Add virtual multi-cluster example site 21/4721/1
authorTodd Malsbary <todd.malsbary@intel.com>
Tue, 8 Mar 2022 18:33:07 +0000 (10:33 -0800)
committerTodd Malsbary <todd.malsbary@intel.com>
Tue, 8 Mar 2022 18:33:07 +0000 (10:33 -0800)
Signed-off-by: Todd Malsbary <todd.malsbary@intel.com>
Change-Id: Ifa7c9e01b620dde901bbf11c3f78f5094060aa7b

38 files changed:
deploy/site/common.sh
deploy/site/secrets/certs/cluster-1/ca-cert.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-1/ca-key.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-1/cert-chain.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-1/root-cert.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-2/ca-cert.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-2/ca-key.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-2/cert-chain.pem [new file with mode: 0644]
deploy/site/secrets/certs/cluster-2/root-cert.pem [new file with mode: 0644]
deploy/site/secrets/certs/root-ca.conf [new file with mode: 0644]
deploy/site/secrets/certs/root-cert.csr [new file with mode: 0644]
deploy/site/secrets/certs/root-cert.pem [new file with mode: 0644]
deploy/site/secrets/certs/root-cert.srl [new file with mode: 0644]
deploy/site/secrets/certs/root-key.pem [new file with mode: 0644]
deploy/site/vm-mc/.sops.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/addons.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/emco-management.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/gotk-sync.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/istio-cacerts.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/istio-namespace.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-1/istio.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/addons.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/emco-compute.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/gotk-sync.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/istio-cacerts.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/istio-namespace.yaml [new file with mode: 0644]
deploy/site/vm-mc/cluster-2/istio.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/cluster-1.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/cluster-2.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/icn-source.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/machine-1.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/machine-2.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/machine-3.yaml [new file with mode: 0644]
deploy/site/vm-mc/deployment/machine-4.yaml [new file with mode: 0644]
deploy/site/vm-mc/id_rsa [new file with mode: 0644]
deploy/site/vm-mc/id_rsa.pub [new file with mode: 0644]
deploy/site/vm-mc/sops.pub.asc [new file with mode: 0644]
deploy/site/vm-mc/vm-mc.sh [new file with mode: 0755]

index 0837570..006f550 100644 (file)
@@ -28,34 +28,48 @@ function export_gpg_private_key {
 
 function sops_encrypt {
     local -r yaml=$1
-    local -r key_name=$2
-
     local -r yaml_dir=$(dirname ${yaml})
+
+    local -r key_name=$2
     local -r key_fp=$(_gpg_key_fp ${key_name})
 
+    local site_dir=${yaml_dir}
+    if [[ $# -eq 3 ]]; then
+       site_dir=$3
+    fi
+
     # Commit the public key to the repository so that team members who
     # clone the repo can encrypt new files
     echo "Creating ${yaml_dir}/sops.pub.asc with public key used to encrypt secrets"
-    gpg --export --armor "${key_fp}" >${yaml_dir}/sops.pub.asc
+    gpg --export --armor "${key_fp}" >${site_dir}/sops.pub.asc
 
     # Add .sops.yaml so users won't have to worry about specifying the
     # proper key for the target cluster or namespace
-    echo "Creating ${yaml_dir}/.sops.yaml SOPS configuration file"
-    cat <<EOF > ${yaml_dir}/.sops.yaml
+    echo "Creating ${site_dir}/.sops.yaml SOPS configuration file"
+    encrypted_regex="(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)"
+    cat <<EOF > ${site_dir}/.sops.yaml
 creation_rules:
   - path_regex: .*.yaml
-    encrypted_regex: ^(bmcPassword|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    encrypted_regex: ^${encrypted_regex}$
     pgp: ${key_fp}
 EOF
 
-    sops --encrypt --in-place --config=${yaml_dir}/.sops.yaml ${yaml}
+    if [[ $(grep -c $(echo ${encrypted_regex} | sed -e 's/(/\\(/g' -e 's/|/\\|/g' -e 's/)/\\)/') ${yaml}) -ne 0 ]]; then
+       sops --encrypt --in-place --config=${site_dir}/.sops.yaml ${yaml}
+    fi
 }
 
 function sops_decrypt {
     local -r yaml=$1
-
     local -r yaml_dir=$(dirname ${yaml})
-    sops --decrypt --in-place --config=${yaml_dir}/.sops.yaml ${yaml}
+    local site_dir=${yaml_dir}
+    if [[ $# -eq 2 ]]; then
+       site_dir=$2
+    fi
+
+    if [[ $(grep -c "^sops:" ${yaml}) -ne 0 ]]; then
+       sops --decrypt --in-place --config=${site_dir}/.sops.yaml ${yaml}
+    fi
 }
 
 function flux_site_source_name {
diff --git a/deploy/site/secrets/certs/cluster-1/ca-cert.pem b/deploy/site/secrets/certs/cluster-1/ca-cert.pem
new file mode 100644 (file)
index 0000000..56cbc0c
--- /dev/null
@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/cluster-1/ca-key.pem b/deploy/site/secrets/certs/cluster-1/ca-key.pem
new file mode 100644 (file)
index 0000000..2abc0ad
--- /dev/null
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----
diff --git a/deploy/site/secrets/certs/cluster-1/cert-chain.pem b/deploy/site/secrets/certs/cluster-1/cert-chain.pem
new file mode 100644 (file)
index 0000000..ddb6542
--- /dev/null
@@ -0,0 +1,62 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/cluster-1/root-cert.pem b/deploy/site/secrets/certs/cluster-1/root-cert.pem
new file mode 100644 (file)
index 0000000..dbbb4fe
--- /dev/null
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/cluster-2/ca-cert.pem b/deploy/site/secrets/certs/cluster-2/ca-cert.pem
new file mode 100644 (file)
index 0000000..8619daa
--- /dev/null
@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/cluster-2/ca-key.pem b/deploy/site/secrets/certs/cluster-2/ca-key.pem
new file mode 100644 (file)
index 0000000..298815f
--- /dev/null
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----
diff --git a/deploy/site/secrets/certs/cluster-2/cert-chain.pem b/deploy/site/secrets/certs/cluster-2/cert-chain.pem
new file mode 100644 (file)
index 0000000..a07fe5a
--- /dev/null
@@ -0,0 +1,62 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/cluster-2/root-cert.pem b/deploy/site/secrets/certs/cluster-2/root-cert.pem
new file mode 100644 (file)
index 0000000..dbbb4fe
--- /dev/null
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/root-ca.conf b/deploy/site/secrets/certs/root-ca.conf
new file mode 100644 (file)
index 0000000..53b69b5
--- /dev/null
@@ -0,0 +1,16 @@
+[ req ]
+encrypt_key = no
+prompt = no
+utf8 = yes
+default_md = sha256
+default_bits = 4096
+req_extensions = req_ext
+x509_extensions = req_ext
+distinguished_name = req_dn
+[ req_ext ]
+subjectKeyIdentifier = hash
+basicConstraints = critical, CA:true
+keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, keyCertSign
+[ req_dn ]
+O = project-emco.io
+CN = Root CA
diff --git a/deploy/site/secrets/certs/root-cert.csr b/deploy/site/secrets/certs/root-cert.csr
new file mode 100644 (file)
index 0000000..89ce28f
--- /dev/null
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/deploy/site/secrets/certs/root-cert.pem b/deploy/site/secrets/certs/root-cert.pem
new file mode 100644 (file)
index 0000000..dbbb4fe
--- /dev/null
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/deploy/site/secrets/certs/root-cert.srl b/deploy/site/secrets/certs/root-cert.srl
new file mode 100644 (file)
index 0000000..0bfc3b4
--- /dev/null
@@ -0,0 +1 @@
+6709C6BF7794CC1F1C61E23A88B942ADAF1B02F8
diff --git a/deploy/site/secrets/certs/root-key.pem b/deploy/site/secrets/certs/root-key.pem
new file mode 100644 (file)
index 0000000..1fe463a
--- /dev/null
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIJKAIBAAKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe0Qpl
+SFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIGbTr9
+pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoKxKp7
+SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3poaM
+V85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCSJlMh
+wxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5dj1s
+31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdptRoDY
+pJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENwj3Fa
+qSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8IbWAE
+CghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJOo+n
+pMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUCAwEA
+AQKCAgANR81N4+bsUQjGmzSrvpdJSLGUa5Vgc1MT0LhG1WcP+g6MPPFjBSy8pdWA
+cssEKAFQQYsLlpD2k30EDJFeBSLCfvrrjFd9hqSbAg8EnhK71SAts4gUGzzJCfo+
+99ThsTfSBSdS1LI3YiEsuB+zf56cu1BrMkXUUQr3kRD6ILzXLGpP0ry4q51mft/z
+lsEJ9I7cFr3ocyXX3PNkobNMRucVnJGnNJ8jqhf/bu0om2Dn+Q8hZM/DpyiJG/pC
+fWj2Bf1TcAjmWf0F/XKNcD9uOqEhuEqzqCkmrgbxeQq7u2B9rmcLjF7zTSjCEy7N
+Qal7tvQuqhTgFgsMA16zvawVHVhoGo34lremgrm9m/Ns4soMEiyWCOvPEY+HEgbX
+4m3pZq2vS903A7oeu/t2pOMgh3AnHUtXFkvqolbXsaFiqHTpPOM85tNmB89uG381
+5t6vYxlGztey1RDszD5PlNPqrsQoNVgeMlV7vq2wUwMxpCNVSPPTN8ifrwmocpuE
