Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions core-services/ci-secret-bootstrap/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,13 @@ ci-secret-bootstrap
===================

The [ci-secret-bootstrap](https://github.com/openshift/ci-tools/tree/main/cmd/ci-secret-bootstrap) tool
populates secrets onto our ci-clusters based on the items saved in Vault.
This directory contains [the config file](./_config.yaml) to run the tool.
populates secrets onto CI clusters. This directory contains two configuration files:

- [`_config.yaml`](./_config.yaml) -- legacy Vault-based secret definitions (being phased out)
- [`gsm-config.yaml`](./gsm-config.yaml) -- GSM-based secret bundles and mappings

For user-facing documentation on managing CI secrets, see
[Adding a New Secret to CI](https://docs.ci.openshift.org/how-tos/adding-a-new-secret-to-ci-gsm/).
Comment thread
psalajova marked this conversation as resolved.

The defined target `ci-secret-bootstrap` in [Makefile](../../Makefile) runs the tool as a container.

Expand Down
2 changes: 1 addition & 1 deletion core-services/ci-secret-bootstrap/gsm-config.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# GSM Configuration File for Secret Management
# This file defines how secrets from Google Secret Manager are bundled and consumed in our CI.
# See docs for further info: [TODO docs link]
# See docs for further info: https://docs.ci.openshift.org/how-tos/adding-a-new-secret-to-ci-gsm/

cluster_groups:
build_farm:
Expand Down