_config.yaml

cluster_groups:
  bastion:
  - build01
  - build02
  build_farm:
  - app.ci
  - arm01
  - build01
  - build02
  - build03
  - build04
  - build05
  - build09
  - multi01
  - vsphere
  - vsphere02
  non_app_ci:
  - arm01
  - build01
  - build02
  - build03
  - build04
  - build05
  - build09
  - multi01
  - vsphere
  - vsphere02
  non_app_ci_arm:
  - arm01
  non_osd_x86:
  - build01
  - build02
  - vsphere
  osd_global_pull_secret:
  - build03
  - build04
  - build05
  - build09
  - multi01
secret_configs:
- from:
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    rh-cdn.pem:
      field: rh-cdn.pem
      item: rh-cdn
  to:
  - cluster_groups:
    - build_farm
    name: mirror.openshift.com
    namespace: ocp
- from:
    authorized_keys:
      field: authorized_keys
      item: sshd-bastion-slack-bot-alpha
  to:
  - cluster: app.ci
    name: sshd-slack-bot-alpha-authorized-keys
    namespace: ci
- from:
    ssh_host_dsa_key:
      field: ssh_host_dsa_key
      item: sshd-bastion-slack-bot-alpha
    ssh_host_ecdsa_key:
      field: ssh_host_ecdsa_key
      item: sshd-bastion-slack-bot-alpha
    ssh_host_ed25519_key:
      field: ssh_host_ed25519_key
      item: sshd-bastion-slack-bot-alpha
    ssh_host_rsa_key:
      field: ssh_host_rsa_key
      item: sshd-bastion-slack-bot-alpha
  to:
  - cluster: app.ci
    name: sshd-slack-bot-alpha-host-keys
    namespace: ci
- from:
    authorized_keys:
      field: authorized_keys
      item: sshd-bastion-z
  to:
  - cluster_groups:
    - bastion
    name: sshd-authorized-keys
    namespace: bastion-z
- from:
    ssh_host_dsa_key:
      field: ssh_host_dsa_key
      item: sshd-bastion-z
    ssh_host_ecdsa_key:
      field: ssh_host_ecdsa_key
      item: sshd-bastion-z
    ssh_host_ed25519_key:
      field: ssh_host_ed25519_key
      item: sshd-bastion-z
    ssh_host_rsa_key:
      field: ssh_host_rsa_key
      item: sshd-bastion-z
  to:
  - cluster_groups:
    - bastion
    name: sshd-host-keys
    namespace: bastion-z
- from:
    authorized_keys:
      field: authorized_keys
      item: sshd-bastion-ppc64le
  to:
  - cluster_groups:
    - bastion
    name: sshd-authorized-keys
    namespace: bastion-ppc64le
- from:
    ssh_host_dsa_key:
      field: ssh_host_dsa_key
      item: sshd-bastion-ppc64le
    ssh_host_ecdsa_key:
      field: ssh_host_ecdsa_key
      item: sshd-bastion-ppc64le
    ssh_host_ed25519_key:
      field: ssh_host_ed25519_key
      item: sshd-bastion-ppc64le
    ssh_host_rsa_key:
      field: ssh_host_rsa_key
      item: sshd-bastion-ppc64le
  to:
  - cluster_groups:
    - bastion
    name: sshd-host-keys
    namespace: bastion-ppc64le
- from:
    authorized_keys:
      field: authorized_keys
      item: sshd-bastion-ppc64le-libvirt
  to:
  - cluster_groups:
    - bastion
    name: sshd-authorized-keys
    namespace: bastion-ppc64le-libvirt
- from:
    ssh_host_dsa_key:
      field: ssh_host_dsa_key
      item: sshd-bastion-ppc64le-libvirt
    ssh_host_ecdsa_key:
      field: ssh_host_ecdsa_key
      item: sshd-bastion-ppc64le-libvirt
    ssh_host_ed25519_key:
      field: ssh_host_ed25519_key
      item: sshd-bastion-ppc64le-libvirt
    ssh_host_rsa_key:
      field: ssh_host_rsa_key
      item: sshd-bastion-ppc64le-libvirt
  to:
  - cluster_groups:
    - bastion
    name: sshd-host-keys
    namespace: bastion-ppc64le-libvirt
- from:
    authorized_keys:
      field: authorized_keys
      item: sshd-bastion-telco
  to:
  - cluster_groups:
    - bastion
    name: sshd-authorized-keys
    namespace: bastion-telco
- from:
    ssh_host_dsa_key:
      field: ssh_host_dsa_key
      item: sshd-bastion-telco
    ssh_host_ecdsa_key:
      field: ssh_host_ecdsa_key
      item: sshd-bastion-telco
    ssh_host_ed25519_key:
      field: ssh_host_ed25519_key
      item: sshd-bastion-telco
    ssh_host_rsa_key:
      field: ssh_host_rsa_key
      item: sshd-bastion-telco
  to:
  - cluster_groups:
    - bastion
    name: sshd-host-keys
    namespace: bastion-telco
- from:
    api:
      field: api-key
      item: openshift-bugzilla-robot
  to:
  - cluster_groups:
    - build_farm
    name: bugzilla-credentials-openshift-bugzilla-robot
    namespace: ci
- from:
    password:
      field: password
      item: kata-jenkins-ci.westus2.cloudapp.azure.com
  to:
  - cluster: app.ci
    name: jenkins-credentials-kata-jenkins-ci.westus2.cloudapp.azure.com
    namespace: ci
- from:
    oauth:
      field: github-oauth-token
      item: openshift-bot
  to:
  - cluster: app.ci
    name: github-credentials-openshift-bot
    namespace: ci
- from:
    oauth:
      field: github-oauth-token
      item: openshift-cherrypick-robot
  to:
  - cluster: app.ci
    name: github-credentials-openshift-cherrypick-robot
    namespace: ci
- from:
    oauth:
      field: github-oauth-token
      item: openshift-ci-robot
  to:
  - cluster: app.ci
    name: github-credentials-openshift-ci-robot
    namespace: ci
- from:
    oauth:
      field: github-oauth-token
      item: openshift-merge-robot
  to:
  - cluster: app.ci
    name: github-credentials-openshift-merge-robot
    namespace: ci
- from:
