI28TbmcedtxZ/kN/WkM6Ueg=,tag:rVS2m5ypuYyrouFDz3jMtg==,type:str]
        secretKey: ENC[AES256_GCM,data:EzAwi9EuKi2isn2oaLSG/OgzSwXw/6OnKQ==,iv:4ZcHPlE5868vILswMwOGA2w6B79VBvaP7CkGt+ndSos=,tag:rZFN9VNWj4HKo9U415G4QA==,type:str]
+smardigo-connect:
+    connect:
+        secrets:
+            mail:
+                username: ""
+                password: ""
+            oidc:
+                oidc_client_secret: ENC[AES256_GCM,data:4b75Tv/CugX+eqK07J/FvFKVnCjUdf1C5RSh/ZiBMQ8vgyHI,iv:uOLJaXPUoW6MDHf6V7SEJJZdBArd4KyiWhEeaVa26gk=,tag:1fYUwBLqM168wEi8TqAkwg==,type:str]
+            jwt_secret: ENC[AES256_GCM,data:+w9OajYqoHitdkjneGjymrmdEK7FnxWbpt9hAIcOOS8=,iv:I6MD9xbaDPs5XwxBKmo0hFMZknOnw7JgqGU8ucLln+w=,tag:3RyMzQoHLLe5OYLX2ViCwg==,type:str]
+            elastic:
+                username: ENC[AES256_GCM,data:5gmqAbvnjPYeV/tgl/SL,iv:pP7/28Tgr/50VnkbvW9qlsZ53cCuYTkn8jbJ/6RTydI=,tag:OT5HG16PZ4NjD5JHUvdOfg==,type:str]
+                password: ENC[AES256_GCM,data:/SPfLxJIckFgu4N/UMmvrELGkYEeb2NEYFKuRixHgME=,iv:UWzmPIsPL3jNgAqlDxPlw7VFahzVC+rWO9S606Hd0Zk=,tag:NfyXWCpSUthyO/X7EVASNg==,type:str]
+            admin:
+                username: ENC[AES256_GCM,data:EcNqJhrIlNSXwu3EKA==,iv:A24lREYK3vEkiHcpgJr9k2u8iV5AG7y2FAmK9tqRs98=,tag:JaBv32djdBi+EKOtmeK8Sg==,type:str]
+                password: ENC[AES256_GCM,data:tpHFe/WKtX/dir5OPi3/UTI4bCiHpFlhfwS7jeoXDOA=,iv:M8K0e4QbTfkbcjK9hVD9CxnT90SEYgQkCkpSqL2BXic=,tag:x1/VtXDpbgXBvFzrsxBo7g==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age: []
-    lastmodified: "2022-11-18T15:58:05Z"
-    mac: ENC[AES256_GCM,data:wWspw3PCdFAqTcY5OSfLHDwZZ8oqhz/hMHbdVVNB+Mszzh4+fpL6tYJtO7CA38nmwGpOMJ+o0Cp9fe7z7FQLtF62ba5qQirMwBkd8dCW9X2Xs3ua1wJlLR4cMmC3kkfg7BXkw6xtNOpGZgixQ7QcJwEf1DDSBgLSxl9uJzTttIE=,iv:Q53aEO+0fMDTEMyTv5LZZndkCxgMxPTedwg9NpFBsHo=,tag:PxAy+Q2H2FouCTyxg8eCgQ==,type:str]
+    lastmodified: "2022-12-13T10:19:05Z"
+    mac: ENC[AES256_GCM,data:zUMjYOzO3dVtZgcC1Z6D03Hlh79/m49PTPv8swYYhVTJRcVYOxalDedimkRbDY/qNPUiSm6xtvYReYecyU6lrY7SzWikG9jyrvsRKyjuBkvSvtDpIHFh2pGXSCQMVgS6PVP2pHZyQmvJemG/O5UIvcmxMgqZ7eLOa3+rHBLBmeQ=,iv:MhMIYO9qrSNReRUr15RAL4PNaE4GUFL9Xgf2wXAEMy4=,tag:avmsqSZpC9LhkmSDHg+vqQ==,type:str]
    pgp:
        - created_at: "2022-11-18T15:58:05Z"
          enc: |
--- a/secrets_cusqa.yaml
+++ b/secrets_cusqa.yaml
@ -8,14 +8,29 @@ tenant:
        name: ENC[AES256_GCM,data:fl2ti9Kky7Hqvo/1,iv:zGP/FA6cRIRXJDR3r/2O+Htw8iYm7LuFDpTXxrjukec=,tag:MPX6e7kvlqfG2xJPoV2y+A==,type:str]
        accessKey: ENC[AES256_GCM,data:rhXRA6U=,iv:wXP+K0/GFnZI0LjczQopl/y9IQVMNiEvJwTVVSvZjgk=,tag:4CXmy6EFFbxPY/YT+ZwKHw==,type:str]
