Squashed 'cluster-config/' content from commit 654f2390

git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c

components/acs-operator/overlays/secured-cluster/acs-admission-control-tls-secret.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+  name: admission-control-tls
+  namespace: stackrox-secured-cluster-service
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: doppler-cluster
+  target:
+    name: admission-control-tls
+    creationPolicy: Owner
+  data:
+  - secretKey: ca.pem
+    remoteRef:
+      key: ACS_ADMISSION_CONTROL_TLS_CA
+  - secretKey: admission-control-cert.pem
+    remoteRef:
+      key: ACS_ADMISSION_CONTROL_TLS_CERT
+  - secretKey: admission-control-key.pem
+    remoteRef:
+      key: ACS_ADMISSION_CONTROL_TLS_KEY

components/acs-operator/overlays/secured-cluster/acs-collector-tls-secret.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+  name: collector-tls
+  namespace: stackrox-secured-cluster-service
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: doppler-cluster
+  target:
+    name: collector-tls
+    creationPolicy: Owner
+  data:
+  - secretKey: ca.pem
+    remoteRef:
+      key: ACS_COLLECTOR_TLS_CA
+  - secretKey: collector-cert.pem
+    remoteRef:
+      key: ACS_COLLECTOR_TLS_CERT
+  - secretKey: collector-key.pem
+    remoteRef:
+      key: ACS_COLLECTOR_TLS_KEY

components/acs-operator/overlays/secured-cluster/acs-sensor-tls-secret.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+  name: sensor-tls
+  namespace: stackrox-secured-cluster-service
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: doppler-cluster
+  target:
+    name: sensor-tls
+    creationPolicy: Owner
+  data:
+  - secretKey: ca.pem
+    remoteRef:
+      key: ACS_SENSOR_TLS_CA
+  - secretKey: sensor-cert.pem
+    remoteRef:
+      key: ACS_SENSOR_TLS_CERT
+  - secretKey: sensor-key.pem
+    remoteRef:
+      key: ACS_SENSOR_TLS_KEY

components/acs-operator/overlays/secured-cluster/kustomization.yaml

@@ -0,0 +1,19 @@
+# commonAnnotations:
+#   argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+
+resources:
+- github.com/redhat-cop/gitops-catalog/advanced-cluster-security-operator/operator/overlays/latest
+- namespace.yaml
+- acs-admission-control-tls-secret.yaml
+- acs-sensor-tls-secret.yaml
+- acs-collector-tls-secret.yaml
+- secured-cluster.yaml
+
+patches:
+  - patch: |-
+      - op: replace
+        path: /spec/channel
+        value: 'rhacs-4.7'
+    target:
+      kind: Subscription
+      name: rhacs-operator

components/acs-operator/overlays/secured-cluster/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+  name: stackrox-secured-cluster-service

components/acs-operator/overlays/secured-cluster/secured-cluster.yaml

@@ -0,0 +1,18 @@
+kind: SecuredCluster
+apiVersion: platform.stackrox.io/v1alpha1
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "5"
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  name: stackrox-secured-cluster-services
+  namespace: stackrox-secured-cluster-service
+spec:
+  clusterName: ${CLUSTER_NAME}
+  centralEndpoint: central-stackrox.apps.hub.ocplab.com:443
+  admissionControl:
+    contactImageScanners: ScanIfMissing
+    listenOnCreates: true
+    listenOnUpdates: true
+    timeoutSeconds: 6
+  scannerV4:
+    scannerComponent: Default