    oauth:
      field: private-git-cloner
      item: openshift-ci-robot
  to:
  - cluster_groups:
    - build_farm
    name: github-credentials-openshift-ci-robot-private-git-cloner
    namespace: ci
- from:
    oauth:
      field: oauth-token
      item: slack-credentials-prow
  to:
  - cluster: app.ci
    name: slack-credentials-prow
    namespace: ci
- from:
    url:
      field: url
      item: ci-slack-api-url
  to:
  - cluster: app.ci
    name: ci-slack-api-url
    namespace: ci
  - cluster: hive
    name: ci-slack-api-url
    namespace: hive
- from:
    integration_key:
      field: integration_key
      item: pagerduty
    token:
      field: token
      item: pagerduty
  to:
  - cluster: app.ci
    name: pagerduty
    namespace: ci
- from:
    integration_key:
      field: integration_key
      item: pagerduty
  to:
  - cluster: hive
    name: pagerduty
    namespace: hive
- from:
    config.json:
      field: client-configuration
      item: prow.ci.openshift.org
  to:
  - cluster: app.ci
    name: github-app-credentials
    namespace: ci
- from:
    config.json:
      field: client-configuration
      item: deck-internal-ci.apps.ci.l2s4.p1.openshiftapps.com
  to:
  - cluster: app.ci
    name: github-app-credentials-private
    namespace: ci
- from:
    config.json:
      field: client-configuration
      item: qe-private-deck-ci.apps.ci.l2s4.p1.openshiftapps.com
  to:
  - cluster: app.ci
    name: github-app-qe-private-deck
    namespace: ci
- from:
    cookie:
      field: cookie32
      item: prow.ci.openshift.org
  to:
  - cluster: app.ci
    name: cookie
    namespace: ci
- from:
    hmac:
      field: hmac-token
      item: hmac
    hmac.yaml:
      field: ci-bot-github-app-combined.yaml
      item: hmac
  to:
  - cluster: app.ci
    name: github-webhook-credentials
    namespace: ci
- from:
    api-key:
      field: api-key
      item: unsplash.com
  to:
  - cluster: app.ci
    name: unsplash-api-key
    namespace: ci
- from:
    service-account.json:
      field: credentials.json
      item: gcs-publisher
  to:
  - cluster_groups:
    - build_farm
    name: gce-sa-credentials-gcs-publisher
    namespace: ci
  - cluster_groups:
    - build_farm
    name: gce-sa-credentials-gcs-publisher
    namespace: test-credentials
- from:
    service-account.json:
      field: credentials.json
      item: gcs-tide-publisher
  to:
  - cluster: app.ci
    name: gce-sa-credentials-gcs-tide-publisher
    namespace: ci
- from:
    service-account.json:
      field: credentials.json
      item: resource-usage-data-publisher
  to:
  - cluster_groups:
    - build_farm
    name: gce-sa-credentials-resource-usage-data-publisher
    namespace: ci
- from:
    service-account.json:
      field: credentials.json
      item: gcs-private
  to:
  - cluster_groups:
    - build_farm
    name: gce-sa-credentials-gcs-private
    namespace: ci
- from:
    service-account.json:
      field: credentials.json
      item: gcs-qe-private-deck
  to:
  - cluster_groups:
    - build_farm
    name: gce-sa-credentials-gcs-qe-private-deck
    namespace: ci
- from:
    service-account.json:
      field: credentials.json
      item: gcs-crier-publisher
  to:
  - cluster: app.ci
    name: gce-sa-credentials-gcs-crier-publisher
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/openshift-knative
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshift-knative
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/openshift-kni
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshift-kni
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/openshiftio
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshiftio
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/openshift-pipeline
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshift-pipeline
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/codeready-toolchain
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-codeready-toolchain
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/integr8ly
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-integr8ly
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: push-token
        item: quay.io/openshift-psap
        registry_url: quay.io
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshift-psap
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    config.json:
      field: config.json
      item: quay.io/ovirt
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-ovirt
    namespace: ci
- from:
    config.json:
      field: push-credentials
      item: quay.io/redhat-developer
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-redhat-developer
    namespace: ci
- from:
    config.json:
      field: docker.cfg
      item: quay.io/open-cluster-management
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-open-cluster-management
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: push-token
        item: quay.io/openshift-ocs-dev
        registry_url: quay.io
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-ocs-dev
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: push-token
        item: quay.io/openshift-azure
