Skip to content

feat(netdev): importing creds #2355

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
khackworth wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat(netdev): importing creds #2355

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions components/ironic/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -265,6 +265,9 @@ pod:
- name: ironic-inspection-rules
mountPath: /etc/ironic/inspection-rules/
readOnly: true
- name: network-device-credentials
mountPath: /etc/network-device-credentials
readOnly: true
volumes:
- name: dnsmasq-ironic
persistentVolumeClaim:
Expand All @@ -279,6 +282,11 @@ pod:
configMap:
name: ironic-inspection-rules
optional: true
- name: network-device-credentials
secret:
secretName: network-device-credentials
defaultMode: 0400
optional: true
replicas:
api: 4
conductor: 1
Expand Down
135 changes: 135 additions & 0 deletions workflows/argo-events/workflowtemplates/ansible-run.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,141 @@ spec:
secretKeyRef:
name: nautobot-token
key: url
# PAN-OS credentials (factory -> preconfig -> standard -> TACACS)
- name: PANOS_FACTORY_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_factory_username
optional: true
- name: PANOS_FACTORY_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_factory_password
optional: true
- name: PANOS_PRECONFIG_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_preconfig_username
optional: true
- name: PANOS_PRECONFIG_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_preconfig_password
optional: true
- name: PANOS_STANDARD_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_standard_username
optional: true
- name: PANOS_STANDARD_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: panos_standard_password
optional: true
# F5 credentials (factory -> preconfig -> standard -> TACACS)
- name: F5_FACTORY_ROOT_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_factory_root_username
optional: true
- name: F5_FACTORY_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_factory_root_password
optional: true
- name: F5_FACTORY_ADMIN_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_factory_admin_username
optional: true
- name: F5_FACTORY_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_factory_admin_password
optional: true
- name: F5_PRECONFIG_ROOT_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_preconfig_root_username
optional: true
- name: F5_PRECONFIG_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_preconfig_root_password
optional: true
- name: F5_PRECONFIG_ADMIN_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_preconfig_admin_username
optional: true
- name: F5_PRECONFIG_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_preconfig_admin_password
optional: true
- name: F5_STANDARD_ROOT_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_standard_root_username
optional: true
- name: F5_STANDARD_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_standard_root_password
optional: true
- name: F5_STANDARD_ADMIN_USERNAME
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_standard_admin_username
optional: true
- name: F5_STANDARD_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: network-device-credentials
key: f5_standard_admin_password
optional: true
# TACACS credentials (A-side and B-side for redundancy)
- name: TACACS_USER_A
valueFrom:
secretKeyRef:
name: network-device-credentials
key: tacacs_user_a
optional: true
- name: TACACS_PASS_A
valueFrom:
secretKeyRef:
name: network-device-credentials
key: tacacs_pass_a
optional: true
- name: TACACS_USER_B
valueFrom:
secretKeyRef:
name: network-device-credentials
key: tacacs_user_b
optional: true
- name: TACACS_PASS_B
valueFrom:
secretKeyRef:
name: network-device-credentials
key: tacacs_pass_b
optional: true
envFrom:
- configMapRef:
name: cluster-metadata
Expand Down
Loading