---
schema: armada/Chart/v1
metadata:
  schema: metadata/Document/v1
  name: kubernetes-calico-etcd
  layeringDefinition:
    abstract: false
    layer: site
    parentSelector:
      name: kubernetes-calico-etcd-global
    actions:
      - method: merge
        path: .
  storagePolicy: cleartext
  substitutions:
{% for host in data.get_baremetal_host_by_type('controller') %}
    - src:
        schema: pegleg/CommonAddresses/v1
        name: common-addresses
        path: .masters[{{ loop.index - 1 }}].hostname
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].name
    - src:
        schema: deckhand/Certificate/v1
        name: calico-etcd-{{ host.name }}
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.client.cert
    - src:
        schema: deckhand/CertificateKey/v1
        name: calico-etcd-{{ host.name }}
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.client.key
    - src:
        schema: deckhand/Certificate/v1
        name: calico-etcd-{{ host.name }}
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.peer.cert
    - src:
        schema: deckhand/CertificateKey/v1
        name: calico-etcd-{{ host.name }}-peer
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.peer.key
{% endfor %}

{% for host in data.get_baremetal_host_by_type('genesis') %}
    - src:
        schema: pegleg/CommonAddresses/v1
        name: common-addresses
        path: .genesis.hostname
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].name
    - src:
        schema: deckhand/Certificate/v1
        name: calico-etcd-{{ host.name }}
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.client.cert
    - src:
        schema: deckhand/CertificateKey/v1
        name: calico-etcd-{{ host.name }}
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.client.key
    - src:
        schema: deckhand/Certificate/v1
        name: calico-etcd-{{ host.name }}-peer
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.peer.cert
    - src:
        schema: deckhand/CertificateKey/v1
        name: calico-etcd-{{ host.name }}-peer
        path: .
      dest:
        path: .values.nodes[{{ loop.index - 1 }}].tls.peer.key
{% endfor %}

data: {}
...