        registry_url: quay.io
  to:
  - cluster: app.ci
    name: registry-push-credentials-quay.io-openshift-azure
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    config.json:
      field: pull-credentials
      item: quay.io
  to:
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-priv
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-ppc64le
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-ppc64le-priv
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-s390x
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-s390x-priv
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-arm64
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-arm64-priv
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-multi
  - cluster: app.ci
    name: files-pull-secret
    namespace: ci-release-multi-priv
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-priv
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-ppc64le
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-ppc64le-priv
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-s390x
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-s390x-priv
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-arm64
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-arm64-priv
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-multi
  - cluster: app.ci
    name: git-pull-secret
    namespace: ci-release-multi-priv
  - cluster: app.ci
    name: source
    namespace: ci-release
  - cluster: app.ci
    name: source
    namespace: ci-release-priv
  - cluster: app.ci
    name: source
    namespace: ci-release-ppc64le
  - cluster: app.ci
    name: source
    namespace: ci-release-ppc64le-priv
  - cluster: app.ci
    name: source
    namespace: ci-release-s390x
  - cluster: app.ci
    name: source
    namespace: ci-release-s390x-priv
  - cluster: app.ci
    name: source
    namespace: ci-release-arm64
  - cluster: app.ci
    name: source
    namespace: ci-release-arm64-priv
  - cluster: app.ci
    name: source
    namespace: ci-release-multi
  - cluster: app.ci
    name: source
    namespace: ci-release-multi-priv
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: ci-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster_groups:
    - build_farm
    name: ci-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-ppc64le
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-ppc64le-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-s390x
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-s390x-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-arm64
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: ci-pull-credentials
    namespace: ci-release-arm64-priv
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_osd_x86
    name: pull-secret
    namespace: openshift-config
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci_arm
    name: pull-secret
    namespace: openshift-config
    type: kubernetes.io/dockerconfigjson
- from:
    .awscred:
      field: .awscred
      item: cluster-bot-osd-ephemeral
    aws-account-id:
      field: aws-account-id
      item: cluster-bot-osd-ephemeral
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    sso-client-id:
      field: ocm-developer-productivity-staging.user
      item: cluster-bot-osd-ephemeral
    sso-client-secret:
      field: ocm-developer-productivity-staging.token
      item: cluster-bot-osd-ephemeral
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-osd-ephemeral
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-arm64
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-1-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-sd-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-fleet-manager-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-terraform-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-perf-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-perfscale
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-perfscale-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-perfscale-lrc-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: aws-chaos
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-china-qe
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-cpaas
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-usgov-qe
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-c2s-qe
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-sc2s-qe
    namespace: ci
- from:
    ci-xpn.json:
      field: ci-xpn-sa-credentials.json
      item: gcp-openshift-gce-devel-ci
    gce.json:
      field: ci-provisioner-sa-credentials.json
      item: gcp-openshift-gce-devel-ci
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    repository-credentials-password:
      field: password
      item: mirror.openshift.com
    repository-credentials-username:
      field: username
      item: mirror.openshift.com
    ssh-privatekey:
      field: ssh-privatekey
      item: gcp-openshift-gce-devel-ci
    ssh-publickey:
      field: ssh-publickey
      item: gcp-openshift-gce-devel-ci
    telemeter-token:
      field: telemeter-token
      item: telemeter
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-gcp