+ZWYE2z3YhAh2BlSL65xHSDhcQY3ME0YTSSTblhKNOUgyC5jJ6bTFRRHp/L3sqlyK
+pVtnMp1/orGobITn/pSWbFjg+Oa10OILyB41gsP/WyaqcPJX1IMnsqoo8XKKEnHT
++XmnWpPhIfFtB77kVC+x6kveuxQHjeY+klLnfVSBzbil598foQKCAQEA8s8ZQgA2
+/lWLfCq4Ed5QqpJ5MqYk+dwRqImtXc6qEANPQXLoOvxk4rxA65789qws4dY5RpWa
+L41xBQJ2NtSfS38KQ7csL1hIcTS8zNZ6fayfEpeO78Fd10fEZEAqi44kWS8+z+j7
+8PkXU6G7emT+yKEXV0Z4oKeOB9Ltj+S7KvsdGZCamwfZXfKBLkdnlLhVGx4l57p+
+oEe2Gdr22XMyWEVW84r5dtGfn7sQE4xmD8CFYbsg6K5iNkNK/8GYQ0t81nSxz3gx
+sNj/691JngQG3ET1SM0LEa623HB2wCJPuvK7vR3q6CAbVzV+G3TIspQzrW/8uH2s
+X1m+2TbTsOy1uQKCAQEA7erMD0B5cpHD1Qcd0j3c1nZoAF26GNWlylo0CXu7bco9
+8XKGInOKtlT9x7VbW9vgJ+D7fB22YqIo0GKBuVizbi1erpu9E9OZ0qtcNkmus7qe
+AJjaBYLlV/XmZhEo0yQI8A2NG4qeKCvaLfoeWDuq5FX+3Vu1YH3WoDBQwLRV2aZ+
+zfA8LCqcMZSAzm1dqixTcnbhN60CBQXw1zrjfyDmo1PZLBQ9l3sccjGq80fVjkEQ
+pDfSVoc/t1jOnTAnZ164k718OM68hAVaAhnDmmUM806tXIA6AflMKk1QmD/S1wFh
+ni0ebTmawVUcefpB44vDiTyksOHVZpWaZACuZ4Ik7QKCAQA8T/MPMOx4GpmuOxJD
+5fwVkpKmYRy4L9D3E1PMBGS724aZVEiZNk58/5QEsxZU04nGgybxAIIvI6waOXVR
+w1jaMPFExsAj9oLwE9B99RyyEOnmfV0U8uwzaHFBEas/xQwEVzb7//xs7AK+VGM0
+UNf00AbzN98I0PX3vY4i+wb+8ydUTVYKAlYc/vrVmwkAqRUCymdR+0Iu4AE8xOYi
+N3oe8QJbNn8m44UJ8TZaFLrZWNII56mSApcEsYx0oQsIVDzrLEtqpIl7Szuuw+Xg
+aVGm7z4aWkxQlRx4/zqQGTXC0z6NCFxsUmVYMUJk4YpkyWlYwIN+9ECX4rwESpkk
+zneJAoIBAHrD0mH4WfKVZqCQ2IF47HA5jvbJZlKUQ8VDgGB4WUGQvx/MgYxbZHMr
+LfyUBz1CGstZG0tzJX6FwFuuyNN0ArpSbO3abNlDMbd0NtPId35ESG10ceOwJFmc
+CDQYnKE+keIUjABvKab+4ckhq/DJcSf7e9SLEu9kX5Au/ixBoZ76e6oWUWZU4l3v
+C/v4kQFTeAezcglBm64t35WfzG338yrKBGDrXNDCdO4z1MtOANMznbuvFjkR9v3L
+tGmFxH9hcArEFspVWw8gl85HrxgHFoShz3DQtZ35HqUhWfoFzOymyNFO5MlllQY3
+vcbvLHqWzuIMycp/7ZbOkWkStOuySw0CggEBAL+5ATDhHJSucGVBGK+hfLclkCBv
+Q35PrqcFS4k2NuTOeSECu9P4HcaWhlS1raK3bgKym9tFIUvvXQnAkF3wz33nC8s4
+NitBbeGSkZnkKR4nMqnbz7jw08eRe/cGzU9CILGw+3hfaxdZ9te7nZX/sS8ckQfF
+tIHcya8frqYMfLyQjcBaIxRR76lRXsw3Nows4RZXgMYQ5C94E7vxMgvABrq0apLV
+CNtWHfh4S2pCgh22k2j0RDRa/ykCwCXlmFab9pbFfrtXvcdL/FZuhURSLg1CaIWE
+B5wvxxIQkq+hfEqbc6l+/P8Trk7Xx7uC+9DIbJhXhl2nUjd9inZ011h6lRw=
+-----END RSA PRIVATE KEY-----
diff --git a/deploy/site/vm-mc/.sops.yaml b/deploy/site/vm-mc/.sops.yaml
new file mode 100644 (file)
index 0000000..1845115
--- /dev/null
@@ -0,0 +1,4 @@
+creation_rules:
+  - path_regex: .*.yaml
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    pgp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
diff --git a/deploy/site/vm-mc/cluster-1/addons.yaml b/deploy/site/vm-mc/cluster-1/addons.yaml
new file mode 100644 (file)
index 0000000..170028a
--- /dev/null
@@ -0,0 +1,15 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: addons
+  namespace: flux-system
+spec:
+  interval: 5m
+  path: deploy/site/cluster-addons
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  wait: true
+  timeout: 10m
diff --git a/deploy/site/vm-mc/cluster-1/emco-management.yaml b/deploy/site/vm-mc/cluster-1/emco-management.yaml
new file mode 100644 (file)
index 0000000..28866df
--- /dev/null
@@ -0,0 +1,19 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: emco-management
+  namespace: flux-system
+spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: icn-master-sops-gpg
+  interval: 5m
+  path: deploy/site/cluster-emco-management
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  wait: true
+  timeout: 10m
diff --git a/deploy/site/vm-mc/cluster-1/gotk-sync.yaml b/deploy/site/vm-mc/cluster-1/gotk-sync.yaml
new file mode 100644 (file)
index 0000000..52f12e9
--- /dev/null
@@ -0,0 +1,30 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: icn
+  namespace: flux-system
+spec:
+  gitImplementation: go-git
+  interval: 1m0s
+  ref:
+    branch: master
+  timeout: 20s
+  url: https://gerrit.akraino.org/r/icn
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-icn-flux-sync
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: deploy/site/vm-mc/cluster-1
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  decryption:
+    provider: sops
+    secretRef:
+      name: icn-master-sops-gpg
diff --git a/deploy/site/vm-mc/cluster-1/istio-cacerts.yaml b/deploy/site/vm-mc/cluster-1/istio-cacerts.yaml
new file mode 100644 (file)
index 0000000..a333342
--- /dev/null
@@ -0,0 +1,42 @@
+apiVersion: v1
+data:
+    ca-cert.pem: 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
+    ca-key.pem: ENC[AES256_GCM,data:uiCvzmGLtAR/AOXmb7IaL8XfXxZGYQtuBOXIzYUxF+7iXo+s1asqTW49aZ3NCIFFGaH9Ss4uEo8Rgj9uM9gLpvhXyz+cCJtMJhTIOKOrBsxP7E4HkV4H0xIKNm41+fgg3TczqWUAjFae7LxBITjtNTEKipNPzAwWd/tqyd8V315WKGdHANcs2w3YX34ofoy3jDXiZO3knuOgdZC/3iJNCRLeBoX+Ovmxf99aY3OI8UJIH56fu4nY33qZATyIwLXyg5lnUVoGpxNk7CAXJ8DPqO+o7Q/LgDwwMlNq7uKiMr6rQkKv0lg2vCR6mmdKpEnQcBok/l1cJGko7lsbc7di8vdyeaN1A1WLww0f2y0AB+wII0DV/SJj+87QhoYOtPjIPrL2WH60ElOOsObu9EJ40dXX8QZ3GOCIprs2NtRX4SjUEP3vPA/C2Foo77iFeEohlV6+6/gMX9dt0AcVNAw4NLN2ueaIGbfk9K2d4CDcZXNFRyEE5ReUJbSxbf/OQUUF7dNI7u6v1qr2ZaC/9Zo4YyKLjjUIN6g6UQhLyoAONH1zxqcuABmQqjsznRWWYtiHoAhfr3s/J02guuEXrRQVZFMje46SuGh6wqn0PRZvmDJmxtdG+nU9todgX06gmBsWimKuYqz3J+eMOXLhgiUbBZpNsMX6P+tBUWXvOzExcyaKTbkxCz4m2666jqRRcTbL9f8tH2KUFZYHmxoWO5tkgVpJkOgkk5DWMYrUfd9Mpb669fPh8e3xSlK3nVzKGBLhK+BRwETj99XmVuT1PnA82nryGaG1OThnYYAs3/X8Ptk/7ksjYBcrJrZkC9ZZuNwjYK63gSWflc3lkPQSmoeFdM8EGrYu7j/Uert/nZuQ3wOp2nrW+Ec7Zx6r9+mYo52ycPtshjPx5TAjns+FaBrOl2paDrtdvYDBxWVcUMdjYQ6NcE53uH0TLVjEvOtUwQp/NrXG98f970nZAs6UXDOgvpvxEeixBwF4TByOWswLhxbhPxHQ9nAgRMWrAAmG542Bkla5k1bhYHDf6IkTMQMb73oCYAre8Sagm/q/roRlojCMLCMgib4HQdOEUMD/plXxWP+enlwCdk1uMPMppu7Ey0xzjd8U53b0sJL6itqXVRI7rXpTWcxWePUJ2aWrduJ6YiAIkU86y/R2BZ95lgdX+AFvOB20QJsby60tJ0x9eozK9AOLo8zPP1ORRD7PQFSbfoHOxdsmLkVqBESVxRNpgPMN03yuFylD69ci3mF7Wj87Bwkwy0tIKzoa4WQ8y3JcDakQUQx7l17afo+TAcK/43AMNK08qz7hgN1HnWDs6zZYXNev3DvA+aoxeHpZplgZtmvV2oskGt++k/qcjFIu3gE95gzE2C4DwXvkVjXPYfu9touHrWdMBdZdB5vMAUW4GKghI+JnoZ32R3Sr+cqKssxv7jMP/08qZRKeBuMMpezEy4PfF3J63t3beKsjzLxWe4TZidLcQ5M1abLTWFIgydTgOH0F5KhwFZdNI5nCwgWXw8XS3tgkeWaxeExUyNtoOrwNMTScGTgfjImg3D6YDQUb2eX21yR/WgBV6l5YK0Bu8WS0BcnxP3NM97u160qdrBI+77YQeb/kAF22QzI2XebllAb8AwA7i7eTjRZie0tTQS7djYbqhTRxXnEWOIpujYZcq1peGFKr3t0xvkGZ1BVQqSXO5z2+XEfzyfb9lWMMju219vZbaIU/hjOM6A5f6LXYD3h+WbBXx7Z6l2cD2CMLFkBO9uz8Qa+7Xyqx4IwxCcIkt1Hw2yK858h2M3/8sdc5Zl8d79kp6ADFWs4Cq3kBpGMinPJFtVkTRMemiux+wM0zNhehz/bP/GEyPdBT3mTex8NK0TMTWEYpPdRnt4BtoNY/TSlbY7KF7snkF8YzE+XctUBj4RH68xi9bC5gbiNTK4kcQ9QbcXk0x6YYMWRtXbysGBdIBSM38J6Bn8c20sQlBjaeyFSf3riH11deHy8oPXVLXuRd40I5S38esnRskwKosqXICqkaLzcNZNUyTOR3D9oGdq34R6JbqXUEDSMTjf4FDeL8aGVXI0q+LgxxNxhvOyvaqnD7HcoJ3uIlLqZLM29zrxzirSSLvvuPRx/HeCM5L8SY2Q44/aGAWcs17yWxyNg8frG1Tk556j94Eb0J5cgnLjJqqhoXKFyuTzqOVAFCPa/4UUAiYeqKbpiTWh9Y1vzhxyXYChaAZjhXF1YlEgvRu+1CuS+gSnxcjFIc0T5ONbxrtdvvOn4SjN5NQy1FW3+UeKVNs0+pmEdhDIScsvCHIBJUI1fx5urFCQmWKpblyq6pD3Xc3Nlv3vFoG8/sJal4dVxVm8aPT0BhADDTNwZJCK+btYH/lqCEEXuTp/r2yZFW1irHzxHl8u+E+WLzUmDl8aFoW/IhqxJX/QNJsPX9FddlGsxOI1WaD8/CEa98rRVpUbJfqovf4jYJGudYHBjIplzafGFTdooq4cDIKXPsFw0H76Sxuz4Z0XwUGW20bgREIizfo/sp0EIn7WK0bYpCjVAOvH1SZlstQ+QHAyvV35PvO+NY153+aRM/TV4SCj6vAsfmnMbKbdJzqA6lbssmbrMUhfZq//tLb+TewPqS+z6ORctAeNaCEF+GVrASgYSVZmK3+CHwwJ+GfLfW9mXPedhm7UQtbuBN2zBTUb+LnqnSM3iTwi8l8TRcT2frtyPP05YSPpWBG0s2xw7PdOhcrbBKI4nJomYO2R9apFHmq544Ye9v2tSPch+IXI/9ihy8XGXvvBXrpO4lCZn5la9HHxbV9lYOeRPlfilu8PfTQXv9Rl6Z8PB2/aKu6nWUQNcYZmkigK2aVpretEanaw0fXoNXbSImWRsTsXHCglVhQXNvOJd5udZ51dlWY2q8SCeVJ85y1Th2o16Nrb2p7Z4omBSLV1bCdn/7OEqdmKZ/32QN93736j4cEkoqSbPrgn7MSW9GT2vI8r74yVEbgG7tSp2liasFrk/rQ8EnuUT2yGbygNbuZCgkk7LANagvNilrpPIRPqmopgBXkSOErQ1JlB87Miz0Yig4mZUCNoI5PEAnqT0SptNKLxFBdhcQmKZG8RAakMfgWbBfY4JuLBkdmEO3Vs19WvTGSGOdQFNyMm8/prj2VqgS7nrFILQY2kOYYrP45Q/bLl/gDMdtMx21Ls0Cel5Hc9gc+vgTZjgNYhZTMKg7zz5BlwWtUymsTjdgukLEqMuJlrKcPvuO8xsprn8aTNZd/u3ZCBkv6eqKR9GtR6Iqd4XeVicvzvTt/PkVxe6aJ1St12CJ7Hg7HmGZKqFZvMV/6wY412aMo0xU2XVMfD/Pl+bet05nGS+0jNjlr57RolIUj0uC/jiZxFYjBmj4uK5e/Dmg3yWkUrGAj7CICh5o/GA4zt0DL5BPOh6Zj+8KMOPHUMXCvWQ5SgqCwxLiVCElxPh0QgFK3FKtB5GRG5M+PECUnXSNLQe8RGoB0vA03fAgmZEETa/Jsx4YiSbavE6SOTKW7ff4gMuiWVjUQ3mq8MjK+XLJwG01mjMM7O5LWS63bia1OnRPL90SYaFO8aBJAqEIToNP651qFSs4cgJQhxdmMX4A4iduRDq4IGM2oZ3k/kOWnjfNWcqkFZM96g9Gjd3iQalvM2X9GjCfnZuwTEMpYN0SURTUGZ9UWq6u3foq/y3SX49oEeoexCNE1b1pQF3GvjI5UQQ3+TpwteQk80XKAaN1Z7f8qeVyHl4WrKD1XSkW0uTUVSayiEz+gHvMfRmW0s75G5EzZXQKvP/JOpsk1IbSshy9Vg6w1gzpKiOlJkqfgZzY4JYfRuwyK+tS3nsQyX57AmOIp1ZirLRr0SfmGM6+k2keUpOQOcDc5L+XNrOSa2OVqgvIHzgzh2UZY2VEJUSkF5U9I0kAOAI2rCgZo6dXCIdcSR6QbqP4aLgc+QvoQ7Jxjhxu4wNVehAcXOEklBQAVp70Eyz0zznr0DCYzbGbwLT2I/w5c8KzoY8lYWmgmZd92hqLP+Oaqy87Kp5K6bi9qGv2o3AIWfIM8xtin7hBAfeqIKWWfoNYSc1/VCRJ14mmPDihmC59oKI9iz9GEJXyr3r0kzZWvLC2SURynSWz7mMN2xzkvyczD1zKq8tQ6/mfLg6qMz0aPzlgAUQ4N/JzTq2nFKy0jGLs/6xQ++65qA8Sv9MLYiF+92/SQ6qYj9p2UxdJdW5nt8kciIOIxW6EWbh0FsD+aWxZ1nmDnnS1JFadG3UH5HCzMGzfmh9bbwqsmDpT1PJl5fqo3POwsqj/9M2G29Wsiob4LWXa+iJ61AeHJhg2p+BsdPxvxQNGHFO6VsP+BdxYMOdA5KvmDTQ0QDXK80KOnOXs/v5yscrBDDkCFin437PL+EP5qNWgHzvXPi9BRssC7P78e8MXoP2vDx+5004xW0Byyp/SmApVOZt6T7978hdKTMiKw0a7pOS0Ml0HEbGEFNHuiVB8O0Qd0VyNl61yPa0l5OauH2w1w9oYt4Au2EFZa+sS6c+bBLYlxZzQK/9VVFSZJ67JVgZ4imiT4IL7l4X0gnZE3aIz6u4H2DljIPxuPGHUJlQoOIX6/pdIPM5zbAOrqsg1XpUityk4SN0eJadmiJ2aC4zEzcJyRK6IzwBrx01c3lYDDTt0qT6y56H3lnWdHpoLln3XPqIrvMR4nj9Ws57TUKohsL3brr+p44yFGsB3GGePDYIDkt0zgoEaTM1YSA9C14kZO9/Jn+LWawOmFdXxfl3CfSOddvLpRbzHolB1nKMKFvOJbPoZcXuhdCh78CK02mUHGTPen9jm7GUepYMF6SutTiLC2uDzMoRJXKzCdpawv0TZzPU7BS7Nph/8Bdo4HozFItsCZeZKAIHUIPS3u5cG/g9GCaTkAovVFvNdv4mbnJ7u+pBawCKoNWEPC4sq4CJlxrM1VVOK4T//pHAAmp0MImz7iWmX39cBLkp9be7XgsnfZylg0IgQFuE8P7+4TGitcwvpqU5ALROhuAcqZyxWtQ8hVg8rOwY5C5gdTJgMcgSp6p5U/jROsp2Kd9qV3Cs/yfmjz5fXg5JwqgRlAApbxPw39ZoRGBOjWzyNdWjf3PcarIFS/KiM7Nym64wMWqctIsbOUUh2q2ps2XFr8CK2j8m23yIs9BRxJo8efk3kj2x45XyL8mvLXz8RFreTJH+H9RXZnTMB31zdWNW8rluv5DwkMM7t4qR36qvXnNjyHdLfqijthGQl9cO38J8eqWBkTduj8I+J02PaM0V8sv7+Lt22Zs5m5CMA/jeBy/Tax4fwJrwkqCU7WrH+carw0oJnO07jjCWR/UkDsbNGbDCCB1UJCrHEluUkHEYz0lZoT8dMsLqf2uGVQxy+KmfFPNv6MEFSFDlAAhKs7lLPdgNzvb27fk2Rk/LRqBZcTtomRY3LnIUFwDTieSHz7qZg/mCR4vbX8l0KQRu96H7qQPK1AmGOiiYjLq0RFRKhVER2Eyliv2gGhIXoky01pV6yATjsSe7XwSWy7UG6ZzrtTcWncnyKBzikxBYQEsMIfwEyGBx9fj/zDTY07DDNPBWXBKeKnbWRg3UmzNOtP6q5mldRk5VDH0PGVOdhHe/r83BfR9XroIgBB2Zoel12aas0idjuhxhzUqSQnaTKWD9yIIQblXSzHBU+PPZp8Ikyh5Ge/nKF/0MIG0L+YLLyKDr7W2H3p2w3KGvZnZrKjUWzI4U5yD+SAa5rcwIfpLBshz2ib309esFkCSxpK5YCoO43rPp/93uEitXRcWJ+cyoXRlwU0w==,iv:e90ctNZe0qvVTYUpJ75uq0RUCRd4KtaIdmKF9hXPP94=,tag:uZzqxd5XO72j12/S9GtMlg==,type:str]
