sa069q ab0d3f097c Dex deployment related changes for SIP
- This patchset installs ClusterIssuer that references the selfsigned certificates generated via Issuer in config/samples
 - Passing in the generated secret from Issuer in SIP CR so that it can be consumed by ClusterIssuer
 - Changes made in overall structure of config/samples since Issuer and Secret required for dex needs to be in cert-manager namespace
 - Changes made in install-k8s.sh since minikube installation needs that apiserver-names param for dex endpoint to work
 - Changes made in deploy-sip.sh for installation of Cert-Manager since we need to enable it temporarily for gates
 - Added TODO for Auth related Test cases, for more details https://github.com/airshipit/sip/issues/14

Note: This patchset doesn't install Dex but the pre-req for Dex

Change-Id: If1962ead2a38dd0082a5e8978e5869f5c06aa757
2021-04-26 07:23:56 +00:00

126 lines
3.3 KiB
YAML

apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r006o002
labels:
vino.airshipit.org/flavor: control-plane
vino.airshipit.org/rack: r006
vino.airshipit.org/host: rdm9r006o002
spec:
online: true
bmc:
address: redfish+https://32.68.51.13/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r006o002-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r006o002-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system
---
apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r006o001
labels:
vino.airshipit.org/flavor: control-plane
vino.airshipit.org/rack: r006
vino.airshipit.org/host: rdm9r006o001
spec:
online: true
bmc:
address: redfish+https://32.68.51.12/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r006o001-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r006o001-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system
---
apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r007o001
labels:
vino.airshipit.org/flavor: control-plane
vino.airshipit.org/rack: r007
vino.airshipit.org/host: rdm9r007o001
spec:
online: true
bmc:
address: redfish+https://32.68.51.12/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r007o001-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r007o001-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system
---
apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r007o002
labels:
vino.airshipit.org/flavor: worker
vino.airshipit.org/rack: r007
vino.airshipit.org/host: rdm9r007o002
spec:
online: true
bmc:
address: redfish+https://32.68.51.12/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r007o002-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r007o002-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system
---
apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r008o002
labels:
vino.airshipit.org/flavor: worker
vino.airshipit.org/rack: r008
vino.airshipit.org/host: rdm9r008o002
spec:
online: true
bmc:
address: redfish+https://32.68.51.12/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r008o002-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r008o002-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system
---
apiVersion: metal3.io/v1alpha1
kind: BareMetalHost
metadata:
name: rdm9r009o002
labels:
vino.airshipit.org/flavor: worker
vino.airshipit.org/rack: r009
vino.airshipit.org/host: rdm9r009o002
spec:
online: true
bmc:
address: redfish+https://32.68.51.12/redfish/v1/Systems/System.Embedded.1
credentialsName: rdm9r009o002-bmc-credentials
disableCertificateVerification: true
networkData:
name: rdm9r009o002-networkdata
namespace: sipcluster-system
userData:
name: controlplane-l5vvf
namespace: sipcluster-system