airship-in-a-bottle/deployment_files/site/gate-multinode/software/charts/kubernetes/etcd/etcd.yaml

---
schema: armada/Chart/v1
metadata:
  schema: metadata/Document/v1
  name: kubernetes-etcd
  layeringDefinition:
    abstract: false
    layer: site
    parentSelector:
        name: kubernetes-etcd-global
    actions:
        - method: merge
          path: .
  storagePolicy: cleartext
  substitutions:

  # Chart source
    - src:
        schema: pegleg/SoftwareVersions/v1
        name: software-versions
        path: .charts.kubernetes.etcd
      dest:
        path: .source

    # Images
    - src:
        schema: pegleg/SoftwareVersions/v1
        name: software-versions
        path: .images.kubernetes.etcd
      dest:
        path: .values.images.tags

    # IP addresses
    -
      src:
        schema: pegleg/CommonAddresses/v1
        name: common-addresses
        path: .kubernetes.etcd_service_ip
      dest:
        path: .values.service.ip
    -
      src:
        schema: pegleg/CommonAddresses/v1
        name: common-addresses
        path: .kubernetes.etcd_service_ip
      dest:
        path: .values.anchor.etcdctl_endpoint

    # CAs
    -
      src:
        schema: deckhand/CertificateAuthority/v1
        name: kubernetes-etcd
        path: .
      dest:
        path: .values.secrets.tls.client.ca
    -
      src:
        schema: deckhand/CertificateAuthority/v1
        name: kubernetes-etcd-peer
        path: .
      dest:
        path: .values.secrets.tls.peer.ca

    -
      src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-anchor
        path: .
      dest:
        path: .values.secrets.anchor.tls.cert
    -
      src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-anchor
        path: .
      dest:
        path: .values.secrets.anchor.tls.key

   # Server certs
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n0
        path: .
      dest:
        path: '.values.nodes[0].tls.client.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n0
        path: .
      dest:
        path: '.values.nodes[0].tls.client.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n0-peer
        path: .
      dest:
        path: '.values.nodes[0].tls.peer.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n0-peer
        path: .
      dest:
        path: '.values.nodes[0].tls.peer.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n1
        path: .
      dest:
        path: '.values.nodes[1].tls.client.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n1
        path: .
      dest:
        path: '.values.nodes[1].tls.client.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n1-peer
        path: .
      dest:
        path: '.values.nodes[1].tls.peer.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n1-peer
        path: .
      dest:
        path: '.values.nodes[1].tls.peer.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n2
        path: .
      dest:
        path: '.values.nodes[2].tls.client.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n2
        path: .
      dest:
        path: '.values.nodes[2].tls.client.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n2-peer
        path: .
      dest:
        path: '.values.nodes[2].tls.peer.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n2-peer
        path: .
      dest:
        path: '.values.nodes[2].tls.peer.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n3
        path: .
      dest:
        path: '.values.nodes[3].tls.client.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n3
        path: .
      dest:
        path: '.values.nodes[3].tls.client.key'
    - src:
        schema: deckhand/Certificate/v1
        name: kubernetes-etcd-n3-peer
        path: .
      dest:
        path: '.values.nodes[3].tls.peer.cert'
    - src:
        schema: deckhand/CertificateKey/v1
        name: kubernetes-etcd-n3-peer
        path: .
      dest:
        path: '.values.nodes[3].tls.peer.key'

data:
  values:
    nodes:
      - name: n0
      - name: n1
      - name: n2
      - name: n3
...