From da4f1540dec64779c01f7d0258b1a748ace9b131 Mon Sep 17 00:00:00 2001 From: James Gu Date: Mon, 4 May 2020 13:57:29 -0700 Subject: Treasuremap 1.8 integration Upgrade pod 17 to Treasuremap 1.8 prime for CNTT RI-1. Added deploy script enhancement to include pregenesis, certs, and wrapper for shipyard cli command. Added clean-genesis script to properly clean genesis node for redeployment. Signed-off-by: James Gu Change-Id: I4c150ef216d5eb631a0980c72b3c6c80a55788d0 Signed-off-by: James Gu --- .../kubernetes/container-networking/etcd.yaml | 127 ------------------- .../kubernetes/container-networking/policies.yaml | 135 +++++++++++++++++++++ .../software/charts/kubernetes/etcd/etcd.yaml | 131 -------------------- .../software/charts/osh-infra/fluentbit.yaml | 18 --- .../software/charts/osh-infra/fluentd.yaml | 18 --- .../software/charts/osh-infra/prometheus.yaml | 33 ----- .../charts/osh/openstack-compute-kit/libvirt.yaml | 22 ---- .../charts/osh/openstack-compute-kit/neutron.yaml | 72 ----------- .../charts/ucp/ceph/ceph-client-update.yaml | 26 ---- .../software/charts/ucp/ceph/ceph-client.yaml | 100 --------------- .../software/charts/ucp/ceph/ceph-osd.yaml | 30 ----- .../software/charts/ucp/divingbell/divingbell.yaml | 20 +-- 12 files changed, 138 insertions(+), 594 deletions(-) delete mode 100644 site/intel-pod17/software/charts/kubernetes/container-networking/etcd.yaml create mode 100644 site/intel-pod17/software/charts/kubernetes/container-networking/policies.yaml delete mode 100644 site/intel-pod17/software/charts/kubernetes/etcd/etcd.yaml delete mode 100644 site/intel-pod17/software/charts/osh-infra/fluentbit.yaml delete mode 100644 site/intel-pod17/software/charts/osh-infra/fluentd.yaml delete mode 100644 site/intel-pod17/software/charts/osh-infra/prometheus.yaml delete mode 100644 site/intel-pod17/software/charts/osh/openstack-compute-kit/libvirt.yaml delete mode 100644 site/intel-pod17/software/charts/osh/openstack-compute-kit/neutron.yaml delete mode 100644 site/intel-pod17/software/charts/ucp/ceph/ceph-client-update.yaml delete mode 100644 site/intel-pod17/software/charts/ucp/ceph/ceph-client.yaml delete mode 100644 site/intel-pod17/software/charts/ucp/ceph/ceph-osd.yaml (limited to 'site/intel-pod17/software/charts') diff --git a/site/intel-pod17/software/charts/kubernetes/container-networking/etcd.yaml b/site/intel-pod17/software/charts/kubernetes/container-networking/etcd.yaml deleted file mode 100644 index 8d397e4..0000000 --- a/site/intel-pod17/software/charts/kubernetes/container-networking/etcd.yaml +++ /dev/null @@ -1,127 +0,0 @@ ---- -# The purpose of this file is to build the list of calico etcd nodes and the -# calico etcd certs for those nodes in the environment. -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: kubernetes-calico-etcd - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: kubernetes-calico-etcd-global - actions: - - method: merge - path: . - storagePolicy: cleartext - substitutions: - # Generate a list of control plane nodes (i.e. genesis node + master node - # list) on which calico etcd will run and will need certs. It is assumed - # that Airship sites will have 3 control plane nodes, so this should not need to - # change for a new site. - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .genesis.hostname - dest: - path: .values.nodes[0].name - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .masters[0].hostname - dest: - path: .values.nodes[1].name - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .masters[1].hostname - dest: - path: .values.nodes[2].name - - # Certificate substitutions for the node names assembled on the above list. - # NEWSITE-CHANGEME: Per above, the number of substitutions should not need - # to change with a standard Airship deployment. However, the names of each - # deckhand certficiate should be updated with the correct hostnames for your - # environment. The ordering is important (Genesis is index 0, then master - # nodes in the order they are specified in common-addresses). - - # Genesis hostname - pod17-node1 - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node1 - path: . - dest: - path: .values.nodes[0].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node1 - path: . - dest: - path: .values.nodes[0].