acre.yaml

# GARDENER_PREFIX: (default "test") use a a unique identifier for dns and gardener name

# BASE_CLOUDPROVIDER: cloudprovider for the base cluster

# Specify the deployed gardener version by using the GARDENER_VERSION or GARDENER_IMAGE_TAG and GARDENER_COMMIT
# GARDENER_VERSION: use a specific gardener version/tag

# GARDENER_IMAGE_TAG: gardener apiserver, controllermanager and scheduler version
# GARDENER_COMMIT: use a specific gardener commit

# Specify the supported kubernetes versions for the cloudprofiles by using K8S_VERSION or a file at K8S_VERSIONS
# K8S_VERSION: specify the kubernetes version

# K8S_VERSIONS: path to a file containing offered kubernetes versions per cloudprovider in the format (map[common.CloudProvider][]v1alpha1.ExpirableVersion)

# MACHINE_IMAGES: path to the file containing offered machine images per cloudprovider

dependency_versions: (( &temporary( read( __ctx.DIR "/crop/dependency-versions.yaml", "yaml" ) ) ))

gcp-credentials:
  serviceaccount.json: (( read( "./gcloud.json", "text" ) ))

aws-credentials:
  accessKeyID: (( env( "ACCESS_KEY_ID" ) ))
  secretAccessKey: (( env( "SECRET_ACCESS_KEY_ID" ) ))

azure-credentials:
  clientID: (( env( "AZ_CLIENT_ID" ) ))
  clientSecret: (( env( "AZ_CLIENT_SECRET" ) ))
  subscriptionID: (( env( "AZ_SUBSCRIPTION_ID" ) ))
  tenantID: (( env( "AZ_TENANT_ID" ) ))

k8sVersions:
  tmp:
    <<: (( &temporary ))
    gcp:
      versions:
      - version: (( env( "K8S_VERSION" ) || "1.15.5" ))
    aws:
      versions:
      - version: (( env( "K8S_VERSION" ) || "1.15.5" ))
    azure:
      versions:
      - version: (( env( "K8S_VERSION" ) || "1.15.5" ))
  kubernetes:
    (( read( env( "K8S_VERSIONS" ), "yaml") || tmp ))

extensionVersions: (( read( env( "GARDENER_EXTENSIONS" ), "yaml" ) || ~~ ))

machineImages:
  (( read( env( "MACHINE_IMAGES" ), "yaml") || ~~ ))

monitoring-credentials:
  username: (( env( "MONITORING_USERNAME" ) || ~~ ))
  password: (( env( "MONITORING_PASSWORD" ) || ~~ ))

base_cluster_configs:
  gcp:
    type: gcp
    region: europe-west1
    zones:
      - (( region "-b"))
      - (( region "-c"))
      - (( region "-d"))
    credentials:
      <<: (( .gcp-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.gcp || ~~ ))
      machineImages: (( .machineImages.gcp || ~~ ))
  aws:
    type: aws
    region: eu-west-1
    zones:
      - (( region "a"))
      - (( region "b"))
      - (( region "c"))
    credentials:
      <<: (( .aws-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.aws || ~~ ))
      machineImages: (( .machineImages.aws || ~~ ))
  azure:
    type: azure
    region: westeurope
    credentials:
      <<: (( .azure-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.azure || ~~ ))
      machineImages: (( .machineImages.azure || ~~ ))


############################################################################


meta:
  installationHandler:
    path: crop/bin/installation-handler
    config:
      kubeconfig: ./kubeconfig
      namespace: garden-setup-state
      # backupLocation: (( env( "ROOT" ) ))

landscape:
  name: (( ( env( "GARDENER_PREFIX" ) || "test" ) "-gardener-oq" ))

  versions:
    gardener:
      apiserver:
        image_tag: (( env( "GARDENER_VERSION" ) || env( "GARDENER_IMAGE_TAG" ) || .dependency_versions.versions.gardener.core.version ))
      controller_manager:
        image_tag: (( env( "GARDENER_VERSION" ) || env( "GARDENER_IMAGE_TAG" ) || .dependency_versions.versions.gardener.core.version ))
      scheduler:
        image_tag: (( env( "GARDENER_VERSION" ) || env( "GARDENER_IMAGE_TAG" ) || .dependency_versions.versions.gardener.core.version ))
      tag: (( defined( commit ) ? ~~ :( env( "GARDENER_VERSION" ) || .dependency_versions.versions.gardener.core.version ) ))
      commit: (( env( "GARDENER_COMMIT" ) || ~~ ))
      extensions: (( .extensionVersions || ~~ ))

  domain: (( ( env( "GARDENER_PREFIX" ) || "test" ) ".oq.gcp.dev.k8s.ondemand.com" ))

  cluster:
    networks:
      nodes: 10.132.0.0/16
      pods: 10.28.0.0/15
      services: 10.31.240.0/20

  gardener:
    network-policies:
      active: (( env( "NETWORK_POLICIES" ) || true ))

  iaas:
  - name: base
    mode: seed
    <<: (( .base_cluster_configs[env( "BASE_CLOUDPROVIDER" )] || .base_cluster_configs.gcp ))
  - name: gcp
    mode: cloudprofile
    type: gcp
    region: europe-west1
    zones:
      - (( region "-b"))
      - (( region "-c"))
      - (( region "-d"))
    credentials:
      <<: (( .gcp-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.gcp || ~~ ))
      machineImages: (( .machineImages.gcp || ~~ ))
  - name: aws
    mode: cloudprofile
    type: aws
    region: eu-west-1
    zones:
      - (( region "a"))
      - (( region "b"))
      - (( region "c"))
    credentials:
      <<: (( .aws-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.aws || ~~ ))
      machineImages: (( .machineImages.aws || ~~ ))
  - name: azure
    mode: cloudprofile
    type: azure
    region: westeurope
    credentials:
      <<: (( .azure-credentials ))
    profile:
      kubernetes: (( .k8sVersions.kubernetes.azure || ~~ ))
      machineImages: (( .machineImages.azure || ~~ ))

  monitoring:
    active: true
    <<: (( .monitoring-credentials ))

  dns:
    type: google-clouddns
    credentials: (( .gcp-credentials ))

  etcd:
    backup:
      resourceGroup: (( .landscape.name ))

  identity:
    users:
      - email: "admin@example.com"
        username: "example"
        password: (( rand("A-Z", 10) ))