---
# The purpose of this file is to define site-specific parameters to the
# UAM-lite portion of the divingbell chart:
# 1. User accounts to create on bare metal
# 2. SSH public key for operationg system access to the bare metal
# 3. Passwords for operating system access via iDrac/iLo console. SSH password-
#    based auth is disabled.
schema: armada/Chart/v1
metadata:
  schema: metadata/Document/v1
  replacement: true
  name: ucp-divingbell
  layeringDefinition:
    abstract: false
    layer: site
    parentSelector:
      name: ucp-divingbell-global
    actions:
      - method: merge
        path: .
  labels:
    name: ucp-divingbell-site
  storagePolicy: cleartext
  substitutions:
    - dest:
        path: .values.conf.uamlite.users[0].user_sshkeys[0]
      src:
        schema: deckhand/PublicKey/v1
        name: jenkins_ssh_public_key
        path: .
    - dest:
        path: .values.conf.uamlite.users[1].user_sshkeys[0]
      src:
        schema: deckhand/PublicKey/v1
        name: grego_ssh_public_key
        path: .
    - dest:
        path: .values.conf.uamlite.users[1].user_crypt_passwd
      src:
        schema: deckhand/Passphrase/v1
        name: grego_crypt_password
        path: .
    - dest:
        path: .values.conf.uamlite.users[2].user_sshkeys[0]
      src:
        schema: deckhand/PublicKey/v1
        name: jorgeas_ssh_public_key
        path: .
    - dest:
        path: .values.conf.uamlite.users[3].user_sshkeys[0]
      src:
        schema: deckhand/PublicKey/v1
        name: trungdt_ssh_public_key
        path: .
    - dest:
        path: .values.conf.uamlite.users[4].user_sshkeys[0]
      src:
        schema: deckhand/PublicKey/v1
        name: jamesg_ssh_public_key
        path: .
data:
  values:
    conf:
      uamlite:
        users:
          - user_name: jenkins
            user_sudo: true
            user_sshkeys: []
          - user_name: grego
            user_sudo: true
            user_sshkeys: []
          - user_name: jorgeas
            user_sudo: true
            user_sshkeys: []
          - user_name: trungdt
            user_sudo: true
            user_sshkeys: []
          - user_name: jamesg
            user_sudo: true
            user_sshkeys: []
...