Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

cluster-config/components/acs-operator/overlays/aggregate/admission-control-tls-push-secret.yaml

@@ -0,0 +1,26 @@
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: admission-tls
+  namespace: stackrox
+spec:
+  refreshInterval: 10s
+  secretStoreRefs:
+    - name: doppler-push-secret
+      kind: ClusterSecretStore
+  selector:
+    secret:
+      name: admission-control-tls
+  data:
+    - match:
+        secretKey: ca.pem
+        remoteRef:
+          remoteKey: ACS_ADMISSION_CONTROL_TLS_CA
+    - match:
+        secretKey: admission-control-cert.pem
+        remoteRef:
+          remoteKey: ACS_ADMISSION_CONTROL_TLS_CERT
+    - match:
+        secretKey: admission-control-key.pem
+        remoteRef:
+          remoteKey: ACS_ADMISSION_CONTROL_TLS_KEY

cluster-config/components/acs-operator/overlays/aggregate/collector-tls-push-secret.yaml

@@ -0,0 +1,26 @@
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: collector-tls
+  namespace: stackrox
+spec:
+  refreshInterval: 10s
+  secretStoreRefs:
+    - name: doppler-push-secret
+      kind: ClusterSecretStore
+  selector:
+    secret:
+      name: collector-tls
+  data:
+    - match:
+        secretKey: ca.pem
+        remoteRef:
+          remoteKey: ACS_COLLECTOR_TLS_CA
+    - match:
+        secretKey: collector-cert.pem
+        remoteRef:
+          remoteKey: ACS_COLLECTOR_TLS_CERT
+    - match:
+        secretKey: collector-key.pem
+        remoteRef:
+          remoteKey: ACS_COLLECTOR_TLS_KEY

cluster-config/components/acs-operator/overlays/aggregate/kustomization.yaml

@@ -0,0 +1,31 @@
+commonAnnotations:
+  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+
+resources:
+  - github.com/redhat-cop/gitops-catalog/advanced-cluster-security-operator/aggregate/default
+  - admission-control-tls-push-secret.yaml
+  - collector-tls-push-secret.yaml
+  - sensor-tls-push-secret.yaml
+
+patches:
+  - patch: |-
+      - op: replace
+        path: /spec/channel
+        value: 'rhacs-4.7'
+    target:
+      kind: Subscription
+      name: rhacs-operator
+  - patch: |-
+      - op: replace
+        path: /spec/perNode/collector/collection
+        value: EBPF
+    target:
+      kind: SecuredCluster
+  - patch: |-
+      - op: add
+        path: /spec/central/declarativeConfiguration
+        value:
+          secrets:
+            - name: declarative-configurations
+    target:
+      kind: Central

cluster-config/components/acs-operator/overlays/aggregate/sensor-tls-push-secret.yaml

@@ -0,0 +1,26 @@
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: sensor-tls
+  namespace: stackrox
+spec:
+  refreshInterval: 10s
+  secretStoreRefs:
+    - name: doppler-push-secret
+      kind: ClusterSecretStore
+  selector:
+    secret:
+      name: sensor-tls
+  data:
+    - match:
+        secretKey: ca.pem
+        remoteRef:
+          remoteKey: ACS_SENSOR_TLS_CA
+    - match:
+        secretKey: sensor-cert.pem
+        remoteRef:
+          remoteKey: ACS_SENSOR_TLS_CERT
+    - match:
+        secretKey: sensor-key.pem
+        remoteRef:
+          remoteKey: ACS_SENSOR_TLS_KEY