+    cert-chain.pem: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZjRENDQTFpZ0F3SUJBZ0lVWnduR3YzZVV6QjhjWWVJNmlMbENyYThiQXZjd0RRWUpLb1pJaHZjTkFRRUwKQlFBd0xERVlNQllHQTFVRUNnd1BjSEp2YW1WamRDMWxiV052TG1sdk1SQXdEZ1lEVlFRRERBZFNiMjkwSUVOQgpNQjRYRFRJeU1ETXdOekl6TkRVeU4xb1hEVEkwTURNd05qSXpORFV5TjFvd1RURVlNQllHQTFVRUNnd1BjSEp2CmFtVmpkQzFsYldOdkxtbHZNUjB3R3dZRFZRUUREQlJGVFVOUElFbHVkR1Z5YldWa2FXRjBaU0JEUVRFU01CQUcKQTFVRUJ3d0pZMngxYzNSbGNpMHhNSUlDSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DQWc4QU1JSUNDZ0tDQWdFQQp3ZENZQmIrZFJmZG55MHU2VEV4NnNYVmVtVTg4NHpxWGpvU05BQ2dFN0lobkd4dE9meFJ3eTJlVHdOUDY1NkJwCjE2aXV6VDFnaGJJLzBINldobzYxbGRBcVQ0VkJSZndjZXkwQnZPNC9oQU1ieVpOcERub2VUYkdSRzY2bXVRNWsKZ2dVNkU3UW0vYm9aQ1J6dktZdDJNcURvRkRoMWtzUkRoMHJ3K29xZUhQUWVGa0ZsVFpqOTZmVi9uTVFMbllpRQpIV0hMQUl0NTlZV1g4L3YxT3lCZDlIYnVPUTdqNW1sejZwdUg3NHVkQWhkN2NIUGozdzBVSHBaaTQ4ZU1aaWM5CnREdHY2TzNubnVMQzZLMnp0UXVvZVBGbHQ0ZmVyYnNJOWtZaG5GMnhxUWZUaFhLRjloKzVVNW1UZjZjYmJ3ZVIKMXY5OGtSY3M3RnRHVDZSdjRkZWF2dDY3aThnV0sxVFhNS3NrVXRSeHY0SWpsUi9VM0Zvdm5xRGtrUkV0L3IvdwptbmNaZzk2bGEzYjFHNFJoc1FZMU1JcThiZklZTXNYNjNrajZMWEFxemNGaFJ5YjZYVGlWa3ZOd2Jrb3N5TGhHCkh4d1BraUFtWWhxU0xWd2crQWdEMCt2WUF0SUhvbFUvOUlTUEplR0JoM1NjeDJZSXhxazFMYmE5WlI1M2U0THMKVzBMbkt0L1llQU55U3VoQTBwTExJdnRXNnk3MUxLTWZibTZIb0hwY2c0bHA5V0ZjRHFLdGVaVTYzK2FwUHJoWApiclhwR3ZuRmMxL3VZeS9BUzhtZmtLbzk1Y1dsWlBiajNxTk80cDVJWktwTDFuU016VTJ3dWl6NXdJQ0w0azRIClVUMHZkdXlrMmNDSjlSbTdtcjlUNFZpdkRWVnFJckM4cm5yTVY1SHFMVXNDQXdFQUFhTnBNR2N3SFFZRFZSME8KQkJZRUZPSFozcnVOTGFpTkFwK25mQnd2bzBDOWNIcGFNQklHQTFVZEV3RUIvd1FJTUFZQkFmOENBUUF3RGdZRApWUjBQQVFIL0JBUURBZ0xrTUNJR0ExVWRFUVFiTUJtQ0YybHpkR2x2WkM1cGMzUnBieTF6ZVhOMFpXMHVjM1pqCk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQ0FRQ0UvWFVQeXpUTStzRTFESERiYlFIWkFlRHVOem5JaHNsc1B6UHUKaHlOR3VMQUJoT29BL2IzUHFiS3BpZHZsaC9jRGx3amlheTlkSmFmRUhlcE9HelkwcFRLZVpiNDZzZWNBdzdzWgo1ckZaQ09YZVJ2ZnBYZDR3enRRQWREeEVsUlZTMzViUXNBbndDbnkzOHhMOThLc3JRdWc0MytmOWlpSDVleWhwCmxQVWsvNUl3THRMWGRnWFA0WjNzdjFiMFlRQUF5N3ZlT2lVRjU5b2wvZVFIbndEWkwwcTNFTkRCbjhGaVFmRjMKQmpFWmhiamVKSlRXS3ozeEQ4VzcveTBWS0UrOXl6TWtNbmNwb1hJcGprQ0Q4dWNyYzIyZllnbHFXeG1EZmNvbQo1aG83bjRjS0s3QUtOOURuMVJBR1lDYWVTVkhxcUg1Y1pBeG1QeWN4MjJJMHhXWTY5aUI3ZmJoM296aHFOQitICklrZUdYVHY4QTZQQWVieUtjU2cvYlR6a0ZXb3dFYmd0ZGFkRnRhNTBiVXFmdmlzMDQyVEgwSzJ4bXlRc0xPVUoKdmtqVUkwUXJaS0FlR1RsNmt5U1JUSWxUS0kvcTI0dVlwd05SZTE4ZVFMdjZlQm5CQzY3L1p4b0NGeWgvcGw0SApuRkhQUFR2RTB5N1Y5OVBIRWRmTEYyVEU3am0rWExRWHRmMDZiOEphT3NNak9FVmJiNFBpMG85MDRveUl2bjZsCncwZFhNS0lRMXdNb1N6MFJRckFDSGpJMVVOQlNUVEYrR2dCVGdtYWQ5YUhZVGxYSW1uekZ1NGFQRTVWeXFkdHUKenYrNlF3VmI3UzE3QWNQdldmL3FMOTI3ZVRKY2hqejY1SGVteGNmSXBsQnlwdFN3VzJCdkNueFhCRWJ4bWN6QQpDWjNReUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlGS0RDQ0F4Q2dBd0lCQWdJVUM5NWtVZ2NWTmhPMndMbXpmcGR1NCt4TjBvVXdEUVlKS29aSWh2Y05BUUVMCkJRQXdMREVZTUJZR0ExVUVDZ3dQY0hKdmFtVmpkQzFsYldOdkxtbHZNUkF3RGdZRFZRUUREQWRTYjI5MElFTkIKTUI0WERUSXlNRE13TnpJek5EVXlOVm9YRFRNeU1ETXdOREl6TkRVeU5Wb3dMREVZTUJZR0ExVUVDZ3dQY0hKdgphbVZqZEMxbGJXTnZMbWx2TVJBd0RnWURWUVFEREFkU2IyOTBJRU5CTUlJQ0lqQU5CZ2txaGtpRzl3MEJBUUVGCkFBT0NBZzhBTUlJQ0NnS0NBZ0VBNGFodE9xL3hKYUZzd3Q2UkJYVy9XRFZKMEd2b281YlZoOW9LZFE5MVBWWWUKMFFwbFNGRTVacFY3UmVqLzNTZmEyVHFQa3JsN2RvRm1ZZkJNR2k4dExPckp6dmZGdDBPa2c5eExDOUlHNVlJRwpiVHI5cHlYVFNIYWdqV0VYN2RJSm84NXhPeU8yTXQxUzlMeUcyREtWWExmTDNXWTNRdVUwUnA5MnNBQjJaem9LCnhLcDdTQWx0L0xNYWczY01VM2hqVmpFZG5YQ25kWmxXbHIwb2EyZVF5eFB0N243dGdEOXVGTVVJcWZNNVhwUTMKcG9hTVY4NWRtbnZQVURrTFQramI2K200bThVRStmM0hnbGZOZEo3OG8xOGo1My9TUWk5L2VCRkZSem14V2lDUwpKbE1od3hPM2VGUjhBM3R2cWdLRDdJRC9pK2lVUjlmVFZxUXgxUFBTY0dMU1paaHJsTW5jSFhOaEJBalBUd2w1CmRqMXMzMXp3U0J5cWgwbUt4RStjOXdpVms1aW1sMlV0Uzd1Y1l4eS9rMFlES1hQN2hoV2l3bzB2bjdmZFFkcHQKUm9EWXBKU1RPSXVEUk1IYWpZakxRWmloMGMrLytPeXRHSEtLRzdwNm53UVpRYkh6a3ZEUmcwNjhOOE1wT0VOdwpqM0ZhcVN1RHZiOEtyV3JYdlVYYkkxejdUUGxwc3JOUXhpYmxRUmQ0cFN3NUkzcDZNNllLNXBVTjEvRmJsTzhJCmJXQUVDZ2hCQTRHVDI1dm4yWVQycHJJU3dDYk9ZL2ZlckJmMEJzM0JTYUdzcm9wLy9JcVc4VFA5WlhoeUo5aUoKT28rbnBNS2xxQ2t1byt3YXhkeldiVUg1eTFwQndYTm9TN3R6ZlhsdmxyUG9FTUd1Tm5TZ3hhUWY2OHVrUUVVQwpBd0VBQWFOQ01FQXdIUVlEVlIwT0JCWUVGR3V3Z1dhOHdYc1lKTHowdjdlTnBJWHVaVlhvTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RnWURWUjBQQVFIL0JBUURBZ0xrTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElDQVFDdHdvdXYKenBGS0lURDdmWWliSGcxYXQzcVF2WlFhMis0cUNqZm1XSXJycGNhV0ljYzN0UDc5bExidHZVc3c1eTJVMjlEZwo0VUo0ai96S3ZmbGpjK0lOdDNsdFNlUVNsTjVEcmJsTmx2dXk0K3EwY1NsWVg0ZGlQZkVSc3hIMW12b0psR3Q5Cld6aSs0akFxK1RYUEJnNHVoZGZMYmtCRWs3Y2RvYXZwQkFLZ3gzMDRvSHptaFZLaXh3M0p3Mms4eTFMVHFnRC8KMm1SUytORnloL2puYTlvM0dmRTRpNUlwc1RVblFWUGhBS20vRm1IOElHenBxbEh3K3M1dXBLM3BrdEpCa3Rocgpqakk0dE1VOW55bXVMdUkzbHc3dWNkUEpTQ1cybHVPZ2tsalF2OFdKR2FMRW53VVhSeFhPR0hkdXNRMUFSUHNaCmluamJNRHRubld1SnNuWnU0TTMrQi8xOWptSnN0aXFaSHZwK0RRVGlhNVZTZXdJdWlhL1ZRN3prS2NKdkdlejMKZTNKc1M5anZuMUZxTjdLRU91QzhVMTdEeVFIdjJPaUtIRlR3M2IyU3ZrQkc1UGE5ZDdBVGxYS0lEa0xqMUJXYQpNVU8zS3hUQ0hMa1FPZVZaTzhjdHdQbmVtT1liZVduMWJmTXQwRWNHSFhtTWh6MGJuZzFDRkNjMU56bncwTG5FClJjeFU3OTlyNFJMYmwyUjJxMG5paExtbDc0S281N1lrR3FRRkorSkJjTFN1Z0ZJVjBndmVPZXpsZit2YXlwNTUKWDNDUnh3N3V3WWxhY1NsUVdyR3VPM3RuUzNFZEFBaWdBQ29BOHVnWU5ERkZhc1hZL0JObXdraHZFSWlScnlPVAp0QmZQQkxacEJkMzh6WXJNems1T25KSSs0ZGFISDAzTVE5TU03dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+    root-cert.pem: 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
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: cacerts
+    namespace: istio-system
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:30:59Z"
+    mac: ENC[AES256_GCM,data:/XDh1yqCtVs5W0bHpV0R35/vp8Pwa7Yd9HLcs0zvUv+h1qXZMls8auHbg6Gd/lhj+FvtpuYGj2K9PBSNvSHaiIG2p7h2cqdabd75k1QHP3LcuULOiyO2kOEp4QFtw/ETIrBnWOIFF2tn6Ib5Joo5xAAhSZH9MOJcxQg1JAevRZA=,iv:r4Ps265+248ENH/z5ECzKvyv/U4RS29/qG+rP1xFx0k=,tag:ghOfalCaTURSP/4g7abT7A==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:30:58Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ//frnjQe9aysF4vX7G5nLqi9VV+wIjB5q1TIt8kr8SoAkE
+            tTcnFQaLyLgi/etY1WtZBYeT8s8nStZ4yv3LjO9jW4bGObsH/Qru7hmgh8qYime1
+            CkaaAWxM2kjdGey9dHPxW9QCoiPz5WYPuEefx0csT4pxsBd2Cvel3LkCQTHoTmGe
+            Iyh9gMEhd18tWpAN+JihecStnnVw3hSuhqjhZimFBUmeh30NWBWqZHX2GJuRTRSJ
+            +rnzq327ekea4uVayS6dKfXUl2LCY/piXhLo/iSf+QA0yyfb1rUFarkEhoE3PEK0
+            gMWHHBSrc8rQUBt9mb+I+RMiE2OHmNeEyKTY4hWFRiudAJgO4UiZ9wexQ1KSE0m9
+            PKoIgPIzt1C2T1jmWj4pqL0fxqgQtxXf/SkH4c/E4z8aaGI2rc0bqYlUWVlssWyD
+            8wrh+GHkfChvXMAJSBPKB6PlNo9UyJaLM7eoSQSEtpm86zi2SbAgHzq8nUbruNrF
+            0p+9TaSKiEucZh0zp8pZkrq5cZ1Cufog2UF6MEaMbd+WDllC+6jfBasB01uZLQSz
+            bfiHwQO7JEfSLXANceM8vqlEXwEcQZ3/P2M/zmUMjEhp6ifzZt5dwvOVQmhP/PSo
+            6pVqZg6QrhSGLzznYWqRo13+uNyjd66KI1LQMBCVbyWEFGa1e2dA5UPtuzzopoXS
+            XgH7lS0JmDOWqk0OS3oIqum0KeEQHCr+nReAf7CcKYVo/om+iGDtrHAduPk0d82Y
+            NuKRgPGhAWSN4jZnS65PMZ02dAfK72f9r9JBc76HLfTAEzc5wyBAc3KyGzyp1Tk=
+            =UfhO
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/cluster-1/istio-namespace.yaml b/deploy/site/vm-mc/cluster-1/istio-namespace.yaml
new file mode 100644 (file)
index 0000000..60de14f
--- /dev/null
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: istio-system
diff --git a/deploy/site/vm-mc/cluster-1/istio.yaml b/deploy/site/vm-mc/cluster-1/istio.yaml
new file mode 100644 (file)
index 0000000..5eb5f09
--- /dev/null
@@ -0,0 +1,24 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: istio
+  namespace: istio-system
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: deploy/istio
+      sourceRef:
+        kind: GitRepository
+        name: icn
+        namespace: flux-system
+      interval: 1m
+  install:
+    remediation:
+      retries: -1
+  upgrade:
+    remediation:
+      retries: -1
+  dependsOn:
+  - name: istio-operator
diff --git a/deploy/site/vm-mc/cluster-2/addons.yaml b/deploy/site/vm-mc/cluster-2/addons.yaml
new file mode 100644 (file)
index 0000000..170028a
--- /dev/null
@@ -0,0 +1,15 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: addons
+  namespace: flux-system
+spec:
+  interval: 5m
+  path: deploy/site/cluster-addons
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  wait: true
+  timeout: 10m
diff --git a/deploy/site/vm-mc/cluster-2/emco-compute.yaml b/deploy/site/vm-mc/cluster-2/emco-compute.yaml
