38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
apiVersion: kyverno.io/v1
|
|
kind: ClusterPolicy
|
|
metadata:
|
|
name: keycloak-client-config-cloner
|
|
spec:
|
|
rules:
|
|
- name: clone-client-config-to-keycloak
|
|
skipBackgroundRequests: false
|
|
match:
|
|
any:
|
|
- resources:
|
|
kinds:
|
|
- Secret
|
|
selector:
|
|
matchLabels:
|
|
keycloak.forteapps.net/client-config: "true"
|
|
exclude:
|
|
any:
|
|
- resources:
|
|
namespaces:
|
|
- keycloak
|
|
generate:
|
|
apiVersion: v1
|
|
kind: Secret
|
|
name: "{{request.object.metadata.name}}"
|
|
namespace: keycloak
|
|
synchronize: true
|
|
data:
|
|
metadata:
|
|
labels:
|
|
keycloak.forteapps.net/client-config: "true"
|
|
keycloak.forteapps.net/source-namespace: "{{request.object.metadata.namespace}}"
|
|
annotations:
|
|
keycloak.forteapps.net/source-name: "{{request.object.metadata.name}}"
|
|
keycloak.forteapps.net/source-namespace: "{{request.object.metadata.namespace}}"
|
|
data: "{{request.object.data}}"
|
|
type: "{{request.object.type}}"
|