Vault & gitops - Add workload cluster team roles and policies

What does this MR do and why?

Enable passing secret to workload cluster from Vault instead of from file

  • Add ACL & roles in Vault in order to limit secret access to expected clusters only

Code focus

  • In the case there is no workload cluster team defined, a dummy patch is applied (it tests something which exists) since an empty patch is not accepted by flux. See !3246 (diffs)

Test coverage

  • capd
  • capo
Edited by vladimir braquet

Merge request reports

Loading