new file mode 100644 (file)
index 0000000..4b97d14
--- /dev/null
@@ -0,0 +1,15 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: emco-compute
+  namespace: flux-system
+spec:
+  interval: 5m
+  path: deploy/site/cluster-emco-compute
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  wait: true
+  timeout: 10m
diff --git a/deploy/site/vm-mc/cluster-2/gotk-sync.yaml b/deploy/site/vm-mc/cluster-2/gotk-sync.yaml
new file mode 100644 (file)
index 0000000..c872df9
--- /dev/null
@@ -0,0 +1,30 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: icn
+  namespace: flux-system
+spec:
+  gitImplementation: go-git
+  interval: 1m0s
+  ref:
+    branch: master
+  timeout: 20s
+  url: https://gerrit.akraino.org/r/icn
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-icn-flux-sync
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: deploy/site/vm-mc/cluster-2
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: icn
+  decryption:
+    provider: sops
+    secretRef:
+      name: icn-master-sops-gpg
diff --git a/deploy/site/vm-mc/cluster-2/istio-cacerts.yaml b/deploy/site/vm-mc/cluster-2/istio-cacerts.yaml
new file mode 100644 (file)
index 0000000..743826b
--- /dev/null
@@ -0,0 +1,42 @@
+apiVersion: v1
+data:
+    ca-cert.pem: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZjRENDQTFpZ0F3SUJBZ0lVWnduR3YzZVV6QjhjWWVJNmlMbENyYThiQXZnd0RRWUpLb1pJaHZjTkFRRUwKQlFBd0xERVlNQllHQTFVRUNnd1BjSEp2YW1WamRDMWxiV052TG1sdk1SQXdEZ1lEVlFRRERBZFNiMjkwSUVOQgpNQjRYRFRJeU1ETXdOekl6TkRVeU9Gb1hEVEkwTURNd05qSXpORFV5T0Zvd1RURVlNQllHQTFVRUNnd1BjSEp2CmFtVmpkQzFsYldOdkxtbHZNUjB3R3dZRFZRUUREQlJGVFVOUElFbHVkR1Z5YldWa2FXRjBaU0JEUVRFU01CQUcKQTFVRUJ3d0pZMngxYzNSbGNpMHlNSUlDSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DQWc4QU1JSUNDZ0tDQWdFQQp1SGp1YnMzRytMRU85TG5ZYXJ5d2V0OFBOajFnek1LdU05YTFlSmhqcllQMWo1L1A4a2xpbGRScjFNNXFoMFU5Cm1ScGxiUUJCNnM5MjlxUUhiM0dhS1lJWFBwUy9YQU9LZktmK0l5cVBjRk1OR2dQdGFMaXh6UHg3cDBxMmFsT1oKMmVRTkhUOHVrL1Y4ZHhvQVJ6SlVpb0RYKzBZb1ZjMGVTN3ZjMERsVGZNRmV1d2pYOW0rKzdrdG4yKzFjZHExTAo2ckNZY2RxNUs2WlhlaDAvY2JBODhSd3gzZ2VpTHh4TkVkZml2LzE4VGdrQ1E5WEUvSFF6YStnb2lrVnMxSTlmCklMeFl0RytIamRISXMrbjBHbVhZS2Uza081a3dmRm9BVUcybHNyVjhFWG0zZzEreVIyL2FaQUlFRW9HV01TY3oKYk5icU0vd3F0TEtETlo5TExDWXEyQzl1NC9TZEszZEdzNlNxUDZsbVRvSUlFVGhRenR5TURUZE9lbXZpcGdYQwoxcis3eEViZnB2QmlWZ3l5bEpudUpscGJ0M0greGZCL2J0R25SNytPbmQzcHNuUm5hUytFNVhldXFYQUVFSS9CCmtDMHBTYzcyVzNPTXdzYUdhaGRyZ2lKc1VjRGdkTjlvYmFSTUpNRmVzU2owQTc2SmdTRDlLbzR3c1FvTHFiZmUKNnYrZkNkVEVINnp3eWFtUVUxbGIySzNHMHlPbGZzM2lWaXpaYUlEa0pXQ3IvZzBHbmgzY3kxTEdDUUpvanhQeQpRSTNQOG9RVHNmeFhqSXprcFNvbFFyaWFkbWxQcWlETEV5dGN4K0xtVzl6MVdobUNrS3JpMGNlVkpSU044YlVuCmt2V0lQdFVBeWJESzN1TUFNcHNyckFFODBZQ29YcHh2MHhlRjBPRkpacnNDQXdFQUFhTnBNR2N3SFFZRFZSME8KQkJZRUZES3JMVUZsL0luUnl0UVJ2SDFEcWY3aWsxL3pNQklHQTFVZEV3RUIvd1FJTUFZQkFmOENBUUF3RGdZRApWUjBQQVFIL0JBUURBZ0xrTUNJR0ExVWRFUVFiTUJtQ0YybHpkR2x2WkM1cGMzUnBieTF6ZVhOMFpXMHVjM1pqCk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQ0FRQjZsaVYwaE1GNnBlVTdkQnlONU81cXh3MlYxWEZpazgyVmg3RUMKTFg5b2lZaVY1aDBwc0U1cHp3MHQ0NjdIT3NQekV0OFV5SE1xYnhFdU9wQXVnUkk2ejNkSlpsVTA5bE1GRVNIOQoydmg0YzdGSmxGZHpsREhSaUtVYVNrc0krY1g3RXNFbTZUeHBaNHZmQVErazROcUhUWDJlZDhmUUdacDZqckxHCjZCUWViMUNvNHlOU2w3SmhyU254SUg2aE1Ka1ZpSUxBaUVGS3E5L1QvakxMTnIyUVVKQzQyWGRmZEVTTWRsSHQKRUhiNW15Sno3cnh1ZkxWMzFRTE9LMlpUTnVXaUgvbWYvN2RWZVNLM2tOaTE4RUJXRkxCL0ZtZU9wSHRNN3ZOcAorWWM4V0ovT0hFMGVxZHJRUGVjRFdtRGwyNnF4ODZaQmczYW9FUGZSZ1JjbldtVGNZNEUyNEhIeHNJdllWRWtDCkYvRmRhVWcvaWt4eDVNVFBLbjVLMXpoOHk4bDZmbUhFMGdYaXpQUTFWNDVQYTRYU3lMTHRoc3VXZlZ0MUhRbCsKeHI0WDRwWWdPZ2tPOE1HaFhEVmQ4TmF2V0xEK3pTNzlmVGRncjFlWDVBQWltSTM2UW1TbmhyWUcrR3RxeUtGTApiNVpyMko0UENNRmtmMXJrRzFROWREWEhjekgvbGQ1R0dFb0V2akZSMk9GMjA0ZHlja2pkbzVVVFFGbTNvb29VCit0YXRnNjVlRFhUdk04d3NxQ3l3WThxVnBmRmw2WjJjZW1TOFBqczcyNEtabDBDcWZPKzA3ZGdpVS9jUFpmRUoKRGNGMWVaQkR5QUFYSkpWRVU4cEI3L25weUU4V3NsZUVTZWxIQU1ZYmxkd2d1aEFoa3ZvRll2WUFGaDdWa0xqdApVMmdLYnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
+    ca-key.pem: ENC[AES256_GCM,data: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,iv:Mc0y17c8X6g6lTkkWclSmKQoVTQkkQur3zBAFs6wmsM=,tag:yc1FQ7jMOXLkGlUJCZxkhA==,type:str]
+    cert-chain.pem: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZjRENDQTFpZ0F3SUJBZ0lVWnduR3YzZVV6QjhjWWVJNmlMbENyYThiQXZnd0RRWUpLb1pJaHZjTkFRRUwKQlFBd0xERVlNQllHQTFVRUNnd1BjSEp2YW1WamRDMWxiV052TG1sdk1SQXdEZ1lEVlFRRERBZFNiMjkwSUVOQgpNQjRYRFRJeU1ETXdOekl6TkRVeU9Gb1hEVEkwTURNd05qSXpORFV5T0Zvd1RURVlNQllHQTFVRUNnd1BjSEp2CmFtVmpkQzFsYldOdkxtbHZNUjB3R3dZRFZRUUREQlJGVFVOUElFbHVkR1Z5YldWa2FXRjBaU0JEUVRFU01CQUcKQTFVRUJ3d0pZMngxYzNSbGNpMHlNSUlDSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DQWc4QU1JSUNDZ0tDQWdFQQp1SGp1YnMzRytMRU85TG5ZYXJ5d2V0OFBOajFnek1LdU05YTFlSmhqcllQMWo1L1A4a2xpbGRScjFNNXFoMFU5Cm1ScGxiUUJCNnM5MjlxUUhiM0dhS1lJWFBwUy9YQU9LZktmK0l5cVBjRk1OR2dQdGFMaXh6UHg3cDBxMmFsT1oKMmVRTkhUOHVrL1Y4ZHhvQVJ6SlVpb0RYKzBZb1ZjMGVTN3ZjMERsVGZNRmV1d2pYOW0rKzdrdG4yKzFjZHExTAo2ckNZY2RxNUs2WlhlaDAvY2JBODhSd3gzZ2VpTHh4TkVkZml2LzE4VGdrQ1E5WEUvSFF6YStnb2lrVnMxSTlmCklMeFl0RytIamRISXMrbjBHbVhZS2Uza081a3dmRm9BVUcybHNyVjhFWG0zZzEreVIyL2FaQUlFRW9HV01TY3oKYk5icU0vd3F0TEtETlo5TExDWXEyQzl1NC9TZEszZEdzNlNxUDZsbVRvSUlFVGhRenR5TURUZE9lbXZpcGdYQwoxcis3eEViZnB2QmlWZ3l5bEpudUpscGJ0M0greGZCL2J0R25SNytPbmQzcHNuUm5hUytFNVhldXFYQUVFSS9CCmtDMHBTYzcyVzNPTXdzYUdhaGRyZ2lKc1VjRGdkTjlvYmFSTUpNRmVzU2owQTc2SmdTRDlLbzR3c1FvTHFiZmUKNnYrZkNkVEVINnp3eWFtUVUxbGIySzNHMHlPbGZzM2lWaXpaYUlEa0pXQ3IvZzBHbmgzY3kxTEdDUUpvanhQeQpRSTNQOG9RVHNmeFhqSXprcFNvbFFyaWFkbWxQcWlETEV5dGN4K0xtVzl6MVdobUNrS3JpMGNlVkpSU044YlVuCmt2V0lQdFVBeWJESzN1TUFNcHNyckFFODBZQ29YcHh2MHhlRjBPRkpacnNDQXdFQUFhTnBNR2N3SFFZRFZSME8KQkJZRUZES3JMVUZsL0luUnl0UVJ2SDFEcWY3aWsxL3pNQklHQTFVZEV3RUIvd1FJTUFZQkFmOENBUUF3RGdZRApWUjBQQVFIL0JBUURBZ0xrTUNJR0ExVWRFUVFiTUJtQ0YybHpkR2x2WkM1cGMzUnBieTF6ZVhOMFpXMHVjM1pqCk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQ0FRQjZsaVYwaE1GNnBlVTdkQnlONU81cXh3MlYxWEZpazgyVmg3RUMKTFg5b2lZaVY1aDBwc0U1cHp3MHQ0NjdIT3NQekV0OFV5SE1xYnhFdU9wQXVnUkk2ejNkSlpsVTA5bE1GRVNIOQoydmg0YzdGSmxGZHpsREhSaUtVYVNrc0krY1g3RXNFbTZUeHBaNHZmQVErazROcUhUWDJlZDhmUUdacDZqckxHCjZCUWViMUNvNHlOU2w3SmhyU254SUg2aE1Ka1ZpSUxBaUVGS3E5L1QvakxMTnIyUVVKQzQyWGRmZEVTTWRsSHQKRUhiNW15Sno3cnh1ZkxWMzFRTE9LMlpUTnVXaUgvbWYvN2RWZVNLM2tOaTE4RUJXRkxCL0ZtZU9wSHRNN3ZOcAorWWM4V0ovT0hFMGVxZHJRUGVjRFdtRGwyNnF4ODZaQmczYW9FUGZSZ1JjbldtVGNZNEUyNEhIeHNJdllWRWtDCkYvRmRhVWcvaWt4eDVNVFBLbjVLMXpoOHk4bDZmbUhFMGdYaXpQUTFWNDVQYTRYU3lMTHRoc3VXZlZ0MUhRbCsKeHI0WDRwWWdPZ2tPOE1HaFhEVmQ4TmF2V0xEK3pTNzlmVGRncjFlWDVBQWltSTM2UW1TbmhyWUcrR3RxeUtGTApiNVpyMko0UENNRmtmMXJrRzFROWREWEhjekgvbGQ1R0dFb0V2akZSMk9GMjA0ZHlja2pkbzVVVFFGbTNvb29VCit0YXRnNjVlRFhUdk04d3NxQ3l3WThxVnBmRmw2WjJjZW1TOFBqczcyNEtabDBDcWZPKzA3ZGdpVS9jUFpmRUoKRGNGMWVaQkR5QUFYSkpWRVU4cEI3L25weUU4V3NsZUVTZWxIQU1ZYmxkd2d1aEFoa3ZvRll2WUFGaDdWa0xqdApVMmdLYnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlGS0RDQ0F4Q2dBd0lCQWdJVUM5NWtVZ2NWTmhPMndMbXpmcGR1NCt4TjBvVXdEUVlKS29aSWh2Y05BUUVMCkJRQXdMREVZTUJZR0ExVUVDZ3dQY0hKdmFtVmpkQzFsYldOdkxtbHZNUkF3RGdZRFZRUUREQWRTYjI5MElFTkIKTUI0WERUSXlNRE13TnpJek5EVXlOVm9YRFRNeU1ETXdOREl6TkRVeU5Wb3dMREVZTUJZR0ExVUVDZ3dQY0hKdgphbVZqZEMxbGJXTnZMbWx2TVJBd0RnWURWUVFEREFkU2IyOTBJRU5CTUlJQ0lqQU5CZ2txaGtpRzl3MEJBUUVGCkFBT0NBZzhBTUlJQ0NnS0NBZ0VBNGFodE9xL3hKYUZzd3Q2UkJYVy9XRFZKMEd2b281YlZoOW9LZFE5MVBWWWUKMFFwbFNGRTVacFY3UmVqLzNTZmEyVHFQa3JsN2RvRm1ZZkJNR2k4dExPckp6dmZGdDBPa2c5eExDOUlHNVlJRwpiVHI5cHlYVFNIYWdqV0VYN2RJSm84NXhPeU8yTXQxUzlMeUcyREtWWExmTDNXWTNRdVUwUnA5MnNBQjJaem9LCnhLcDdTQWx0L0xNYWczY01VM2hqVmpFZG5YQ25kWmxXbHIwb2EyZVF5eFB0N243dGdEOXVGTVVJcWZNNVhwUTMKcG9hTVY4NWRtbnZQVURrTFQramI2K200bThVRStmM0hnbGZOZEo3OG8xOGo1My9TUWk5L2VCRkZSem14V2lDUwpKbE1od3hPM2VGUjhBM3R2cWdLRDdJRC9pK2lVUjlmVFZxUXgxUFBTY0dMU1paaHJsTW5jSFhOaEJBalBUd2w1CmRqMXMzMXp3U0J5cWgwbUt4RStjOXdpVms1aW1sMlV0Uzd1Y1l4eS9rMFlES1hQN2hoV2l3bzB2bjdmZFFkcHQKUm9EWXBKU1RPSXVEUk1IYWpZakxRWmloMGMrLytPeXRHSEtLRzdwNm53UVpRYkh6a3ZEUmcwNjhOOE1wT0VOdwpqM0ZhcVN1RHZiOEtyV3JYdlVYYkkxejdUUGxwc3JOUXhpYmxRUmQ0cFN3NUkzcDZNNllLNXBVTjEvRmJsTzhJCmJXQUVDZ2hCQTRHVDI1dm4yWVQycHJJU3dDYk9ZL2ZlckJmMEJzM0JTYUdzcm9wLy9JcVc4VFA5WlhoeUo5aUoKT28rbnBNS2xxQ2t1byt3YXhkeldiVUg1eTFwQndYTm9TN3R6ZlhsdmxyUG9FTUd1Tm5TZ3hhUWY2OHVrUUVVQwpBd0VBQWFOQ01FQXdIUVlEVlIwT0JCWUVGR3V3Z1dhOHdYc1lKTHowdjdlTnBJWHVaVlhvTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RnWURWUjBQQVFIL0JBUURBZ0xrTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElDQVFDdHdvdXYKenBGS0lURDdmWWliSGcxYXQzcVF2WlFhMis0cUNqZm1XSXJycGNhV0ljYzN0UDc5bExidHZVc3c1eTJVMjlEZwo0VUo0ai96S3ZmbGpjK0lOdDNsdFNlUVNsTjVEcmJsTmx2dXk0K3EwY1NsWVg0ZGlQZkVSc3hIMW12b0psR3Q5Cld6aSs0akFxK1RYUEJnNHVoZGZMYmtCRWs3Y2RvYXZwQkFLZ3gzMDRvSHptaFZLaXh3M0p3Mms4eTFMVHFnRC8KMm1SUytORnloL2puYTlvM0dmRTRpNUlwc1RVblFWUGhBS20vRm1IOElHenBxbEh3K3M1dXBLM3BrdEpCa3Rocgpqakk0dE1VOW55bXVMdUkzbHc3dWNkUEpTQ1cybHVPZ2tsalF2OFdKR2FMRW53VVhSeFhPR0hkdXNRMUFSUHNaCmluamJNRHRubld1SnNuWnU0TTMrQi8xOWptSnN0aXFaSHZwK0RRVGlhNVZTZXdJdWlhL1ZRN3prS2NKdkdlejMKZTNKc1M5anZuMUZxTjdLRU91QzhVMTdEeVFIdjJPaUtIRlR3M2IyU3ZrQkc1UGE5ZDdBVGxYS0lEa0xqMUJXYQpNVU8zS3hUQ0hMa1FPZVZaTzhjdHdQbmVtT1liZVduMWJmTXQwRWNHSFhtTWh6MGJuZzFDRkNjMU56bncwTG5FClJjeFU3OTlyNFJMYmwyUjJxMG5paExtbDc0S281N1lrR3FRRkorSkJjTFN1Z0ZJVjBndmVPZXpsZit2YXlwNTUKWDNDUnh3N3V3WWxhY1NsUVdyR3VPM3RuUzNFZEFBaWdBQ29BOHVnWU5ERkZhc1hZL0JObXdraHZFSWlScnlPVAp0QmZQQkxacEJkMzh6WXJNems1T25KSSs0ZGFISDAzTVE5TU03dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+    root-cert.pem: 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
