2021-05-12 08:30:05 -05:00
|
|
|
pull_secret = 'dockerconfigjson'
|
|
|
|
|
github_token = 'github_token'
|
2021-06-10 05:22:03 -05:00
|
|
|
drone_token = 'drone_token'
|
2021-11-30 04:53:07 -06:00
|
|
|
prerelease_bucket = 'prerelease_bucket'
|
2021-12-24 03:43:32 -06:00
|
|
|
gcp_upload_artifacts_key = 'gcp_upload_artifacts_key'
|
2021-05-12 08:30:05 -05:00
|
|
|
|
|
|
|
|
def from_secret(secret):
|
|
|
|
|
return {
|
|
|
|
|
'from_secret': secret
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
def vault_secret(name, path, key):
|
|
|
|
|
return {
|
|
|
|
|
'kind': 'secret',
|
|
|
|
|
'name': name,
|
|
|
|
|
'get': {
|
|
|
|
|
'path': path,
|
|
|
|
|
'name': key,
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
def secrets():
|
|
|
|
|
return [
|
|
|
|
|
vault_secret(pull_secret, 'secret/data/common/gcr', '.dockerconfigjson'),
|
2021-06-10 05:22:03 -05:00
|
|
|
vault_secret(github_token, 'infra/data/ci/github/grafanabot', 'pat'),
|
|
|
|
|
vault_secret(drone_token, 'infra/data/ci/drone', 'machine-user-token'),
|
2021-11-30 04:53:07 -06:00
|
|
|
vault_secret(prerelease_bucket, 'infra/data/ci/grafana/prerelease', 'bucket'),
|
2021-12-24 03:43:32 -06:00
|
|
|
vault_secret(gcp_upload_artifacts_key, 'infra/data/ci/grafana/releng/artifacts-uploader-service-account', 'credentials.json'),
|
2021-05-12 08:30:05 -05:00
|
|
|
]
|