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-gcp-arm64
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-outpost
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        item: quay.io/multi-arch
        registry_url: quay.io/multi-arch
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-local-zones
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-gcp-qe
    namespace: ci
- from:
    gce.json:
      field: credentials.json
      item: gcp-openshift-gce-devel-ci-2
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: gcp-openshift-gce-devel-ci-2
    ssh-publickey:
      field: ssh-publickey
      item: gcp-openshift-gce-devel-ci-2
    telemeter-token:
      field: telemeter-token
      item: telemeter
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-gcp-openshift-gce-devel-ci-2
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: openstack
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: openstack
    ssh-publickey:
      field: ssh-publickey
      item: openstack
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-vexxhost
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-hwoffload
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-nfv
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-vh-mecha-central
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-vh-mecha-az0
    namespace: ci
- from:
    ca-cert.pem:
      field: ca-cert.pem
      item: openstack-ppc64le
    clouds.yaml:
      field: clouds.yaml
      item: openstack-ppc64le
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: openstack-ppc64le
    ssh-publickey:
      field: ssh-publickey
      item: openstack-ppc64le
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-ppc64le
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: openstack
    ssh-publickey:
      field: ssh-publickey
      item: openstack
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-osuosl
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: openstack
    clouds.yaml:
      field: clouds.yaml
      item: openstack
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: openstack
    ssh-publickey:
      field: ssh-publickey
      item: openstack
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-openstack-operators-vexxhost
    namespace: ci
- from:
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-alibabacloud
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-alibabacloud-qe
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-alibabacloud-cn-qe
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
    vmc.secret.auto.tfvars:
      field: vmc.secret.auto.tfvars
      item: vsphere-credentials
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-vsphere
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    .packetcred:
      field: .packetcred
      item: packet.net
    .slackhook:
      field: .slackhook
      item: packet.net
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-metal
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-libvirt-s390x
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-libvirt-ppc64le
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-packet
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build01.ci.openshift.org
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build03.ci.openshift.org
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build04.ci.openshift.org
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build05.ci.openshift.org
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-equinix-ocp-metal
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build01.ci.openshift.org
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build03.ci.openshift.org
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build04.ci.openshift.org
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build05.ci.openshift.org
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-equinix-ocp-metal-qe
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
      - auth_field: auth
        item: brew.registry.redhat.io-pull-secret
        registry_url: brew.registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-packet-assisted
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-packet-sno
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-oci-assisted
    namespace: ci
- from:
    osServicePrincipal.json:
      field: osServicePrincipal.json
      item: os4-installer.openshift-ci.azure
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure4
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure-arm64
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azuremag
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azuremag-qe
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure-arm64-qe
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azurestack-qe
    namespace: ci
- from:
    osServicePrincipal.json:
      field: osServicePrincipal.json
      item: os4-installer.openshift-ci.azure
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azurestack
    namespace: ci
- from:
    osServicePrincipal.json:
      field: osServicePrincipal.json