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: cacerts
+    namespace: istio-system
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:00Z"
+    mac: ENC[AES256_GCM,data:z+d/wy8bSwBYsUN8x8MBS7t7O7dYYC6MoI258rvbcLO528CwgDFc4OtpOwZyWk69ppV3ro/je18WbJmWXGZhdO2TjYiGIYbE6g+3M+tmId7RhQ4xFhTFLo78PcUURltjcxyiifnIdjNnX4y7hluZrfy65FiWuorzvXAIUiLvPc0=,iv:35QWKkiop4dHWD1F5UxDoFOW0MaK+JODY19IqYjk7/U=,tag:1D2Z+rXCzOcd4RPjgu0lIQ==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:30:59Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ/+IF8/FLVnvDzaHxPeRBajl26k4GBoe5RDpbnQuoqJJyIR
+            qgoYpgSmg2kXDF+X8pK2uqoeH852Lm9FzSBuBIGw/GlkArL7bkG/hpxE0MFTU2Pi
+            2CG1Wf7ZTCnv046X/8xyfQdwMTPRQYbFUClpUJQ43sTuFidID+qj+DJoXfFItek0
+            smlolrkjL0m5vN0sTVoCpIsPZZpEoZBVeSqSyEqGAZesv0iayOOGAGXDav80MHrS
+            lnXJbn8ejhHE+h59YjUStICmv47NvNmX6U/SSS9xq6vtc3ZyZ5o5RyTeug8vLRnz
+            ooEk15/RK/pkMwDvuNiyeyUYkHEw6QTRWRfrS2Rifh6w1FB6a+YzAegKUbh5mbef
+            QGBzU0hi6E1tcFD46MavAGkHISvB2BuD4zIoVpQ2kJjbkjhdvHBeQO+PAR6YS8vD
+            lHx2PtdcetQJ+TnSNFjWrvPy3esqDXC58YBd4lzG93DY7H3bKGRWOlnrt2YfN4Rs
+            Pz9bkzo+m01BG5dwUl8DATsSFxhf4EqIyY4jYdw432MQM2MmYXv2pMIKecmpxkWD
+            tVPoSut9kZSmwo7yBc6bXDafZ/MMjLZngs02/grlh70Qz05GMm4jd2mJQZQo2heP
+            vUjruuKi5oJge2wEFWstP5cduc9VeiuuQmzfUS5cGBalZC7sN6gFHJGTTwcb1IzS
+            XgGFZRhs1U3sDhm3aYBuehNiAQH5PA48t30FlLsVUG40asD5aZLUW7KYOa2JtUpb
+            fVlXVKOQULGcEoshRVgpekdEeWtKz5hKF1xD0YlZTKcDlLpK3RoXOEvHw08JD7w=
+            =V84I
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/cluster-2/istio-namespace.yaml b/deploy/site/vm-mc/cluster-2/istio-namespace.yaml
new file mode 100644 (file)
index 0000000..60de14f
--- /dev/null
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: istio-system
diff --git a/deploy/site/vm-mc/cluster-2/istio.yaml b/deploy/site/vm-mc/cluster-2/istio.yaml
new file mode 100644 (file)
index 0000000..5eb5f09
--- /dev/null
@@ -0,0 +1,24 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: istio
+  namespace: istio-system
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: deploy/istio
+      sourceRef:
+        kind: GitRepository
+        name: icn
+        namespace: flux-system
+      interval: 1m
+  install:
+    remediation:
+      retries: -1
+  upgrade:
+    remediation:
+      retries: -1
+  dependsOn:
+  - name: istio-operator
diff --git a/deploy/site/vm-mc/deployment/cluster-1.yaml b/deploy/site/vm-mc/deployment/cluster-1.yaml
new file mode 100644 (file)
index 0000000..2f7b0bb
--- /dev/null
@@ -0,0 +1,65 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: cluster-1
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/cluster
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        clusterName: cluster-1
+        clusterLabels:
+            site: vm-multi-cluster
+        controlPlaneEndpoint: 192.168.151.254
+        keepalived:
+            interface: ens6
+            routerId: 3
+        networks:
+            baremetal:
+                interface: ens6
+            provisioning:
+                interface: ens5
+        userData:
+            hashedPassword: ENC[AES256_GCM,data:T9ax16d7VK1FudY7jkBSahk/MYAkmWDfzLadmRckfIF9Fs+6C7dGM5hyG8Lkz1sWcJXpQzuHd8yxQ8/VoSFCXAOv11ctrJsfNiVRNOpbEcQkGXwVwkVg/3Bm9TkP9fjjVjN0jm9yI+jP3qkTRF9tsw==,iv:w3FmcJehhEgvHjDXKlsJWa52wTnRN+M/f1xZAwdlg2s=,tag:mgyHF0SmRU36oUsPrH9MWw==,type:str]
+            sshAuthorizedKey: ssh-rsa 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 root@jump
+        flux:
+            url: https://gerrit.akraino.org/r/icn
+            branch: master
+            path: ./deploy/site/vm-mc/cluster-1
+            decryptionSecret: ENC[AES256_GCM,data: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,iv:r/Hjn3wG10eRijFBKkMQf77eEl3/KL8k2Aj03j4nxK4=,tag:s4hzLn6N2lSRcZXD6kMD1A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:01Z"
+    mac: ENC[AES256_GCM,data:Cx3hRalfmYv+Njj6eo2xtkzbW2tTCkYWtzwI1aolS63ky8gntm59aSVFYnQn3Pglq+4FbOzz0nW/hY0qUNzBWHER42Nh2X7FoBUdFn/DUolmZnYVskU06+uI4ajzQkWGJi5CTQh/mvJvD7Lg84M4HX0Zoo6z9sbrjvR5Mx2MK6Y=,iv:5HLXiH2He1KsOeETE1UpVDyOWGiAnY48zpkgRdkvFeA=,tag:mI1Hz6LGVu7UnyjM0pkXQQ==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ/9Gok3okQbHl4sqbNKB8tSYiYw1gKjz1W8S28K55LinrC6
+            4jyMoK/Arjc5ECUO0ysnMpDpabzYlbaqsePz/pzKjqPmo/Y+jzW7SX4LnUppgmEB
+            0jh27XovdAKMGCboW3jAiiTPvWTDcWBiZcKj/ui9ICSUa+AM5LOkXX6aRX0dfg5o
+            qDBPxaNFJzYMbPPOC9X7ZdrPHjl01Mth6x+mjqMtGi2M79QlinQzDCbQIwIKTNMd
+            W3urVbXsnWPjGud5cGZDu3GwHTFA3heWUgFp7kp6TZ+nRhR+Dk4Fp7uJtaS1m8lz
+            JlAavtjEwbIkxb42JKiJPG5ntfyJqUNlMyYsOcGcl4jlOhBIT3y4plRwZHSkpwbq
+            1To1SSrVCraYkVQSoEKdM1UamkffVB9eqRDeLaQejUbaZF8Uw/THk5mE7U+ra7RH
+            mPsz6LCBFPvR5CklVhXaMWqeWxiejJNkf0sbMuYjF9fVIQKSUFk2I9hY7TOlhI+6
+            TMIeqgOlV3DGDDnaC0dpdh+tbEXI709lkRHZIS4DTQSLvbH6v90HxsiobIMWpFuq
+            PLwxSgyAT9PX+kuJ3awFSbmpGVLnv2xvdXvoHopyA/jLJCfCRUSCRXZRctcjeHZy
+            Vq+UIOJ3M9RZZivfFDvUjU1MULA9WFseX1uUk985HzcA7T8IUsSNrf5MzePnm5HS
+            XgG3N7+5l3ZXk2DBNiTUEjLM46Gnwgh3CMwfFv5VBBmRcTI3YtWs2eA6kNHw1xmi
+            aXjBUfCLzZ01Ld3ndfvOzkCxi6mFaX4vpZDFYDbz3erpdVd0MxvdXvUsekCdUlg=
+            =XcVu
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/deployment/cluster-2.yaml b/deploy/site/vm-mc/deployment/cluster-2.yaml
new file mode 100644 (file)
index 0000000..6c10c1c
--- /dev/null
@@ -0,0 +1,65 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: cluster-2
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/cluster
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        clusterName: cluster-2
+        clusterLabels:
+            site: vm-multi-cluster
+        controlPlaneEndpoint: 192.168.151.253
+        keepalived:
+            interface: ens6
+            routerId: 4
+        networks:
+            baremetal:
+                interface: ens6
+            provisioning:
+                interface: ens5
+        userData:
+            hashedPassword: ENC[AES256_GCM,data:y0/hRz/ZcvRiH+pzu54TElDbTd39yGzYxS08Y6wY2wCbiijUVNo+43KwibMLzz6SIKlUAjcFu+/TZAnTisBkU5zwIbZ3ugm97Mw1F6VrfkYWIfpkKmNgy4E33BymaIbWZn7yJjU52a0AuMcOMEMy+Q==,iv:xALN6JsFIa3YqLiBrx8rucD9sn4CDYwrCGxU+qL8pYU=,tag:+AtJsr0H9no8y4gbDhEjJQ==,type:str]
+            sshAuthorizedKey: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC7KZSEKezxTW1xJRQJvMWOhha6oU5KJrjBnBgRPW1rg/eqB22U/pcTCNCsVVwcbuYRFmkhvHwfOG6aPQmL/XMKO9+6EhS3l/htM0d0uhDwa/SA4W1QeRpV+aQQknP/u8eBVw9odLk+Yf+pBggekU4tkThQPIeXFXmTQMPOthE/WPzeG0oKI/iz+trTm7+NNdBSE9fwlsjbPTG5UphpqmuApjXaEdkisnqMTd8cpvHe23ewvhS6pQf9G+5E6giU8KGaoau9bvQuAIjjyckYLkkP3KjdfCAdOkdy5exxQc5hpmXNmM/T1hdwwiBY1fX/B5IXtPCvWRNagOpQHS/gbnD5hbTWtYnaNO7CD+AegLZOItaTp+guzFtY+CV8fn+UjGUAmE5Vqht+qt0CxlSppJ8MWhvEnSYicCkftrcryu2o6Kr7pGjQ672rpAObyhM6S3w243e/f/b8WUJgdi0f7wVrEzHJfO5QxO3oMyWlhXEkfyzmiJe2LGBmyrJ3xHYEbYs= root@jump
+        flux:
+            url: https://gerrit.akraino.org/r/icn
+            branch: master
+            path: ./deploy/site/vm-mc/cluster-2
+            decryptionSecret: ENC[AES256_GCM,data:NoW2qjUxWjSxsz2hGbp2OFbziWTUi1PSqR2T0W4VnGO+iFj+ko8mtPgWpEYHNmtY6m8hBhnvnqiW4C9wBCvBiEitzy1+OYdAXKsysWCZf4mNX+Z4PCHfJQeK96jDapsvX/mUuVstxzAv95UyWm2sBNnk9oMvV2Zn5NKL6DutABnRGY9Zv/KArShYn4WZY0JMLDQjZTl66cYFP1KLfcyICqz2YgLsHStfjQqnHYoYwiq5QUAmM1Ed6ju1P75hVmxod7d42HyStjCa7B+tc2+LJs4hLbPtArDW0LwwBvDNPXksbq4slYYmGyhw/2a3bblTS1QCfXvzjOboXl7zl67ainGQyGHOl5BF9OculldNP7BnSux8IlWNkqxSj8RmL24uOufyHdvtHSvY7dKHKCpGGvgXRUKEfJOMCkUoGR/1BUvG8m7lANMGmZN0AHPljzEHaZI0k0p7/Xt/arOQgfVZeqCF7ANHOI1+zf1j2PJfGX46GFEPVCp5PPSDc+5iYwIbhMecAXjZtbt9S2uEC9robkJEiEKmsc+2Nn76JpfJf2tGPy+7UNdJpLG95PBrvuJsS2YJCe9MJuKrpHN8N8pNCyAlJkvIK4jfFSqS6kjRdvauckpWvPY1cH+e3bhi0AfobBo/4jzu3M2nri/k4LbyOi8Et0fTWcz3f4rv61HjXQAvVzOhUGdmINpybp+AMAQ4cvud7s3QZ/63oCuqaZu4UAXb91pjWzenhXWsi3SA91PtH9VHJMoEAoBX6GkwPAC9BQnMnlr6kCc+E2kGkwVYRRwd/G45d1xaVFlpvsiKR7og2mHSzAuZoj10K19VDiwLe+xDymUDJr6tZ404l+78aLfnT9HlpM/fBHVW4rEwe3sbuI7g5KwYUPk7sEoQ4sWNK14lE2eyI+iKNke9NWaDnQXqfjz7h1nZrok03SF/gKtzXEtlLmp56KskfdcWEZbvphnAkA6rKD8gaVNFeuLpAfzVTVlzENigybxnVhFibQhZXeRwjqUbfpThOuvmx5HXbOLhKpFDhTTdR473fd1C9odh5SIoTnIqJsu/3l9j6bzVclitX36LZcBPYWuLsSpE2TJqcBg9mNIImoAQsS994OXcajD7SEr1vZoFThcRUlHQI0bXA8SphoyWhmdc0pSgaY+/BXqd2eIxvQCe4DTjWmM8NADnP6a0XFWCObSNOXq6qeqprtJxw7ap0dTJ9ncCg31g8F49KA5coU3Jms4XSUjsyQpnkI5U9Iauifz8GwQ6avxpuBQtYNK8aavEF9IBz7yK/SK7U1PPFZNLpKOCMSkGgsNtjnoxi28zHZDjyfxzOMXzreDO+3tX0gCAbp0fJ/fIjKjdqo5miJR2sjDu68fMtlLpwW5Ju6Nj4O88v5SL74UK2W8p6iF10BcxM4jGH8wMLEZWSbFNelUCSz+C35EwvU8YxSazx1wtEEnA0gw6Trv4TEVA/RQ1BOQmhSH0PFaz4nnvQigcKO+8U6wF9TR0Kb/strMeI+v7SpLgdJwcW9+p1PwilpwgmzPvvaQ7Tbsr3ATo1diPwfMpo2RqJRSH6ZGfMMYSID7lwinnBfPooG44MRe6/wdYqeWWKFbhpSwoymsgqzyz+NGJI7dp/nJU/VtFNgJZT+zelqrrSCpBef/xriZu/haaFNo132RuS+C3KeDSlN5bSqdVdnQBql39W1+MlgIEy7SnXsa8j/S6S8f/bE4EnWLMYe3UsfUM1EH5x2IJHKlyNlhUMu8ZX37ZbTacfcWGUETqLjCxgVwaJpaWhEssGHD7eREQyL3QfSpR+sLO4ojbiNwZ6kLjoXLGuyotQwav45mwWV4uzYbL2TFqNfnf712wA0iTNSglN36b1PkmhZ+qUrsb2UhM27hTgsYecVnM2CzZhxhSwBSmeRcWiBw/H0Cur0INh5PldPx5wuhFJhTh8ETLAKu92xCUrG3jgLN1H2nhZN1ColrWvI95jpGqNCw5wqBKJkOV68kc/5QjH+H+pW+bxXifXK7sQJfEWfHJMZ10mH4//XzMhU/DTPuJqouaTMYxX54exHp0sJeq2L75Ci5HwaCq2i1ioKCVhD+180Pdw/m7seHg9uw36lGfYkbkNFLlskqdG07g+OYVB8l0PyqBvXYYHtJgnA+VzBTrl599zAY5Upjojhs4g1XMrsI0KmibLNHMQZJbJsSnQukPBQjKfzqHTDe0vIMKyJ05stYORqHI35Uh3H0GUA76v6TlE2ydHlGd29gKyHDuUSKkPkCVi1h8+x2UbPdmUi+VmmVqLvqcW8UjnoDcmD/6X1WKZoziappId+qutrXX/z5sV8IQ47slu3Afb+Y4LKx0Y3K4s1ZHf8ObhoMgR67LQPzviIGsQbI1pcv9NttIzIqsr+jyhfe9F30vQisUTqlj3oZ7L3ohVBXk/18UWKoOeW0Jk2L7i2RmIV6M/5rED5HPx9yIZyavK7KeadECsOhtI2lIChnkZcRMyswYI1qthIhH+eEAIDxHpFxo2nMhDk3etdja3NToQVJZEwuGezYy7j44JPp4GelgwChYQ20orVbUQB6NkUraAkSgPjJ7ZN0WzaMcXf2NNUXCJw2Nr9758yEHnDBM0z2lLTrFOcT+4JvJVjGn75WDeHbRyKDQKWCSrUlhDxg+ldZcrD1gUiIRLiZ2gST8HrJ9bUNmjvqHRthi5+2MAj76EjAV+B8RvUTxyjTtZgz2BlhZQa0ffPfdQXfSjRrCS5+Nq9P/9GVhKPi/OsHMIpRSwkMoDMS/ldDAACWfX6ICT1aa68mQ0ni4yR+7pKWjzNdDyu5bklnoC1creeF+o54luPDlP+0/YUIW9JzmpwUrA+qDJXIuQ19peYlfc3F4NP3Fbqz7bR15Kx6/Gqz3ILxv1hGLLK1l9bJd1JGbCQwYvZk2n4puZHSManFAsDZJBVPFVyn5aprQimCMaOekkjXgA67y/XSeonT2qypZP2cwv/by8FlgQR6OseYB5e/JiaOqD+Q7TzmZrkVVtuyLVmEAcB2rHQcvj9VrvHFTzy84QVmDa6MjEDy3PQtscsjlX/y/x8OiBsJH/ljgvVox1st7b+NRwaStL2KYkUiuyB0lnQxrsTJ2QRLtDmZD0wW2YRuFymvd9ShF+LTAsDWCVuEsaJRe+ctcsNaVCacWQulfI+0ypKkQYSSGIesrTJca2MRaKaZyJQvT1C8/cbuiowwtHzl7puTrwKgkMM7XX7fD7KadjyUtAtovMeUyXAYZ9YoGcz86MM559wPdBbHR4wgGBtpPd+s2Pf8vjUoaFBG5fr9dHguzRPOC0g/VleJ7S+KpzUmGgDR6kGQLvsbb2O7jX2vC9XWq7+jOU0V9YMG51IVsjDPhEnpL+tNpBsjNUH2zBLiFJsEQdRFsXdTu50/JQGtpgiKuKVBCkmuV/eNum+tED4KBuziQso15sQ9shp4mEn/RT2zhBjT6HnuFiJDNOskvwJkqdAw98BTQxukYptNxTinUFBb1hDbHfmcbCXj57yUBcSqqPi2EFFqxxK3UqoASpEmgwAL7Igjl9pzqHXPsNnyuKtDXFwf1neuRpsfeaQKWklFw2eKaUkoPUg2ewo4zPkuMUp3ov2YpkumK94qE790BeSOpPXMDlIUXNjX6UXjUf/xRVIXDQvmD2Bma7r8zjwEAQ13vc6TKCJ85EuvL0LBteybDl+BI4D3nzikYZX/Ncm4Sri4tVJbiNNIKywdZKZkQOWesfRFN4+errczb063UOWUPdiS0DSDk5hobxz95yQgZJDTKe6olTvoj7ecFvTA6nlJKukb1rwQMVrdVpPdLk202d6Vdmon87PStcNoCeKzbfmm6dHbbb3IO1eC8WWvzXBeBg8FXalG0K8GbeGepkNHmVhBU4hEToZBz8Ty3XfJPuk8NH/BA9iALqV/tEE7tYRQS1uy7uRVxoVwc02NKdyrmP653rhija/Pk7cg0S1gfLVRsNwF1EqV8HH6MUvLlMJfqBKj70led02pQLj5RKK5fJvCJ3PEIKcP9DJBhaYn0ynKD/4GX6f3sjSM+eGIPZGPXp1rMOqnAmbXZsnVWpfvo2R7nk2KcRO9NqgWbuvmgf//Atb3mNHNlPFj/fFuCQZGPrdGQL0unRAPU32e9yDGHnTcmVwe4QQJAhs6vutN8lc5Cwzq8vqVSySCs1wDv2czcM5i98ZvCzPXn6iTbUL9uAJ38+FBeRHFMAgU/yJB2gYpQ5s0OMJoQ4xeHPaaHdJZAgBnf+JAJC1JWpDu1wbWo7BH4wxwg1SL+s48SQ3yrxeuqSzPSIr+4kLvl80Vq86BCXFK1T+Hiu1AVJvaEbUnTy63VKw2r4H+KvqTOmMPdIx3k8fnCTDpIqsKZUu626poCSZBRx3AxHYml1G1owlLTxc6qVpFYqsZ8UcFFamfEXZqfYq+oafa24LpI7vPrqaymdOAtUQohc+NSHgATnhSmsKLwLhQW1VycVl9NtJzY1l5q1ArYmDSCnTXT5dhKFYrJEiWdhiadvHcGo6S9mEb60re9lyeq0DcCziuR1CqeeZYVUHgyEWbY7/JnsRZXzmZwD0QeS0qh22H9w5ZBg1rWvDeQRG6xm0VqGFu62PuvZRe32FUMLEbdE/wx76biGbNSGmwgGC2cV+tTxEbbLdq0Arv75By6A8McLDTNyfsRDvCas1Pdk8L9a2UGi10XfY571Iz9sEv+rXV3z8lT4mtf+RPjPX/UqRlx0/uAJ0+57e9gaInmllAWzRFE2VNuotNupm63IJhY1qoJ5ptW9w7PzOhdKcOqA4koxBgF1+I9qBAIpTnBmAMg2ju+5J2RUZ8997iGsz+l5n7il1CgtzSOEOhEbJABI3FcWTyEga+E/YDmabviryzl2CFKPdIhbY7jTj9ckES9ETG7TBsRTgR8F+NfYIfCH/AkSg/YEJYcqK+WdeKdaFhh471jg6ivrzwYXMcVP+diUBgK5otooJ1JZ6ebTyBR1QOUK00MDOsQmNpwhBQo5XAZIVmJDmYI8LHWUA5Gna95aPoYv/zCRHuuUqNPGbd5VoUdqaAcSebjaNF+yquVDVUoVEaCKtqr/GHnhRUzuK41ciL6Bui1M8UGKjMFBgv2+73NlNWEYO3QM/i9P6hWHHOuWqefEe6iBcEJNcUIYA0F5+4XKqrBZROVkrcwXQTXycnaxGy28KIcGYyaKgoHfAT8tWb8XY9CKfBG+pmSaDzYDlwklaIXXdmh6RRrj5uT7u4EsEpfIHI1lFmbubedLFreV2J7ZpIaUXd3oa5JgBmYATLpPtfoLWrMoHwT3W2BEUOzUPNDNlYujqygXQFAztrcaCGowMY1i26QmgrNruL2aa7hYdwyOystqEAp6bGB7MMqoffNcuutWmmlLgh07nJSuWNRwCUaot8++Dl01unbNsHhjKrlI/szQAbanN1Bv8MRynoV6GtwxeIhJ618KbWlE8rRCKD6TfKlEtml0OSkFMlCgpPZfazENgi+OBi12mDJjX4xHS9GBvx3Lmq4JCqUJzSvy5x0IBlDWmkxME7J9Pbb9KePYcgelSbuvu0NbAkUeX43rJInSlwxpBUNXQmAZ6r8Ts6knMTOT6e40tigB+1wVbI6Do9o0MWzeTpc/l0bsphSRp0tGeS0lv3XWJrOuq+gfUU/korn4kcR2N+yu7EzT07/39A/pb5idHw9GXB8mz7k3wEomW3pzU7yQVNgC9PU7QqvL+jZpLJruHUBowLzTr3mo+YIbS5pPzYiWW8W/ngqpE0foA6TE8rlNpZ/XhiZZ1tgDMd83uXqAgTph6XIIsMWC3EWBkbhf4bqNNW7ZVf5QAiXo7CRxDlk7tQPF6VXRFyAkP+7+1iGb1S+TmwV+quKbgHg+Rhytoak9bGD7et5oCRnQeBMwGXjCSNBs78d5xH2H4Mcyx4wRqmYCx3u4FeP4L24nQ1Q2eqhWFTTBM9bRu+LHEkybQ3HcIXq63Hh4w+fSWKbw4q4iyy5KEV4OTwgFzlJunWYWstx1Vcoxkjr4UKyX+KqxmCSFrerdBTd/9Iqs+63ePxlphBf2rjVSj/iqV2BlSxe/8m99S+B06kKUqinD5SbDEeY6C7BWilJjibg9WfDS9WRyFil3jMJHXeGOJ5kvNtzU+mYZxuPIPDctt8a+4/uwknaMqUHRkFeZdAjl0OVJvd780olR5DCg1H3MNMo8DPLl+ZrTggI/o1qWFmwXgYGfg3Z6gE2HMVgZro+yTJSzafZ51I8Sp4C9pdRkZ9QEFsm7zUB1/vZ0PD+2S+oe4fA3VIy7IO55+eTRLyk0Fyo8+jg4sooBlpenhyuvZSbNchMZiPHoiWqwBHbc3/ur1Xdz7RnxUwmhyf0hu8Yz6YzBIFfEqLvaAcVydW7omAG2ts5ie/92UZR9YEDDnBygPL8P/b1iRZH9uEV1mbWMWfwWnyaev9jGwTZW94LD3hX5QoghkWVIXFHHZYpsMauCWE9QG9hL2yVjHs4YWKi5/mXI7M8q9hL/x3R4sZw5fNR96hlOvbgENLmIiSuuM7uwzu2OW7XGEhi9vrwLy7oQtscv62Q0Lm0oNnhSjpHKCog6y8W5Q/tPZwplcVlfj1zUyV7OehEl7TQO+0A5NDuMabfeVQhiqeT1wbKIJYvAvGpW/+vPw4H9XNYCh+nLExvwbZexWutHgxLaXHMcTKGqkOGkWCJB3U3RK4XSppYKxKPaeXaEApZEiuqAVcjz1WXAx+nEC2XKPfrTAceQ8lho4wovtaRE2p6LhATFjPWF4TrqYQG4tClMbjP1sgvKsZJnk4TfINPTTbc9wsOld13UT3LTjilgwtfUsyEfvX0FZOXQOly0Bs6LwwRRWS4SqkaE5LKgkX7ejteig8XNd08JPGifu6XTad9z0zVXuxWTBDVY0Upup/HvA/FIjLdirQZ08m1xcACUrSDbURdND7zsoFwWYL9QXEhb36eu4o8r6mh/vPvBB00fhK4uxbqF/tcdGHkyuQQJgDPKM5KGiRaXKdFOYNLFKBFXNMiJRtdaNJQf+uy2iwe0v/1wFlFdkkUPfq+Gev8c6MWVb27dV/e+1/3xva1r8hIBsx4YzgNdgP7uq1ZeSMy7RE9ebpKwKCMx0jDpK5Bj+2c8p1uEQfkT/nGphIULwx5KnPJnBfOdgojZ6qLOKZaTGKTGHF1NSDADlLGEYLv79MrlugXjlTxZKzSqGvLKK++AcYQXP2B4VzasRSuaAkc4gKnfmRUO7k71OqDlKS7Ff96Hmpv02y6xSMhWiQHIqvp5FUr54bRVK48mOdcQZLjuXiiHuy0HjX+H012IuKYr2g4/19tL4y4nmC8TTLjnLJqqToWGEKJFULqMP5njqvMuxO60dlF/LDzy7Ldc24UzsoCZv79qLloGEOsCuLsV2MwtHWxYfT8mDhDkBCyHNUbO+kT7ZgbRCuXI5wM7ifgfmnzK5Edqm9r1yNg+PR1X+jQQ4lwkUfCD7aONKksXS4UtJkl0w5AqNBpQ4llkS1sU/5/4EJOqxuThhpfDkTuRQWeCYaUDb+9wPj5EcrY8JlY4oCtcjElQlt400wHLHI/q77NkkVQ0a6PKoxAV1KMxGSyEMm95AK2lrvM33SgPAGKi5sKF9VFxLaPBq2tWBWGG+ntmVoP4ztrB/B7itXVnnclbjP+EWUfXag5a7bOAMOL9iC0nh8aUzD5cdfeO7g9i1Xk+3qVnZ6GNyfji8LV5L5ERZT2FtBDt27gjpsEwsbe5sZj86n8gQ7SFeaxtvtBgD264RIJ7kENC86n9RI6oQ86sVbnOxAUuw4mRf55XXzffJwGyxxdyRODzIBvrOZFvOcoq3V8iz9jKte2iU765gmLydYw7Pn1mSnhl36jvraBCLXHIdCfaHwgZ/KJP15fs6fDlaev6Z2EJlwNeWFZgg+NmOIjX1B8Yjq/3TAXkILA2BwRYH2rrNpUXThqxmQZlhjrhDVLL5ZzBSiYEykqpKXNHgILZYuR7BwdhZVD/ZllmiCjbcJxppyiNV7n1888O4pBBel14Y9UDIQ+6NrVd6l2f1Q90Q18swmZGV0RAOJcPOkwCrve9aJNzaGLVDByOZ813UYbO/zGgvmHhsxylMwA+O4PrFYm0etr0Bq5/L99kXNUtwLBC3zLxuqplnoSmV/TCIvdBk8E9l72SjocOjrXNkkjtf8R+twmaAPXghMTlTvqut+narNUxwUmpLySvGmV4PndeKu1RyX8mVXHWmd5T3tJBzoHe5RMkXzKCDpcOqGUqzTkFAo7nzWTEreCk6uShJsLsFDx7aNskeAKBLlYPREee6UnS6v558jW83rET0KGWn94PphPEclLuHmq7ApCAm1OmKN40zckbdQbmlJSMBjhwpVhb8UwH6lfWU4Ki7QjsMaBmwCqv05I7ooe0xEn3UTziG1ufWTxr302blx9SM76PmL+D8L9rx6fVVxH6IIBkz4QbQgKc3p66bRZ2vdf7gSQafIRY9XuQ5mPmSVsoCzX6VBgmthsjlKTKTY3JwdZKrVUt6rsT4E/EjZiFdmy4C0Xfk1poykkA3mi+el+k3p+R1PyIWfgyusDyyPKzYixG0jDiQldLqIy6944Zv550qLXGhg13wzERtdaIW1aQIIRj4ilNI0CXaGDomcloSWAIFap0X5Z+s6Ibj2Up7FKpxlMVvy0e/wiYmLHmr8M7vHuITXRtYqvP6+w5Qi4SgUZHII90E1o19IUce8TO7Xv3+lWBMSEdFa996qjpnZVAzyIbfpJVAzFnMg+UGJr12fodkbLOVXIdBn/zw1cL2l3l+gBt36niiddU+QTpQxVzor6qbzzi0q5Hm+bIg08typb6LJRPtSzcYioR0JISEEn4KvhPWukdZaehfDhaHGxPDLdbWp6osbmmFrnjlAKSWDfws2xAl/zef8iWMqd0wGh1dD8WJkeNc2uMxKGjJZMib1qAxupAF+s16OaCvuBF40v6k7EXd7A0CcLUIFfdgbGnrtW9KY1h1ksBD9nerqW+S+RuEevrUKPb9COM18ZClxe0FNFRhn+Sgc1kQfh3+Zq3A5tImn3yL2vrTlRYgNE51qz7i2nyQCPYAEahJ0x3/xLiSDya5y51EXRxySD4gz4Om/fHk7WsChqH28jdpuU9kpIr5hpj0BnbAhVysxVKxPTWZam8YuUeFS7NxDr0SXOscIauVT1sL2KBgERQCW9iTrQdaRuKrxsCqsNw0M1MY4YkEQxYcp/qAjarFh8ua+V/twOYlUMg/0op8cSFaV0A2ZFL3Ixai9erB+fEpyyLj+lkcXwkEP0yjyyoN8bIpphoyMiLZ96V495sNZWbn0r0flHXpJC+gEtlvRN0dTH6vAz419Z76zvVEA1/M1enXgwUO+6dsSJZwd1XSSDW2u93XpsbGrgnoqaFDenDvHHNJBsSv2KgfRAd8/nzegtEU1vYwYJpBkFGIkS+dxg5PKrHMGHlQgOx080mWPJ1KE1RwNqIRUiVC6nFw1VeVE717YH+9UQwvLznVNe+x4k1M2CI7SoRTof/UmhHNRCTcu8JJXwnYIiwwwstna8OpKFafcYRaelPyl6UZZKRmxw767/JfhcuFz8c1S4iTZfoXxUK3jSTV0uAV3cZetMtg66kSnIxESWpsQUlpMqsvYuZ0aTNAs8aRviVd7fJN/P2CIVBx+KVWeM2g9LrqBKzgCvny3zvmEQ8CumMcvD1mlV/5oTqmyyk1P5o/QB2cpS0qhtzlif6rlRFL/yLu9s0+emslx3uXlYN8swnkD+e/Ft3fPk1Vj0MCZn+Ek3AfMQRKIDU2G0CJ36rcaWr0g9nPBP/35dp/fpmfTxU7R/PjzB+pyNY/Otn0L4Bg==,iv:OkXxO6zoUnjUnvvHtoXLFCkeugNH6s1xqsk0Bs8xSuE=,tag:Ag5FC9AlXRB66dgnc5k77w==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:01Z"
+    mac: ENC[AES256_GCM,data:RwkeIFbd8L6xl2y5Nbeq3EQryIIqHOdgqcXQS4wCp7kh/+Au47vafWMT6zl1BbSUFlHb3WDd+fpM04cK6syKmllKUmL9V9DPmdMb1DzWzIL1g0Ut9p/WBSpffKUL/pGDBkZs8sZmckKPFkA1/kpw8/r6ZfNV676ek9OZHEEprak=,iv:1CKGZA3oPhV/4kvTXRLn5hv4jTSmiJrOy3PjV5+wszA=,tag:kG2MbUtLrL8HM68uH4Wveg==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:01Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPARAAqz/CzZArMREdTrDr36dBz0so7Dfwb2fxTocWsrLJA6wL
+            sXfxtUds8X0INjlRDC4sCQu+RxgTmGpF4C1Ql/qhhNXIdcLjNFrYFOJ627I8M6dY
+            8eLbEJTZHkP7++ByHmm1rlzSpIy7Bp4r/Xu4ZJPh5ZrnGdDK/DUMJlTC9WJmbRMv
+            Sl1f9MQ/yGkHnbv4CeCbusRJ4bqyijCyYevA5XCq9MEcCgGcoGz3k0u+PxEblQgu
+            OKUrniyfWW2CEMk6LiWWYpYHtd9FZK9vvFOMmHbsmxB9iTMQxRpwzVcPBaiPBKDE
+            yzJuQv9BhoYDnK9IHsG+uddcYn5skE5Ast6b4OyDDYwTlkefWrGkhEKeb6g1l5fp
+            UPpED/v2fD5J5vJvVk8RWpz+SMSi/EUH6TNm9eYkoFZdG7z+ZDOfICo1m1UQNeSp
