From a92d99e4c3576ce07eedcbc0c168bbb5581212e5 Mon Sep 17 00:00:00 2001 From: Patricia Salajova Date: Wed, 8 Jul 2026 12:22:39 +0200 Subject: [PATCH] Update links and README.md --- core-services/ci-secret-bootstrap/README.md | 9 +++++++-- core-services/ci-secret-bootstrap/gsm-config.yaml | 2 +- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/core-services/ci-secret-bootstrap/README.md b/core-services/ci-secret-bootstrap/README.md index 3eff0f6081ee0..8c2275c42fb7f 100644 --- a/core-services/ci-secret-bootstrap/README.md +++ b/core-services/ci-secret-bootstrap/README.md @@ -2,8 +2,13 @@ ci-secret-bootstrap =================== The [ci-secret-bootstrap](https://github.com/openshift/ci-tools/tree/main/cmd/ci-secret-bootstrap) tool -populates secrets onto our ci-clusters based on the items saved in Vault. -This directory contains [the config file](./_config.yaml) to run the tool. +populates secrets onto CI clusters. This directory contains two configuration files: + +- [`_config.yaml`](./_config.yaml) -- legacy Vault-based secret definitions (being phased out) +- [`gsm-config.yaml`](./gsm-config.yaml) -- GSM-based secret bundles and mappings + +For user-facing documentation on managing CI secrets, see +[Adding a New Secret to CI](https://docs.ci.openshift.org/how-tos/adding-a-new-secret-to-ci-gsm/). The defined target `ci-secret-bootstrap` in [Makefile](../../Makefile) runs the tool as a container. diff --git a/core-services/ci-secret-bootstrap/gsm-config.yaml b/core-services/ci-secret-bootstrap/gsm-config.yaml index bf5bb604b74c8..a698f75aa9313 100644 --- a/core-services/ci-secret-bootstrap/gsm-config.yaml +++ b/core-services/ci-secret-bootstrap/gsm-config.yaml @@ -1,6 +1,6 @@ # GSM Configuration File for Secret Management # This file defines how secrets from Google Secret Manager are bundled and consumed in our CI. -# See docs for further info: [TODO docs link] +# See docs for further info: https://docs.ci.openshift.org/how-tos/adding-a-new-secret-to-ci-gsm/ cluster_groups: build_farm: