secret-rotation-data.yaml

templates:
  - from: generic.tmpl
    render:
      - to: ../../prow/jobs/test-infra/gardener-kubeconfig-rotation.yaml
        localSets:
          secret_sa:
            labels:
              preset-sa-secret-update: "true"
        jobConfigs:
          - repoName: "kyma-project/test-infra"
            jobs:
              - jobConfig:
                  name: "secrets-rotate-gardener-neighbors"
                  annotations:
                    owner: neighbors
                    description: "Rotate kubeconfig for Gardener neighbors project"
                  slack_channel: kyma-prow-alerts
                  cron: "0 5 1 * *" # At 05:00 on day-of-month 1.
                  command: "/ko-app/gardener-rotate"
                  args:
                    - "--service-account=/etc/credentials/sa-secret-update/service-account.json"
                    - "--kubeconfig=/etc/credentials/gardener-neighbors/kubeconfig"
                    - "--config-file=/home/prow/go/src/github.com/kyma-project/test-infra/development/gardener-rotate/gardener-neighbors-config.yaml"
                    - "--dry-run=false"
                  cluster: "trusted-workload"
                  labels:
                    preset-gardener-neighbors: "true"
                inheritedConfigs:
                  local:
                    - "secret_sa"
                  global:
                    - "image_gardener-rotate"
                    - "jobConfig_periodic"
                    - "jobConfig_default"
                    - "extra_refs_test-infra"
              - jobConfig:
                  name: "secrets-rotate-gardener-prow"
                  annotations:
                    owner: prow
                    description: "Rotate kubeconfig for Gardener prow project"
                  slack_channel: kyma-prow-alerts
                  cron: "0 5 1 * *" # At 05:00 on day-of-month 1.
                  command: "/ko-app/gardener-rotate"
                  args:
                    - "--service-account=/etc/credentials/sa-secret-update/service-account.json"
                    - "--kubeconfig=/etc/credentials/gardener-kyma-prow-rotate/kubeconfig"
                    - "--config-file=/home/prow/go/src/github.com/kyma-project/test-infra/development/gardener-rotate/gardener-kyma-prow-config.yaml"
                    - "--dry-run=false"
                  cluster: "trusted-workload"
                  labels:
                    preset-gardener-kyma-rotate-kubeconfig: "true"
                inheritedConfigs:
                  local:
                    - "secret_sa"
                  global:
                    - "image_gardener-rotate"
                    - "jobConfig_periodic"
                    - "jobConfig_default"
                    - "extra_refs_test-infra"
              - jobConfig:
                  name: "secrets-rotate-gardener-kyma-dev"
                  annotations:
                    owner: kyma-team
                    description: "Rotate kubeconfig for Gardener kyma-dev project"
                  slack_channel: kyma-prow-alerts
                  cron: "0 5 1 * *" # At 05:00 on day-of-month 1.
                  command: "/ko-app/gardener-rotate"
                  args:
                    - "--service-account=/etc/credentials/sa-secret-update/service-account.json"
                    - "--kubeconfig=/gardener/kubeconfig"
                    - "--config-file=/home/prow/go/src/github.com/kyma-project/test-infra/development/gardener-rotate/gardener-kyma-dev-config.yaml"
                    - "--dry-run=false"
                  cluster: "trusted-workload"
                  labels:
                    preset-keb-dev-credentials: "true"
                inheritedConfigs:
                  local:
                    - "secret_sa"
                  global:
                    - "image_gardener-rotate"
                    - "jobConfig_periodic"
                    - "jobConfig_default"
                    - "extra_refs_test-infra"