+            iGk59kLkcxwzTS+IcsUztWUVTp/QqlHDn1bx1k0q0r2n01LSQG1sTxbv+FqMS3Pb
+            VeeEbPjDtzQdamo2bLz1+S0rF3yJMmz6cVbVm8/vky3uTkx/c4bpfEeLTLS6E78Q
+            pNhpMjyyhzISwMczRiRgf+ubVky6D4ak/5TwEUgT1hXpAwIUw35HcD6pBJrxrls3
+            Cs45VBCooMZFlAChQZFZiX3rGWyJBOsqapvCbuNTt/aqao7JMfyo/dM5XR4ycPrS
+            XgHzjIVBXOulKDFPj6r2VKmK7BbHWttK8d9SrKGran/Vsk0ozpfc3pOh5WA6rWXX
+            I/AKob2e647JyxUpCX9R/YNBfTBa7CP1rh4bIQwdnyJ7GzdfscXB/wQvtacMktk=
+            =fu1a
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/deployment/icn-source.yaml b/deploy/site/vm-mc/deployment/icn-source.yaml
new file mode 100644 (file)
index 0000000..77fb400
--- /dev/null
@@ -0,0 +1,11 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+    name: icn
+spec:
+    gitImplementation: go-git
+    interval: 1m0s
+    ref:
+        branch: master
+    timeout: 20s
+    url: https://gerrit.akraino.org/r/icn
diff --git a/deploy/site/vm-mc/deployment/machine-1.yaml b/deploy/site/vm-mc/deployment/machine-1.yaml
new file mode 100644 (file)
index 0000000..bcf873e
--- /dev/null
@@ -0,0 +1,51 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: machine-1
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/machine
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        machineName: machine-1
+        bootMACAddress: 52:54:00:c6:75:40
+        bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/ab389bad-2f4a-4eba-b49e-0d649ff3d237
+        bmcUsername: admin
+        bmcPassword: ENC[AES256_GCM,data:TisMKYhUeuY=,iv:ke4jZA8Yk20pDmPW3e4h6GrCRK3ppkwzkAqhB0nc+Bc=,tag:E3cAAfkxFDfb2q2RU0esjg==,type:str]
+        bmcDisableCertificateVerification: true
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:02Z"
+    mac: ENC[AES256_GCM,data:VwIqkbsWTv0tSuaA07qxmmaFk2qs6IfjOfw1g8rlN5o2rsfUPKmWBk3pspvMmDFC6y1LPfhvuJgWtuXW0Y3XAWBTbmXu8LrhcdgNXfQ/a6BccJ2Sv6iTm5vOm3swBAM0UW/nDFTYjkaZta0E2r6dAgNPGK4V0A98dj3lqxtyIxM=,iv:BVodjggL8ohvU6efYpbpL8Gd7Ot+zeep5H0tlL69kHw=,tag:ykFEdKrrLPiAk2X9EMy+Bg==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:01Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ/8DC8seiD7GnLYVbi0sN8xWtjUy3SrcunjhRK+YNCeVMT2
+            59pYmQiWGcLvDHad16tim5XW2BjtcnOqOVQM6rxdyeKAnZvcSCDkI/+MJko/tQ75
+            5egOD8v82c4vEr9xEJdfdMPs9KEeg8W78kS5zSuyN3bt+Qc7ylbIYzNbIm9yRNLH
+            xYakkh5CXbeZGDCxig0KEe74o+k0ZfmukNdDygjdkjI8QLHtMRaLpxhUPb8kflPX
+            BImsYJ559BYdtmrstXl4n1iUE0wKpm+Rs3c/3ZPBy75inIVOOVRjKpjzoolxuqI/
+            LPjlB2+dDquJD+vTfz6TYSfvTdEniJJF8NDc3oAA4+iWIwvNlQ3YRC4qg3tpaKQI
+            29Tjm43Iux88zcP3A+jL3WTjcEyiXkpziq+ZoloFZwBVV9koMdJiaYuQcsT7GnvX
+            g07p04p8k9/R+vSZhS+fF/oZ0NwzNd4jLMdARfHh7wXCVz7dEN58bzzuauHbHw3r
+            Js6Luo+96jXxqW46kPeQtUhd3BqJTPPK5rGnIZLhT5UdkYfcCNTvpyWcv1FifeYc
+            SpVIb9YctTLIVOWJFdenFZlWYI9gu/g20qY5s/XpNx5rjn4FkhTlxIP93BaEvI03
+            Psh1IbGCAIvjz29e2ll0dkXauc2+1iO4kLm0Cf8sTv/xhjtIBpgx2rUuKhAOBUXS
+            XgFNEe8M1xCvdUF02HqR2swS3NpPqPq4LlCGawTYkA/DVthPxr5Uf0q1y6aKET4V
+            /OUvkwVXlt6X368PzvtriqknkwZ5HPRqylF+paPq0y05ewYfGhuc+UEQ3yOAyDk=
+            =9ntm
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/deployment/machine-2.yaml b/deploy/site/vm-mc/deployment/machine-2.yaml
new file mode 100644 (file)
index 0000000..dd90617
--- /dev/null
@@ -0,0 +1,51 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: machine-2
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/machine
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        machineName: machine-2
+        bootMACAddress: 52:54:00:6f:d6:97
+        bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/8d747997-dcd1-42ca-9e25-b3eedbe326aa
+        bmcUsername: admin
+        bmcPassword: ENC[AES256_GCM,data:HQLiGUjzEBw=,iv:kaGwIxd9dFjL5/6HTjIGkHGZKREIX8KILlKTS+ae2K4=,tag:qxhRuxwg+oP1L6SIz0YiIw==,type:str]
+        bmcDisableCertificateVerification: true
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:03Z"
+    mac: ENC[AES256_GCM,data:fjOvawOmb4lNsboVJy9+hjkkZXN0n1RdDzUzmsppAOgr6xECFlG48BY7Wj0wO1jr36PwjNjSw13zY8Eqpw2Y2BNVfxAaAAFCdwRuwHVchDAFZ8KLaSyb3hB/seBT94nE32BVbElJiTeI7SCQvdHqXEDnA438QFXfPIxMCMCzfAE=,iv:GlQaL55DTF6ndbevhRppdH9fXR+l0Dc4MnmLU2Tzh4Y=,tag:NPe0j+ksqXQ/IhPuowIPng==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:02Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ//VorlkeFGlVl1j/2FFkJOnwmVTpQi9ez9JC45qccQQqlC
+            BnfF79wQQw3MQBUTVoVVVdi7TgzqJm7csfDagkyudN2HhXebb+t/KBRqYXB4tlGc
+            yc6xk1I4re7jZWexrO5wOD8wCDao5vqUr5YCb9j6cpCR2YHNINdLQyY/R0Q+oc1h
+            jucQmAMgWrS4eKMy32wEwiqcMkziSXwY8+NFuEG6jPzXU9JuEfW4XZLanBKLtDIg
+            tf8Eal93MS4w7FXfupJS6PZiyg56g9DxQVEsGEQBSYxy9di+ymtozi37xHRXPRwl
+            ahr09gayiOlPYbhlcgfu4bgV4pUjj+lyLKy++/wu9+qLZIwStlBwlSwlhuzVMaV8
+            uRemXHqBDsMFyulbCJlwIKDFe53Un41FcCvrLdlEDiXLTBaMiu7O/b9j5h6z7LkB
+            ov8rMuewDnCjPqMX8Hq37oaVRwfTqlIJww9D9k21Xdy3RqhavloUIPNltMN/Dqvw
+            HRkpaqHHPJNnmwi8xorMfEYrgoYSYoFZA4Q0iCCtgceXQhgHAp5BNvUQRcptzsK7
+            XZ2+K27IVXf+EkMpBKM0reXSUKO248Pk9IQNGb4glleEXJZbUbfHLh9MUCcrVwG0
+            W2t0h6eFLDXeZKqgijrq2+40YsVyvLbJqcq79wgmSNtqpqjM9bwDdiFYhUZuDvDS
+            XAF8o0PmxD065/qwxWVQADHBPVtgHw1ICPJZm2fMG4iBs1Y6fZEGOBslaMfg4KBa
+            iUsY1Qp1iVpb7IHbwkjh4F0cjQoVawbcSicOOUBY1ZIDtCgklVyex0/tj6CQ
+            =daMD
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/deployment/machine-3.yaml b/deploy/site/vm-mc/deployment/machine-3.yaml
new file mode 100644 (file)
index 0000000..65e0d70
--- /dev/null
@@ -0,0 +1,51 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: machine-3
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/machine
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        machineName: machine-3
+        bootMACAddress: 52:54:00:50:63:44
+        bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/ac3527cc-1223-4794-a0a8-3f6a12f69f17
+        bmcUsername: admin
+        bmcPassword: ENC[AES256_GCM,data:NTXOO995yGU=,iv:jN0ZYhXTRuJ1brnbvEbImQCQPAAtRIM5gthvAUY0wr8=,tag:dVWCZrK4VYaF8Y3Sx28Z/Q==,type:str]
+        bmcDisableCertificateVerification: true
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:04Z"
+    mac: ENC[AES256_GCM,data:1Fquam+UEQXpQ7UQfFtUl6uufigcnDlSVuKLYr+ghQRCKZlEfDhm+WyWVns7WE0iWPlYDl1AOx7xqrlQi3ubyG1Rati7i9ntR4jUgvrAOxz93B+RD30aCSfLW4SfdhsGZUwEzr6CmIRvheQX+40xnhF3/9mE486HzYvYqWRqyUA=,iv:M+mCa+7CY6DG1kcNNI1KHlbR4I7yjLAK9EEDukciOtk=,tag:VKMSqwsZuYVGL1yuTAlFOw==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:03Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ/+NQDPJOBkylBJRzeM+jT/SwL+3yBH1618JBK2Said9D8h
+            JmOFyMdaK83c822F9LxBnErh7f2pamWQdeTnjyrIkPgjwaM6q8dgrnqj8S+hprUL
+            zMlHQNcTjpmjPl4im/MHosd1umBkMKKDIhD5EI27cl3VNh6ribuPAcL4Veve5Aeb
+            zT2GcjL+zVNpsZhS4sSuSH06mW3UIjiDyIvj8aFTpZ974Ah54M9FnjyZ7G+13fS+
+            dUln9J1W3CxIHhmNaISAmHksEGC6GWQKDBtaDl1gIyLgcbA5PAPn6W0QNnl5G1XF
+            bJL4UOCoY2CQb1t743/N6d286xjzHELE62u2sBN/Akhlt593kFZCs9KxEB/sczCw
+            Eb1mROOcVboHtv3FG+JYayVKtR5I1OT3LRW5meQwwFIM4IXbENNP1WeFyxafJ7gA
+            lxhVRRp/y5OwY0E1bUrFv/ywf0B+8xvqUEsTUGM7ScF7gLMrwzNh/9MevJq/Xgc9
+            RqbBVuMaWpQcS3JvCLYlLkeKYKwWN2zue8p5mZVABV6muCl6lt2OrwijnthI47xD
+            aqm+bIdbt1rkPHDoaiMmjXdNA2y1LknX/uLkTwCXlopaAvG3inzRNWd5l0hk/bj0
+            o5m+GxhXykVngF/C4WrA4YvJt183fwOZ2zHPXzDPJr8MkOqPtY5KpiQKt/kiUNzS
+            XAGijQ433tDjHsVtaXf4VTWPJmwro344cz+XbDK3GUJ4/G2ffKEBwSA0wpMTH9uA
+            kXEWKihXhDx3qYJaNi0W+c1OsFVbHOUpyXkL05TW2n2lLW/7HyNJ54zFxzM4
+            =JJlS
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/deployment/machine-4.yaml b/deploy/site/vm-mc/deployment/machine-4.yaml
new file mode 100644 (file)
index 0000000..f6ce1e5
--- /dev/null
@@ -0,0 +1,51 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: machine-4
+spec:
+    interval: 5m
+    chart:
+        spec:
+            chart: deploy/machine
+            sourceRef:
+                kind: GitRepository
+                name: icn
+            interval: 1m
+    values:
+        machineName: machine-4
+        bootMACAddress: 52:54:00:7a:b4:55
+        bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/41d41744-3dc6-453d-a498-dbd795c5d748
+        bmcUsername: admin
+        bmcPassword: ENC[AES256_GCM,data:yQyefgnkxJ0=,iv:sDEd1oMnQsDOumMf+Lbqxn91YAIoFh6YE+t2/K6z/2Q=,tag:70UVJP8ecqy4OTIyDE6imA==,type:str]
+        bmcDisableCertificateVerification: true
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-03-08T18:31:04Z"
+    mac: ENC[AES256_GCM,data:yYArxxj1YnKCGCpPTF0UqwjFBr1vXWiOIvscNyKWy4iGZrhjxTfn4C+UBbWARWT+H+xbuyMvmGVkWhYQzkTwLxT53HiWZyWXGO1A0nmauPnfhFh8TD0SYDNGnzvK2zvquclw/ZCwAv6ari8Gp/VprLBl/kdmK+R8XfCM5f9o3JU=,iv:vcVHOilp2MEiPryEoRDSVH6+W3VN+GsW9ow1w7PY+tQ=,tag:4S9Dd2NS+8JOlVmQXmWx8Q==,type:str]
+    pgp:
+        - created_at: "2022-03-08T18:31:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4SX7nk+q+zPAQ/5AZq9ISz8y8+OMWlLaiXcfYodfbxyL9LAUutJqzToM4yM
+            4jQGaJ1cWU1WfvuqbgSJMbo5Z1vBQucYaVMgRMrcnqFTEAgc0Al2LUUSXfK20Dfn
+            4KlgyYUFDRCXzQ8BtViWuiM/cTwhbGujmSgVVO8Gkb+fUKT7/fhXVRrtD4Rp7fa/