      item: os4-installer.openshift-ci2.azure
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure-2
    namespace: ci
- from:
    token:
      field: redhat-developer-service-binding-operator
      item: codecov-tokens
  to:
  - cluster: build01
    name: redhat-developer-service-binding-operator-codecov-token
    namespace: ci
  - cluster: build02
    name: redhat-developer-service-binding-operator-codecov-token
    namespace: ci
- from:
    app.ci.config:
      field: sa.pod-scaler.app.ci.config
      item: pod-scaler
    build01.config:
      field: sa.pod-scaler.build01.config
      item: pod-scaler
    build02.config:
      field: sa.pod-scaler.build02.config
      item: pod-scaler
    build03.config:
      field: sa.pod-scaler.build03.config
      item: pod-scaler
    build04.config:
      field: sa.pod-scaler.build04.config
      item: pod-scaler
    build05.config:
      field: sa.pod-scaler.build05.config
      item: pod-scaler
    build09.config:
      field: sa.pod-scaler.build09.config
      item: pod-scaler
    multi01.config:
      field: sa.pod-scaler.multi01.config
      item: pod-scaler
    sa.pod-scaler.app.ci.token.txt:
      field: sa.pod-scaler.app.ci.token.txt
      item: pod-scaler
    sa.pod-scaler.build01.token.txt:
      field: sa.pod-scaler.build01.token.txt
      item: pod-scaler
    sa.pod-scaler.build02.token.txt:
      field: sa.pod-scaler.build02.token.txt
      item: pod-scaler
    sa.pod-scaler.build03.token.txt:
      field: sa.pod-scaler.build03.token.txt
      item: pod-scaler
    sa.pod-scaler.build04.token.txt:
      field: sa.pod-scaler.build04.token.txt
      item: pod-scaler
    sa.pod-scaler.build05.token.txt:
      field: sa.pod-scaler.build05.token.txt
      item: pod-scaler
    sa.pod-scaler.build09.token.txt:
      field: sa.pod-scaler.build09.token.txt
      item: pod-scaler
    sa.pod-scaler.multi01.token.txt:
      field: sa.pod-scaler.multi01.token.txt
      item: pod-scaler
  to:
  - cluster: app.ci
    name: pod-scaler
    namespace: ci
- from:
    kubeconfig:
      field: sa.ci-operator.arm01.config
      item: build_farm
    sa.ci-operator.arm01.token.txt:
      field: sa.ci-operator.arm01.token.txt
      item: build_farm
  to:
  - cluster: arm01
    name: ci-operator
    namespace: test-credentials
- from:
    kubeconfig:
      field: sa.ci-operator.build01.config
      item: build_farm
    sa.ci-operator.build01.token.txt:
      field: sa.ci-operator.build01.token.txt
      item: build_farm
  to:
  - cluster: build01
    name: ci-operator
    namespace: test-credentials
- from:
    kubeconfig:
      field: sa.ci-operator.build02.config
      item: build_farm
    sa.ci-operator.build02.token.txt:
      field: sa.ci-operator.build02.token.txt
      item: build_farm
  to:
  - cluster: build02
    name: ci-operator
    namespace: test-credentials
- from:
    kubeconfig:
      field: sa.ci-operator.app.ci.config
      item: build_farm
    sa.ci-operator.app.ci.config:
      field: sa.ci-operator.app.ci.config
      item: build_farm
    sa.ci-operator.app.ci.token.txt:
      field: sa.ci-operator.app.ci.token.txt
      item: build_farm
  to:
  - cluster_groups:
    - non_app_ci
    name: app.ci-ci-operator-credentials
    namespace: ci
- from:
    kubeconfig:
      field: sa.hive.hive.config
      item: build_farm
    sa.hive.hive.token.txt:
      field: sa.hive.hive.token.txt
      item: build_farm
  to:
  - cluster_groups:
    - non_app_ci
    name: hive-hive-credentials
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: hive-hive-credentials
    namespace: test-credentials
- from:
    kubeconfig:
      field: sa.hypershift-workload.hive.config
      item: build_farm
    sa.hypershift-workload.hive.token.txt:
      field: sa.hypershift-workload.hive.token.txt
      item: build_farm
  to:
  - cluster_groups:
    - build_farm
    name: hypershift-workload-credentials
    namespace: test-credentials
  - cluster_groups:
    - build_farm
    name: hypershift-workload-credentials
    namespace: ci
- from:
    bucket:
      field: bucket
      item: hypershift-operator-oidc-provider-s3-credentials
    credentials:
      field: credentials
      item: hypershift-operator-oidc-provider-s3-credentials
    region:
      field: region
      item: hypershift-operator-oidc-provider-s3-credentials
  to:
  - cluster: hive
    name: hypershift-operator-oidc-provider-s3-credentials
    namespace: hypershift
- from:
    ci.htpasswd:
      field: ci.htpasswd
      item: boskos-oauth-proxy
    credentials:
      field: boskos-credentials
      item: boskos-oauth-proxy
  to:
  - cluster_groups:
    - build_farm
    name: boskos-credentials
    namespace: ci
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: aws_ci_infra_ci-app-ci-audit-logs-uploader
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: aws_ci_infra_ci-app-ci-audit-logs-uploader
  to:
  - cluster: app.ci
    name: aws-ci-infra-ci-app-ci-audit-logs-uploader-credentials
    namespace: api-audit-log
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: aws_ci_infra_ci-build01-audit-logs-uploader
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: aws_ci_infra_ci-build01-audit-logs-uploader
  to:
  - cluster: build01
    name: aws-ci-infra-ci-build01-audit-logs-uploader-credentials
    namespace: api-audit-log
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: aws_ci_infra_ci-build02-audit-logs-uploader
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: aws_ci_infra_ci-build02-audit-logs-uploader
  to:
  - cluster: build02
    name: aws-ci-infra-ci-build02-audit-logs-uploader-credentials
    namespace: api-audit-log
- from:
    .awscred:
      field: .awscred
      item: AWS ci-longlivedcluster-bot
  to:
  - cluster_groups:
    - build_farm
    name: aws-openshift-llc-account-credentials
    namespace: ci
- from:
    .git-credentials:
      field: git_url_with_credentials
      item: openshift-bot
  to:
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-priv
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-ppc64le
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-ppc64le-priv
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-s390x
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-s390x-priv
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-arm64
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-arm64-priv
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-multi
  - cluster: app.ci
    name: git-credentials
    namespace: ci-release-multi-priv
- from:
    sa.release-controller-ocp-arm64-priv.app.ci.config:
      field: sa.release-controller-ocp-arm64-priv.app.ci.config
      item: release-controller
    sa.release-controller-ocp-arm64-priv.app.ci.token.txt:
      field: sa.release-controller-ocp-arm64-priv.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-arm64.app.ci.config:
      field: sa.release-controller-ocp-arm64.app.ci.config
      item: release-controller
    sa.release-controller-ocp-arm64.app.ci.token.txt:
      field: sa.release-controller-ocp-arm64.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-multi-priv.app.ci.config:
      field: sa.release-controller-ocp-multi-priv.app.ci.config
      item: release-controller
    sa.release-controller-ocp-multi-priv.app.ci.token.txt:
      field: sa.release-controller-ocp-multi-priv.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-multi.app.ci.config:
      field: sa.release-controller-ocp-multi.app.ci.config
      item: release-controller
    sa.release-controller-ocp-multi.app.ci.token.txt:
      field: sa.release-controller-ocp-multi.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-ppc64le-priv.app.ci.config:
      field: sa.release-controller-ocp-ppc64le-priv.app.ci.config
      item: release-controller
    sa.release-controller-ocp-ppc64le-priv.app.ci.token.txt:
      field: sa.release-controller-ocp-ppc64le-priv.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-ppc64le.app.ci.config:
      field: sa.release-controller-ocp-ppc64le.app.ci.config
      item: release-controller
    sa.release-controller-ocp-ppc64le.app.ci.token.txt:
      field: sa.release-controller-ocp-ppc64le.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-priv.app.ci.config:
      field: sa.release-controller-ocp-priv.app.ci.config
      item: release-controller
    sa.release-controller-ocp-priv.app.ci.token.txt:
      field: sa.release-controller-ocp-priv.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-s390x-priv.app.ci.config:
      field: sa.release-controller-ocp-s390x-priv.app.ci.config
      item: release-controller
    sa.release-controller-ocp-s390x-priv.app.ci.token.txt:
      field: sa.release-controller-ocp-s390x-priv.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp-s390x.app.ci.config:
      field: sa.release-controller-ocp-s390x.app.ci.config
      item: release-controller
    sa.release-controller-ocp-s390x.app.ci.token.txt:
      field: sa.release-controller-ocp-s390x.app.ci.token.txt
      item: release-controller
    sa.release-controller-ocp.app.ci.config:
      field: sa.release-controller-ocp.app.ci.config
      item: release-controller
    sa.release-controller-ocp.app.ci.token.txt:
      field: sa.release-controller-ocp.app.ci.token.txt
      item: release-controller
    sa.release-controller.app.ci.config:
      field: sa.release-controller.app.ci.config
      item: release-controller
    sa.release-controller.app.ci.token.txt:
      field: sa.release-controller.app.ci.token.txt
      item: release-controller
  to:
  - cluster: app.ci
    name: release-controller-kubeconfigs
    namespace: ci
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: arn:aws:iam::320297955214:user/app-ci-log-publisher
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: arn:aws:iam::320297955214:user/app-ci-log-publisher
  to:
  - cluster: app.ci
    name: vector-agent-secret
    namespace: prow-logging
- from:
    bw_password:
      field: password
      item: OpenShift CI Bitwarden Bot
  to:
  - cluster: app.ci
    name: bitwarden-credentials-openshift-ci-bitwarden-bot
    namespace: ci
- from:
    sa.crier.app.ci.config:
      field: sa.crier.app.ci.config
      item: build_farm
    sa.crier.app.ci.token.txt:
      field: sa.crier.app.ci.token.txt
