open-cluster-management.io/governance-policy-propagator@v0.13.0/test/resources/case9_templates/case9-test-replpolicy_encrypted-managed1.yaml (about)

     1  apiVersion: policy.open-cluster-management.io/v1
     2  kind: Policy
     3  metadata:
     4    annotations:
     5      "policy.open-cluster-management.io/encryption-iv": "7cznVUq5SXEE4RMZNkGOrQ=="
     6    name: case9-test-policy
     7  spec:
     8    remediationAction: inform
     9    disabled: false
    10    policy-templates:
    11      - objectDefinition:
    12          apiVersion: policy.open-cluster-management.io/v1
    13          kind: ConfigurationPolicy
    14          metadata:
    15            annotations:
    16              "policy.open-cluster-management.io/encryption-iv": "7cznVUq5SXEE4RMZNkGOrQ=="
    17            name: case9-test-configpolicy
    18          spec:
    19            remediationAction: inform
    20            namespaceSelector:
    21              exclude: ["kube-*"]
    22              include: ["default"]
    23            object-templates:
    24              - complianceType: musthave
    25                objectDefinition:
    26                  kind: ConfigMap
    27                  apiVersion: v1
    28                  metadata:
    29                    name: case9-test-configmap
    30                    namespace: test
    31                  data:
    32                    Clustername: managed1
    33                    Clusterid: '{{ fromClusterClaim id.openshift.io }}'
    34                    Vlanid: $ocm_encrypted:/tk20DYYtavvUocCu/FgSQ==
    35                    someTopSecretThing: $ocm_encrypted:5n8twYYcFOIYqFznODvRPlMsZ9iGWUoyIDWml4HTPkrG5JX2/TLF63sfvDZD9fvP
    36      - objectDefinition:
    37          apiVersion: policy.open-cluster-management.io/v1
    38          kind: ConfigurationPolicy
    39          metadata:
    40            annotations:
    41              "policy.open-cluster-management.io/encryption-iv": "7cznVUq5SXEE4RMZNkGOrQ=="
    42            name: case9-test-configpolicy
    43          spec:
    44            remediationAction: inform
    45            namespaceSelector:
    46              exclude: ["kube-*"]
    47              include: ["default"]
    48            object-templates:
    49              - complianceType: mustnothave
    50                objectDefinition:
    51                  kind: ConfigMap
    52                  apiVersion: v1
    53                  metadata:
    54                    name: case9-test-configmap2
    55                    namespace: test
    56                  data:
    57                    thisOtherThing: $ocm_encrypted:1HozXUTNSEo5uNOKK0ninA==