+            iMXI64hKknJuhp2a5vq8D7ZmsHa2HpHee2EAIecAL/ULKvcHV30E/pO0w/FOQEhT
+            P7u+zEYHxjRi/E4jbjXjQo6SMqCSQpMVC5YHyxwbHga/X6csoqz8g8U/p6Ht032x
+            KtpWgfcVgNaJsnaYzBxUnin6NXu3YFDASbTF//p2KhUDF7rY+1NZvPnAlUGG8j3H
+            CQxyxLlbMbAPIEo+7M60UOn+96zMzLtQeYlKHhV7LChDIgxBJU9gggfjYL1Z+6Ev
+            UX+jDEcuQLP1/4yUwgpCHaSPnBpSvX0+Pce71sUeAZYQ0ZFXow4W00mSOHiKiRU5
+            G5rQgvkKPsIPEu9OTVsW4kPsRcfifPxHWkDhx8y1zR3SodmF2QdNENKPbxBttaZg
+            wFl1iREjLVZdTxG5OcK06AUnDcwOy2Xn+3ZQTleTRQPHl4N3NcEf9zL/oJgHmeJ/
+            Fy8ddxP82sDDcDS1HHFtxV+LqRmiS17l6lh+ohYcU4DBnaBwIl7vFzYuvt6sx/rS
+            XgFks1kHiLU1it6z7DWiYaZjIYZMk+yl5NzfRRZU6kH4ODMuL7/8vbksLgfkUsJu
+            EGtJSeLROdaymAOc03/CMdKz9eZ2f9cpkKoZVnL0E1e0IslqMkW+1icfIfsZhyg=
+            =dXIt
+            -----END PGP MESSAGE-----
+          fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0
+    encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$
+    version: 3.7.1
diff --git a/deploy/site/vm-mc/id_rsa b/deploy/site/vm-mc/id_rsa
new file mode 100644 (file)
index 0000000..cc6d521
--- /dev/null
@@ -0,0 +1,38 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----
diff --git a/deploy/site/vm-mc/id_rsa.pub b/deploy/site/vm-mc/id_rsa.pub
new file mode 100644 (file)
index 0000000..0072da3
--- /dev/null
@@ -0,0 +1 @@
+ssh-rsa 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 root@jump
diff --git a/deploy/site/vm-mc/sops.pub.asc b/deploy/site/vm-mc/sops.pub.asc
new file mode 100644 (file)
index 0000000..34a3c25
--- /dev/null
@@ -0,0 +1,63 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=8GKa
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/deploy/site/vm-mc/vm-mc.sh b/deploy/site/vm-mc/vm-mc.sh
new file mode 100755 (executable)
index 0000000..4e1aa71
--- /dev/null
@@ -0,0 +1,183 @@
+#!/usr/bin/env bash
+set -eux -o pipefail
+
+SCRIPTDIR="$(readlink -f $(dirname ${BASH_SOURCE[0]}))"
+LIBDIR="$(dirname $(dirname $(dirname ${SCRIPTDIR})))/env/lib"
+
+source $LIBDIR/common.sh
+source $SCRIPTDIR/../common.sh
+
+BUILDDIR=${SCRIPTDIR/deploy/build}
+mkdir -p ${BUILDDIR}
+
+SITE_REPO=${SITE_REPO:-" https://gerrit.akraino.org/r/icn"}
+SITE_BRANCH=${SITE_BRANCH:-"master"}
+SITE_PATH=${SITE_PATH:-"deploy/site/vm-mc/deployment"}
+
+FLUX_SOPS_KEY_NAME=${FLUX_SOPS_KEY_NAME:-"icn-site-vm"}
+FLUX_SOPS_PRIVATE_KEY="${SCRIPTDIR}/../secrets/sops.asc"
+
+# !!!NOTE!!! THE KEYS USED BELOW ARE FOR TEST PURPOSES ONLY.  DO NOT
+# USE THESE OUTSIDE OF THIS ICN VIRTUAL TEST ENVIRONMENT.
+function build_source {
+    # First decrypt the existing site YAML, otherwise we'll be
+    # attempting to encrypt it twice below
+    if [[ -f ${FLUX_SOPS_PRIVATE_KEY} ]]; then
+       gpg --import ${FLUX_SOPS_PRIVATE_KEY}
+       for yaml in ${SCRIPTDIR}/cluster*/*.yaml ${SCRIPTDIR}/deployment/*.yaml; do
+           sops_decrypt ${yaml} ${SCRIPTDIR}
+       done
+    fi
+
+    # Generate user password and authorized key in site YAML
+    # To login to guest, ssh -i ${SCRIPTDIR}/id_rsa
+    HASHED_PASSWORD=$(mkpasswd --method=SHA-512 --rounds 10000 "mypasswd")
+    ssh-keygen -t rsa -N "" -f ${SCRIPTDIR}/id_rsa <<<y
+    SSH_AUTHORIZED_KEY=$(cat ${SCRIPTDIR}/id_rsa.pub)
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       sed -i -e 's!hashedPassword: .*!hashedPassword: '"${HASHED_PASSWORD}"'!' ${yaml}
+       # Use ! instead of usual / to avoid escaping / in
+       # SSH_AUTHORIZED_KEY
+       sed -i -e 's!sshAuthorizedKey: .*!sshAuthorizedKey: '"${SSH_AUTHORIZED_KEY}"'!' ${yaml}
+    done
+
+    # Create root and intermediate CA certs for use by Istio in each
+    # cluster
+    clone_istio_repository
+    local -r certs_dir=${SCRIPTDIR}/../secrets/certs
+    rm -rf ${certs_dir}
+    mkdir -p ${certs_dir}
+    certs=${ISTIOPATH}/tools/certs
+    make -C ${certs} -f Makefile.selfsigned.mk ROOT_CN="EMCO Root CA" ROOTCA_ORG=project-emco.io root-ca
+    find ${certs}/root-* -exec cp '{}' ${certs_dir} ';'
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/clusterName:/ {print $2}' ${yaml})
+       make -C ${certs} -f Makefile.selfsigned.mk INTERMEDIATE_CN="EMCO Intermediate CA" INTERMEDIATE_ORG=project-emco.io ${name}-cacerts
+       cp -r ${certs}/${name} ${certs_dir}
+       kubectl create secret generic cacerts -n istio-system --dry-run=client -o yaml \
+           --from-file=${certs}/${name}/ca-cert.pem \
+           --from-file=${certs}/${name}/ca-key.pem \
+           --from-file=${certs}/${name}/root-cert.pem \
+           --from-file=${certs}/${name}/cert-chain.pem >${SCRIPTDIR}/${name}/istio-cacerts.yaml
+    done
+
+    # Encrypt the site YAML
+    create_gpg_key ${FLUX_SOPS_KEY_NAME}
+    for yaml in ${SCRIPTDIR}/cluster*/*.yaml ${SCRIPTDIR}/deployment/*.yaml; do
+       sops_encrypt ${yaml} ${FLUX_SOPS_KEY_NAME} ${SCRIPTDIR}
+    done
+
+    # ONLY FOR TEST ENVIRONMENT: save the private key used
+    export_gpg_private_key ${FLUX_SOPS_KEY_NAME} >${FLUX_SOPS_PRIVATE_KEY}
+}
+
+function deploy {
+    gpg --import ${FLUX_SOPS_PRIVATE_KEY}
+    flux_create_site ${SITE_REPO} ${SITE_BRANCH} ${SITE_PATH} ${FLUX_SOPS_KEY_NAME}
+}
+
+function clean {
+    kubectl -n flux-system delete kustomization $(flux_site_kustomization_name ${SITE_REPO} ${SITE_BRANCH} ${SITE_PATH})
+}
+
+function is_cluster_ready {
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/clusterName:/ {print $2}' ${yaml})
+       if [[ $(kubectl -n ${SITE_NAMESPACE} get cluster ${name} -o jsonpath='{.status.conditions[?(@.type=="Ready")].status}') != "True" ]]; then
+           return 1
+       fi
+    done
+}
+
+function is_control_plane_ready {
+    # Checking the Cluster resource status is not sufficient, it
+    # reports the control plane as ready before the nodes forming the
+    # control plane are ready
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/clusterName:/ {print $2}' ${yaml})
+       local replicas=$(kubectl -n ${SITE_NAMESPACE} get kubeadmcontrolplane ${name} -o jsonpath='{.spec.replicas}')
+       if [[ $(kubectl --kubeconfig=${BUILDDIR}/${name}-admin.conf get nodes -l node-role.kubernetes.io/control-plane -o jsonpath='{range .items[*]}{.status.conditions[?(@.type=="Ready")].status}{"\n"}{end}' | grep -c True) != ${replicas} ]]; then
+           return 1
+       fi
+    done
+}
+
+function insert_control_plane_network_identity_into_ssh_config {
+    # This enables logging into the control plane machines from this
+    # machine without specifying the identify file on the command line
+
+    if [[ ! $(which ipcalc) ]]; then
+        apt-get install -y ipcalc
+    fi
+
+    # Create ssh config if it doesn't exist
+    mkdir -p ${HOME}/.ssh && chmod 700 ${HOME}/.ssh
+    touch ${HOME}/.ssh/config
+    chmod 600 ${HOME}/.ssh/config
+    # Add the entry for the control plane network, host value in ssh
+    # config is a wildcard
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/name:/ {print $2; exit}' ${yaml})
+       endpoint=$(helm -n ${SITE_NAMESPACE} get values -a ${name} | awk '/controlPlaneEndpoint:/ {print $2}')
+       prefix=$(helm -n ${SITE_NAMESPACE} get values -a ${name} | awk '/controlPlanePrefix:/ {print $2}')
+       host=$(ipcalc ${endpoint}/${prefix} | awk '/Network:/ {sub(/\.0.*/,".*"); print $2}')
+       if [[ $(grep -c "Host ${host}" ${HOME}/.ssh/config) != 0 ]]; then
+           sed -i -e '/Host '"${host}"'/,+3 d' ${HOME}/.ssh/config
+       fi
+       cat <<EOF >>${HOME}/.ssh/config
+Host ${host}
+  IdentityFile ${SCRIPTDIR}/id_rsa
+  StrictHostKeyChecking no
+  UserKnownHostsFile /dev/null
+EOF
+    done
+    # Add the identity to authorized keys on this host to enable ssh
+    # logins via its control plane address
+    authorized_key=$(cat ${SCRIPTDIR}/id_rsa.pub)
+    sed -i -e '\!'"${authorized_key}"'!d' ${HOME}/.ssh/authorized_keys
+    cat ${SCRIPTDIR}/id_rsa.pub >> ~/.ssh/authorized_keys
+}
+
+function wait_for_all_ready {
+    WAIT_FOR_INTERVAL=60s
+    WAIT_FOR_TRIES=30
+    wait_for is_cluster_ready
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/clusterName:/ {print $2}' ${yaml})
+       clusterctl -n ${SITE_NAMESPACE} get kubeconfig ${name} >${BUILDDIR}/${name}-admin.conf
+       chmod 600 ${BUILDDIR}/${name}-admin.conf
+    done
+    wait_for is_control_plane_ready
+    insert_control_plane_network_identity_into_ssh_config
+}
+
+function is_cluster_deleted {
+    for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do
+       name=$(awk '/clusterName:/ {print $2}' ${yaml})
+       ! kubectl -n ${SITE_NAMESPACE} get cluster ${name}
+    done
+}
+
+function wait_for_all_deleted {
+    WAIT_FOR_INTERVAL=60s
+    WAIT_FOR_TRIES=30
+    wait_for is_cluster_deleted
+}
+
+case $1 in
+    "build-source") build_source ;;
+    "clean") clean ;;
+    "deploy") deploy ;;
+    "wait") wait_for_all_ready ;;
+    "wait-clean") wait_for_all_deleted ;;
+    *) cat <<EOF
+Usage: $(basename $0) COMMAND
+
+Commands:
+  build-source  - Build the in-tree site values
+  clean         - Remove the site
+  deploy        - Deploy the site
+  wait          - Wait for the site to be ready
+EOF
+       ;;
+esac