      item: build_farm
    sa.crier.arm01.config:
      field: sa.crier.arm01.config
      item: build_farm
    sa.crier.arm01.token.txt:
      field: sa.crier.arm01.token.txt
      item: build_farm
    sa.crier.build01.config:
      field: sa.crier.build01.config
      item: build_farm
    sa.crier.build01.token.txt:
      field: sa.crier.build01.token.txt
      item: build_farm
    sa.crier.build02.config:
      field: sa.crier.build02.config
      item: build_farm
    sa.crier.build02.token.txt:
      field: sa.crier.build02.token.txt
      item: build_farm
    sa.crier.build03.config:
      field: sa.crier.build03.config
      item: build_farm
    sa.crier.build03.token.txt:
      field: sa.crier.build03.token.txt
      item: build_farm
    sa.crier.build04.config:
      field: sa.crier.build04.config
      item: build_farm
    sa.crier.build04.token.txt:
      field: sa.crier.build04.token.txt
      item: build_farm
    sa.crier.build05.config:
      field: sa.crier.build05.config
      item: build_farm
    sa.crier.build05.token.txt:
      field: sa.crier.build05.token.txt
      item: build_farm
    sa.crier.build09.config:
      field: sa.crier.build09.config
      item: build_farm
    sa.crier.build09.token.txt:
      field: sa.crier.build09.token.txt
      item: build_farm
    sa.crier.multi01.config:
      field: sa.crier.multi01.config
      item: build_farm
    sa.crier.multi01.token.txt:
      field: sa.crier.multi01.token.txt
      item: build_farm
    sa.crier.vsphere.config:
      field: sa.crier.vsphere.config
      item: build_farm
    sa.crier.vsphere.token.txt:
      field: sa.crier.vsphere.token.txt
      item: build_farm
    sa.crier.vsphere02.config:
      field: sa.crier.vsphere02.config
      item: build_farm
    sa.crier.vsphere02.token.txt:
      field: sa.crier.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: crier
    namespace: ci
- from:
    sa.config-updater.app.ci.config:
      field: sa.config-updater.app.ci.config
      item: config-updater
    sa.config-updater.arm01.config:
      field: sa.config-updater.arm01.config
      item: config-updater
    sa.config-updater.build01.config:
      field: sa.config-updater.build01.config
      item: config-updater
    sa.config-updater.build02.config:
      field: sa.config-updater.build02.config
      item: config-updater
    sa.config-updater.build03.config:
      field: sa.config-updater.build03.config
      item: config-updater
    sa.config-updater.build04.config:
      field: sa.config-updater.build04.config
      item: config-updater
    sa.config-updater.build05.config:
      field: sa.config-updater.build05.config
      item: config-updater
    sa.config-updater.build09.config:
      field: sa.config-updater.build09.config
      item: config-updater
    sa.config-updater.hive.config:
      field: sa.config-updater.hive.config
      item: config-updater
    sa.config-updater.multi01.config:
      field: sa.config-updater.multi01.config
      item: config-updater
    sa.config-updater.vsphere.config:
      field: sa.config-updater.vsphere.config
      item: config-updater
    sa.config-updater.vsphere02.config:
      field: sa.config-updater.vsphere02.config
      item: config-updater
  to:
  - cluster: app.ci
    name: config-updater
    namespace: ci
  - cluster: app.ci
    name: config-updater
    namespace: vault
- from:
    sa.deck.app.ci.config:
      field: sa.deck.app.ci.config
      item: build_farm
    sa.deck.app.ci.token.txt:
      field: sa.deck.app.ci.token.txt
      item: build_farm
    sa.deck.arm01.config:
      field: sa.deck.arm01.config
      item: build_farm
    sa.deck.arm01.token.txt:
      field: sa.deck.arm01.token.txt
      item: build_farm
    sa.deck.build01.config:
      field: sa.deck.build01.config
      item: build_farm
    sa.deck.build01.token.txt:
      field: sa.deck.build01.token.txt
      item: build_farm
    sa.deck.build02.config:
      field: sa.deck.build02.config
      item: build_farm
    sa.deck.build02.token.txt:
      field: sa.deck.build02.token.txt
      item: build_farm
    sa.deck.build03.config:
      field: sa.deck.build03.config
      item: build_farm
    sa.deck.build03.token.txt:
      field: sa.deck.build03.token.txt
      item: build_farm
    sa.deck.build04.config:
      field: sa.deck.build04.config
      item: build_farm
    sa.deck.build04.token.txt:
      field: sa.deck.build04.token.txt
      item: build_farm
    sa.deck.build05.config:
      field: sa.deck.build05.config
      item: build_farm
    sa.deck.build05.token.txt:
      field: sa.deck.build05.token.txt
      item: build_farm
    sa.deck.build09.config:
      field: sa.deck.build09.config
      item: build_farm
    sa.deck.build09.token.txt:
      field: sa.deck.build09.token.txt
      item: build_farm
    sa.deck.multi01.config:
      field: sa.deck.multi01.config
      item: build_farm
    sa.deck.multi01.token.txt:
      field: sa.deck.multi01.token.txt
      item: build_farm
    sa.deck.vsphere.config:
      field: sa.deck.vsphere.config
      item: build_farm
    sa.deck.vsphere.token.txt:
      field: sa.deck.vsphere.token.txt