        secretKey: ENC[AES256_GCM,data:nnBxTkD7d4b0XyHekur3UbCBHaikXZC23A==,iv:42mQICO6DpIuuhvNZHLNcK0OqmWuG+OVAOOjN7vu8ig=,tag:z3pa5T6IBjCp5C2xwMt/lQ==,type:str]
+smardigo-connect:
+    connect:
+        secrets:
+            mail:
+                username: ""
+                password: ""
+            oidc:
+                oidc_client_secret: ENC[AES256_GCM,data:NdhBXuIAWAOuVrfNAAwemQiLErqmJpIZZZSsN5dowdqIcYEJ,iv:uFgYYZGAVdrCHwvNToSWsR/a6yTk4FtzcT8LVpkPN90=,tag:034cnq7zn1OlLv0ht09HLQ==,type:str]
+            jwt_secret: ENC[AES256_GCM,data:rbLIjaJbSScdJtbPczDXdVqGH5gNVkSndpyMcAWSjR8=,iv:5E63VcB3skFyFAUZw0G2OEchjR6LcjRAZJeWcqQRmOI=,tag:gHzsLkxsuI+CLsKDOThj+A==,type:str]
+            elastic:
+                username: ENC[AES256_GCM,data:QftRvr4PBILuzvaMWtnG,iv:j/kB5el3vcyj9cjYJZRAkMxNbms9/lmEuLiG2a0ytyY=,tag:B0pJgA0TiT+SHraN1FW8jg==,type:str]
+                password: ENC[AES256_GCM,data:PTIbOGSTTcTPvB55yIahqm9p3u4QDEVP4AYnmyu4NDc=,iv:PooY0NyEvZZ7xrSWUANU1/S4yworRHVZ2nATuGy94wQ=,tag:f7tcaSV1G+19UINNxmuiBg==,type:str]
+            admin:
+                username: ENC[AES256_GCM,data:yGEBKoYb/DjlYwyZUQ==,iv:Fd+uZ1760EcY4DaEuUEe3ACoIxZ2mUkdxG1ko+2LBwI=,tag:2r/kqzbX6fE+hRhr5VZDag==,type:str]
+                password: ENC[AES256_GCM,data:KVelCc3mvkhDls/cp9/35u86YkdpC1dYmofYTPWV+es=,iv:kznJCAqkA2k6yQXQCpelJmkAdaygQsWso9LVnhP9TI4=,tag:D/QbrIdnv6Fppyw9mjZHYQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age: []
-    lastmodified: "2022-11-18T15:57:14Z"
-    mac: ENC[AES256_GCM,data:+K06cJOoPRCZdqNwGVZ+SM4pGVp2/OCxHa1oMFEJzGWvKDf71VoHTgWKt+BW+vtAg/o2FZxpUXygmrMZYV/97iHwaX6L1+y7BGidKdyYjRwyZXD7UCFdkpc9nPSKwSkzbGZHcM+RiApSmBU4bjwPECuabfmz+vkNWh54cqKDHSM=,iv:1jalFghy+QdEbHy6bpiH9D7zLoxTsO8uXo2M0ONk1qo=,tag:1FCy8/4do7fJtS2M1oR4Qw==,type:str]
+    lastmodified: "2022-12-13T10:15:52Z"
+    mac: ENC[AES256_GCM,data:PRj8rWEgpybS8s8ujJBF74sJua18aKixN7UeZZEwUq4A103eJkDyyxPofCDfU4aMsIhM7+o2Bo5BG1wwfELQ/8CCkoLoYbFg83rYUbQrm+CVq2jtyyINVQJUTZaT9rNVB6X+7x90esoUfKMge1P+rSuIcerKWoo8juDoYdy5st8=,iv:7ZA8shmw1Z8vUvQ0vwjXFg7W2pOiBnKOpTWwPiZXXqY=,tag:0/KNUkY7o6r6Fqofc8AfpA==,type:str]
    pgp:
        - created_at: "2022-11-18T15:57:14Z"
          enc: |
--- a/secrets_nsodev.yaml
+++ b/secrets_nsodev.yaml
@ -9,11 +9,6 @@ tenant:
        accessKey: ENC[AES256_GCM,data:eLPLjg==,iv:dsD2lps/g3DV+NrZ/Kmbtm2dNHE8D/OyWtPCHRd9wl8=,tag:T9Oz2x/kh7rWjgog6CGkUQ==,type:str]
        secretKey: ENC[AES256_GCM,data:S/yAew9rF9KgYUKIquS7RIOTSgjcMLPzwg==,iv:Y7Jhtml4KRmqBoUo+A9Ho6zwrfAUgF5dMSN8VqtfANI=,tag:9RXw5wiF+lmMbGWEkTIZXQ==,type:str]
 smardigo-connect:
-    iam:
-        secret_envvars:
-            sma_jwt_secret: ENC[AES256_GCM,data:s7gPAXhFB6abGcPM+H4YHozJPqyOmtOULrdCZAoXrJw=,iv:I7is2GvRrPsGt++9b86olkO+QhlNumL3lzJFx9RnSSE=,tag:fFSBi1bCSNhiQEml8pn0GQ==,type:str]
-            iam_keycloak_admin_user: ENC[AES256_GCM,data:RjYDQ3VnUG8TWKnIh2I=,iv:iyFl1CdzOEMwnNsCj896Fp3ouZmgNTuj1t+s95WeP8k=,tag:p3odbzWIhFFtqT8qXb5JOQ==,type:str]
-            iam_keycloak_admin_password: ENC[AES256_GCM,data:9YLonJW5x8gB2KRxCpk=,iv:4sZ0FMmdr+Mvd1aMTG3ItAhcOy7G3BR2H7Zk+jDINnk=,tag:5y9LNciAlWF7RNQ+ggQl9A==,type:str]
    connect:
        secrets:
            mail:
@ -34,8 +29,8 @@ sops:
    azure_kv: []
    hc_vault: []
    age: []
-    lastmodified: "2022-12-12T14:21:20Z"
-    mac: ENC[AES256_GCM,data:uC+TsXqkyt5idG0xW8dRrabasWF6iwv0HChVrmkGkuwsvgPUDSy2DqpM2I4y3hJR5+BhIV4it2R7+zYS2MEej72mFYMRyIvcxLrUhin8gui44Gfd7rBX5DR5QTsk94dxGpY2aAAo5HWNwx5GsqKfq1uyphYNnCtWWc140Wm9qIc=,iv:YTIkskzE7DHWxdB/FKG8UcsTn+BOM5y/Z4liHW81cZg=,tag:RvJJsfXE+aUkXXpVhLKbAw==,type:str]
+    lastmodified: "2022-12-13T10:15:59Z"
+    mac: ENC[AES256_GCM,data:iGOnM4HjF9qdCPZlHmTvQ/WClMytMg0YV8Z9L5J9kBH1u9Av7SisJzpwxESv/qZbVvuIN5eS1zwywQeIAw+P65mTVZQb1uVfVWm6YyEnLWj0owmq/Ii2Md7NBhwj9PguvwN0+SdCV/u4pbLtD1PZOUTwbbJr6NBuzrxMts5rZoo=,iv:zFWXMZEejzay6ZXghtB6rwrgD25JOgLC/9K5v6MCG7U=,tag:TkEt4pjofjF4xN+xdaJ1qQ==,type:str]
    pgp:
        - created_at: "2022-12-06T09:31:42Z"
          enc: |
--- a/values_cusprod.yaml
+++ b/values_cusprod.yaml
@ -54,3 +54,18 @@ tenant:
      - secretName: s3-console-cert
        hosts:
          - s3console-cusprod-prodwork01.smardigo.digital
+
+smardigo-connect:
+  connect:
+    domain: connect-cusprod-prodwork01.smardigo.digital
+    oidc:
+      client_id: cusprod-connect
+      registration_id: cusprod-connect
+      issuer_host: prodwork01-keycloak-01-keycloak.smardigo.digital
+      realm: moebene
+    iam:
+      iam_module: external
+      iam_client_enabled: "true"
+      protocol: http
+      hostname: iam.mobene-keycloak
+      port: 8080
--- a/values_cusqa.yaml
+++ b/values_cusqa.yaml
@ -54,3 +54,18 @@ tenant:
      - secretName: s3-console-cert
        hosts:
          - s3console-cusqa-prodwork01.smardigo.digital
+
+smardigo-connect:
+  connect:
+    domain: connect-cusqa-prodwork01.smardigo.digital
+    oidc:
+      client_id: cusqa-connect
+      registration_id: cusqa-connect
+      issuer_host: prodwork01-keycloak-01-keycloak.smardigo.digital
+      realm: moebene
+    iam:
+      iam_module: external
+      iam_client_enabled: "true"
+      protocol: http
+      hostname: iam.mobene-keycloak
+      port: 8080