initial acm config

tmp/acm-hub-bootstrap-old/components/policies/gitops/base/manifests/eso/base/secret-store.yaml

@@ -0,0 +1,39 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: eso-token-cluster
+  namespace: external-secrets
+data:
+  dopplerToken: '{{hub (fromSecret "acm-policies" (printf "eso-token-cluster-%s" .ManagedClusterName) "dopplerToken") hub}}'
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: doppler-cluster
+spec:
+  provider:
+    doppler:
+      auth:
+        secretRef:
+          dopplerToken:
+            name: eso-token-cluster
+            key: dopplerToken
+            namespace: external-secrets
+
+  conditions:
+    - namespaceSelector:
+        matchLabels:
+          openshift.io/cluster-monitoring: "true"
+
+    - namespaces:
+        - "cert-manager"
+        - "dev-tools"
+        - "gitops"
+        - "openshift-config"
+        - "openshift-gitops"
+        - "openshift-monitoring"
+        - "openshift-pipelines"
+        - "stackrox"
+        - "stackrox-secured-cluster-service"
+        - "tenant-secrets"
+        - "trusted-profile-analyzer"