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node1-peer - path: . - dest: - path: .values.nodes[0].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node1-peer - path: . - dest: - path: .values.nodes[0].tls.peer.key - - # master node 1 hostname - pod17-node2 - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node2 - path: . - dest: - path: .values.nodes[1].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node2 - path: . - dest: - path: .values.nodes[1].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node2-peer - path: . - dest: - path: .values.nodes[1].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node2-peer - path: . - dest: - path: .values.nodes[1].tls.peer.key - - # master node 2 hostname - pod17-node3 - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node3 - path: . - dest: - path: .values.nodes[2].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node3 - path: . - dest: - path: .values.nodes[2].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: calico-etcd-pod17-node3-peer - path: . - dest: - path: .values.nodes[2].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: calico-etcd-pod17-node3-peer - path: . - dest: - path: .values.nodes[2].tls.peer.key - -data: {} -... diff --git a/site/intel-pod17/software/charts/kubernetes/container-networking/policies.yaml b/site/intel-pod17/software/charts/kubernetes/container-networking/policies.yaml new file mode 100644 index 0000000..1d34c8a --- /dev/null +++ b/site/intel-pod17/software/charts/kubernetes/container-networking/policies.yaml @@ -0,0 +1,135 @@ +--- +schema: nc/Policy/v1 +metadata: + schema: metadata/Document/v1 + name: site-policy + labels: + name: site-policy + layeringDefinition: + abstract: false + layer: site + parentSelector: + name: type-policy + actions: + - method: merge + path: . + storagePolicy: cleartext +data: + policy: + sitelevel: + priority: 5 + rules: [] + hostendpoints: + priority: 9 + rules: + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node1-oam + labels: + host: nc-control + intf-alias: oam + spec: + interfaceName: dmz.170 + node: pod17-node1 + expectedIPs: + - 10.10.170.21 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node1-ksn + labels: + host: nc-control + intf-alias: ksn + spec: + interfaceName: data1.172 + node: pod17-node1 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node2-oam + labels: + host: nc-control + intf-alias: oam + spec: + interfaceName: dmz.170 + node: pod17-node2 + expectedIPs: + - 10.10.170.22 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node2-ksn + labels: + host: nc-control + intf-alias: ksn + spec: + interfaceName: data1.172 + node: pod17-node2 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node3-oam + labels: + host: nc-control + intf-alias: oam + spec: + interfaceName: dmz.170 + node: pod17-node3 + expectedIPs: + - 10.10.170.23 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node3-ksn + labels: + host: nc-control + intf-alias: ksn + spec: + interfaceName: data1.172 + node: pod17-node3 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node4-oam + labels: + host: nc-compute + intf-alias: oam + spec: + interfaceName: dmz.170 + node: pod17-node4 + expectedIPs: + - 10.10.170.24 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node4-ksn + labels: + host: nc-compute + intf-alias: ksn + spec: + interfaceName: data1.172 + node: pod17-node4 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node5-oam + labels: + host: nc-compute + intf-alias: oam + spec: + interfaceName: dmz.170 + node: pod17-node5 + expectedIPs: + - 10.10.170.25 + - apiVersion: projectcalico.org/v3 + kind: HostEndpoint + metadata: + name: pod17-node5-ksn + labels: + host: nc-compute + intf-alias: ksn + spec: + interfaceName: data1.172 + node: pod17-node5 +... diff --git a/site/intel-pod17/software/charts/kubernetes/etcd/etcd.yaml b/site/intel-pod17/software/charts/kubernetes/etcd/etcd.yaml deleted file mode 100644 index dd24889..0000000 --- a/site/intel-pod17/software/charts/kubernetes/etcd/etcd.yaml +++ /dev/null @@ -1,131 +0,0 @@ ---- -# The purpose of this file is to build the list of k8s etcd nodes and the -# k8s etcd certs for those nodes in the environment. -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: kubernetes-etcd - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: kubernetes-etcd-global - actions: - - method: merge - path: . - storagePolicy: cleartext - substitutions: - # Generate a list of control plane nodes (i.e. genesis node + master node - # list) on which k8s etcd will run and will need certs. It is assumed - # that Airship sites will have 3 control plane nodes, so this should not need to - # change for a new site. - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .genesis.hostname - dest: - path: .values.nodes[0].name - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .masters[0].hostname - dest: - path: .values.nodes[1].name - - src: - schema: pegleg/CommonAddresses/v1 - name: common-addresses - path: .masters[1].hostname - dest: - path: .values.nodes[2].name - - # Certificate substitutions for the node names assembled on the above list. - # NEWSITE-CHANGEME: Per above, the number of substitutions should not need - # to change with a standard Airship deployment. However, the names of each - # deckhand certficiate should be updated with the correct hostnames for your - # environment. The ordering is important (Genesis is index 0, then master - # nodes in the order they are specified in common-addresses). - - # Genesis Exception* - # *NOTE: This is an exception in that `genesis` is not the hostname of the - # genesis node, but `genesis` is reference here in the certificate names - # because of certain Promenade assumptions that may be addressed in the - # future. Therefore `genesis` is used instead of `pod17-node1` here. - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-genesis - path: . - dest: - path: .values.nodes[0].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-genesis - path: . - dest: - path: .values.nodes[0].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-genesis-peer - path: . - dest: - path: .values.nodes[0].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-genesis-peer - path: . - dest: - path: .values.nodes[0].tls.peer.key - - # master node 1 hostname - pod17-node2 - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-pod17-node2 - path: . - dest: - path: .values.nodes[1].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-pod17-node2 - path: . - dest: - path: .values.nodes[1].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-pod17-node2-peer - path: . - dest: - path: .values.nodes[1].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-pod17-node2-peer - path: . - dest: - path: .values.nodes[1].tls.peer.key - - # master node 2 hostname - pod17-node3 - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-pod17-node3 - path: . - dest: - path: .values.nodes[2].tls.client.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-pod17-node3 - path: . - dest: - path: .values.nodes[2].tls.client.key - - src: - schema: deckhand/Certificate/v1 - name: kubernetes-etcd-pod17-node3-peer - path: . - dest: - path: .values.nodes[2].tls.peer.cert - - src: - schema: deckhand/CertificateKey/v1 - name: kubernetes-etcd-pod17-node3-peer - path: $ - dest: - path: .values.nodes[2].tls.peer.key - -data: {} -... diff --git a/site/intel-pod17/software/charts/osh-infra/fluentbit.yaml b/site/intel-pod17/software/charts/osh-infra/fluentbit.yaml deleted file mode 100644 index 1620f26..0000000 --- a/site/intel-pod17/software/charts/osh-infra/fluentbit.yaml +++ /dev/null @@ -1,18 +0,0 @@ ---- -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: fluentbit - labels: - name: fluentbit-type - layeringDefinition: - abstract: false - layer: site - parentSelector: - hosttype: fluentbit-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: {} -... diff --git a/site/intel-pod17/software/charts/osh-infra/fluentd.yaml b/site/intel-pod17/software/charts/osh-infra/fluentd.yaml deleted file mode 100644 index 0032414..0000000 --- a/site/intel-pod17/software/charts/osh-infra/fluentd.yaml +++ /dev/null @@ -1,18 +0,0 @@ ---- -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: fluentd - labels: - name: fluentd-type - layeringDefinition: - abstract: false - layer: site - parentSelector: - hosttype: fluentd-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: {} -... diff --git a/site/intel-pod17/software/charts/osh-infra/prometheus.yaml b/site/intel-pod17/software/charts/osh-infra/prometheus.yaml deleted file mode 100644 index c4cd4bf..0000000 --- a/site/intel-pod17/software/charts/osh-infra/prometheus.yaml +++ /dev/null @@ -1,33 +0,0 @@ ---- -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - replacement: true - name: prometheus - labels: - name: prometheus-type - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: prometheus-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: - values: - pod: - resources: - enabled: true - prometheus: - limits: - memory: "4Gi" - cpu: "2000m" - requests: - memory: "2Gi" - cpu: "1000m" - storage: - requests: - storage: 10Gi -... diff --git a/site/intel-pod17/software/charts/osh/openstack-compute-kit/libvirt.yaml b/site/intel-pod17/software/charts/osh/openstack-compute-kit/libvirt.yaml deleted file mode 100644 index f7092cd..0000000 --- a/site/intel-pod17/software/charts/osh/openstack-compute-kit/libvirt.yaml +++ /dev/null @@ -1,22 +0,0 @@ ---- -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: libvirt - replacement: true - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: libvirt-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: - values: - network: - backend: - - openvswitch - - sriov -... diff --git a/site/intel-pod17/software/charts/osh/openstack-compute-kit/neutron.yaml b/site/intel-pod17/software/charts/osh/openstack-compute-kit/neutron.yaml deleted file mode 100644 index 4431b0b..0000000 --- a/site/intel-pod17/software/charts/osh/openstack-compute-kit/neutron.yaml +++ /dev/null @@ -1,72 +0,0 @@ ---- -# This file defines hardware-specific settings for neutron. If you use the same -# hardware profile as this environment, you should not need to change this file. -# Otherwise, you should review the settings here and adjust for your hardware. -# In particular: -# 1. logical network interface names -# 2. physical device mappigns -# TODO: Should move to global layer and become tied to the hardware profile -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - replacement: true - name: neutron - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: neutron-type - actions: - - method: merge - path: . - storagePolicy: cleartext -data: - wait: - timeout: 1800 - test: - timeout: 900 - values: - labels: - sriov: - node_selector_key: sriov - node_selector_value: enabled - pod: - security_context: - neutron_sriov_agent: - pod: - runAsUser: 42424 - container: - neutron_sriov_agent_init: - privileged: true - runAsUser: 0 - readOnlyRootFilesystem: false - neutron_sriov_agent: - readOnlyRootFilesystem: true - privileged: true - network: - interface: - sriov: - - device: ens785f1 - num_vfs: 32 - promisc: false - backend: - - openvswitch - - sriov - conf: - plugins: - ml2_conf: - ml2: - mechanism_drivers: l2population,openvswitch,sriovnicswitch - ml2_type_vlan: - ## NOTE: Must have at least 1 sriov network defined - network_vlan_ranges: external,sriovnet1:100:4000 - sriov_agent: - securitygroup: - firewall_driver: neutron.agent.firewall.NoopFirewallDriver - sriov_nic: - ## NOTE: Must have at least 1 sriov network to physical device - ## mapping, otherwise sriov agent readiness check - ## will fail. - physical_device_mappings: sriovnet1:ens785f1 - exclude_devices: "" -... diff --git a/site/intel-pod17/software/charts/ucp/ceph/ceph-client-update.yaml b/site/intel-pod17/software/charts/ucp/ceph/ceph-client-update.yaml deleted file mode 100644 index eb921b8..0000000 --- a/site/intel-pod17/software/charts/ucp/ceph/ceph-client-update.yaml +++ /dev/null @@ -1,26 +0,0 @@ ---- -# The purpose of this file is to define environment-specific parameters for ceph -# client update -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: ucp-ceph-client-update - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: ucp-ceph-client-update-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: - values: - conf: - pool: - target: - # NEWSITE-CHANGEME: Total number of OSDs. Does not need to change if - # your HW matches this site's HW. Verify for your environment. - # 8 OSDs per node x 3 nodes = 24 - osd: 3 -... diff --git a/site/intel-pod17/software/charts/ucp/ceph/ceph-client.yaml b/site/intel-pod17/software/charts/ucp/ceph/ceph-client.yaml deleted file mode 100644 index e1e8ecf..0000000 --- a/site/intel-pod17/software/charts/ucp/ceph/ceph-client.yaml +++ /dev/null @@ -1,100 +0,0 @@ ---- -# The purpose of this file is to define envrionment-specific parameters for the -# ceph client -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: ucp-ceph-client - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: ucp-ceph-client-global - actions: - - method: merge - path: . - storagePolicy: cleartext -data: - values: - conf: - pool: - target: - # NEWSITE-CHANGEME: The number of OSDs per ceph node. Does not need to - # change if your deployment HW matches this site's HW. - osd: 1 - spec: - # RBD pool - - name: rbd - application: rbd - replication: 1 - percent_total_data: 40 - - name: cephfs_metadata - application: cephfs - replication: 1 - percent_total_data: 5 - - name: cephfs_data - application: cephfs - replication: 1 - percent_total_data: 10 - # RadosGW pools - - name: .rgw.root - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.control - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.data.root - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.gc - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.log - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.intent-log - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.meta - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.usage - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.users.keys - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.users.email - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.users.swift - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.users.uid - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.buckets.extra - application: rgw - replication: 1 - percent_total_data: 0.1 - - name: default.rgw.buckets.index - application: rgw - replication: 1 - percent_total_data: 3 - - name: default.rgw.buckets.data - application: rgw - replication: 1 - percent_total_data: 34.8 -... diff --git a/site/intel-pod17/software/charts/ucp/ceph/ceph-osd.yaml b/site/intel-pod17/software/charts/ucp/ceph/ceph-osd.yaml deleted file mode 100644 index 25297d9..0000000 --- a/site/intel-pod17/software/charts/ucp/ceph/ceph-osd.yaml +++ /dev/null @@ -1,30 +0,0 @@ ---- -# The purpose of this file is to define environment-specific parameters for -# ceph-osd -schema: armada/Chart/v1 -metadata: - schema: metadata/Document/v1 - name: ucp-ceph-osd - layeringDefinition: - abstract: false - layer: site - parentSelector: - name: ucp-ceph-osd-global - actions: - - method: replace - path: .values.conf.storage.osd - - method: merge - path: . - storagePolicy: cleartext -data: - values: - conf: - storage: - osd: - - data: - type: directory - location: /var/lib/ceph/osd/osd-one - journal: - type: directory - location: /var/lib/ceph/journal/osd-one -... diff --git a/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml b/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml index 41d5a9b..6130675 100644 --- a/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml +++ b/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml @@ -8,6 +8,7 @@ schema: armada/Chart/v1 metadata: schema: metadata/Document/v1 + replacement: true name: ucp-divingbell layeringDefinition: abstract: false @@ -41,30 +42,18 @@ metadata: path: . - dest: path: .values.conf.uamlite.users[2].user_sshkeys[0] - src: - schema: deckhand/PublicKey/v1 - name: kasparss_ssh_public_key - path: . - - dest: - path: .values.conf.uamlite.users[2].user_crypt_passwd - src: - schema: deckhand/Passphrase/v1 - name: kasparss_crypt_password - path: . - - dest: - path: .values.conf.uamlite.users[3].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: jorgeas_ssh_public_key path: . - dest: - path: .values.conf.uamlite.users[4].user_sshkeys[0] + path: .values.conf.uamlite.users[3].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: trungdt_ssh_public_key path: . - dest: - path: .values.conf.uamlite.users[5].user_sshkeys[0] + path: .values.conf.uamlite.users[4].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: jamesg_ssh_public_key @@ -80,9 +69,6 @@ data: - user_name: grego user_sudo: true user_sshkeys: [] - - user_name: kasparss - user_sudo: true - user_sshkeys: [] - user_name: jorgeas user_sudo: true user_sshkeys: [] -- cgit 1.2.3-korg