      item: build_farm
    sa.deck.vsphere02.config:
      field: sa.deck.vsphere02.config
      item: build_farm
    sa.deck.vsphere02.token.txt:
      field: sa.deck.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: deck
    namespace: ci
- from:
    sa.hook.app.ci.config:
      field: sa.hook.app.ci.config
      item: build_farm
    sa.hook.app.ci.token.txt:
      field: sa.hook.app.ci.token.txt
      item: build_farm
    sa.hook.arm01.config:
      field: sa.hook.arm01.config
      item: build_farm
    sa.hook.arm01.token.txt:
      field: sa.hook.arm01.token.txt
      item: build_farm
    sa.hook.build01.config:
      field: sa.hook.build01.config
      item: build_farm
    sa.hook.build01.token.txt:
      field: sa.hook.build01.token.txt
      item: build_farm
    sa.hook.build02.config:
      field: sa.hook.build02.config
      item: build_farm
    sa.hook.build02.token.txt:
      field: sa.hook.build02.token.txt
      item: build_farm
    sa.hook.build03.config:
      field: sa.hook.build03.config
      item: build_farm
    sa.hook.build03.token.txt:
      field: sa.hook.build03.token.txt
      item: build_farm
    sa.hook.build04.config:
      field: sa.hook.build04.config
      item: build_farm
    sa.hook.build04.token.txt:
      field: sa.hook.build04.token.txt
      item: build_farm
    sa.hook.build05.config:
      field: sa.hook.build05.config
      item: build_farm
    sa.hook.build05.token.txt:
      field: sa.hook.build05.token.txt
      item: build_farm
    sa.hook.build09.config:
      field: sa.hook.build09.config
      item: build_farm
    sa.hook.build09.token.txt:
      field: sa.hook.build09.token.txt
      item: build_farm
    sa.hook.multi01.config:
      field: sa.hook.multi01.config
      item: build_farm
    sa.hook.multi01.token.txt:
      field: sa.hook.multi01.token.txt
      item: build_farm
    sa.hook.vsphere.config:
      field: sa.hook.vsphere.config
      item: build_farm
    sa.hook.vsphere.token.txt:
      field: sa.hook.vsphere.token.txt
      item: build_farm
    sa.hook.vsphere02.config:
      field: sa.hook.vsphere02.config
      item: build_farm
    sa.hook.vsphere02.token.txt:
      field: sa.hook.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: hook
    namespace: ci
- from:
    sa.prow-controller-manager.app.ci.config:
      field: sa.prow-controller-manager.app.ci.config
      item: build_farm
    sa.prow-controller-manager.app.ci.token.txt:
      field: sa.prow-controller-manager.app.ci.token.txt
      item: build_farm
    sa.prow-controller-manager.arm01.config:
      field: sa.prow-controller-manager.arm01.config
      item: build_farm
    sa.prow-controller-manager.arm01.token.txt:
      field: sa.prow-controller-manager.arm01.token.txt
      item: build_farm
    sa.prow-controller-manager.build01.config:
      field: sa.prow-controller-manager.build01.config
      item: build_farm
    sa.prow-controller-manager.build01.token.txt:
      field: sa.prow-controller-manager.build01.token.txt
      item: build_farm
    sa.prow-controller-manager.build02.config:
      field: sa.prow-controller-manager.build02.config
      item: build_farm
    sa.prow-controller-manager.build02.token.txt:
      field: sa.prow-controller-manager.build02.token.txt
      item: build_farm
    sa.prow-controller-manager.build03.config:
      field: sa.prow-controller-manager.build03.config
      item: build_farm
    sa.prow-controller-manager.build03.token.txt:
      field: sa.prow-controller-manager.build03.token.txt
      item: build_farm
    sa.prow-controller-manager.build04.config:
      field: sa.prow-controller-manager.build04.config
      item: build_farm
    sa.prow-controller-manager.build04.token.txt:
      field: sa.prow-controller-manager.build04.token.txt
      item: build_farm
    sa.prow-controller-manager.build05.config:
      field: sa.prow-controller-manager.build05.config
      item: build_farm
    sa.prow-controller-manager.build05.token.txt:
      field: sa.prow-controller-manager.build05.token.txt
      item: build_farm
    sa.prow-controller-manager.build09.config:
      field: sa.prow-controller-manager.build09.config
      item: build_farm
    sa.prow-controller-manager.build09.token.txt:
      field: sa.prow-controller-manager.build09.token.txt
      item: build_farm
    sa.prow-controller-manager.multi01.config:
      field: sa.prow-controller-manager.multi01.config
      item: build_farm
    sa.prow-controller-manager.multi01.token.txt:
      field: sa.prow-controller-manager.multi01.token.txt
      item: build_farm
    sa.prow-controller-manager.vsphere.config:
      field: sa.prow-controller-manager.vsphere.config
      item: build_farm
    sa.prow-controller-manager.vsphere.token.txt:
      field: sa.prow-controller-manager.vsphere.token.txt
      item: build_farm
    sa.prow-controller-manager.vsphere02.config:
      field: sa.prow-controller-manager.vsphere02.config
      item: build_farm
    sa.prow-controller-manager.vsphere02.token.txt:
      field: sa.prow-controller-manager.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: prow-controller-manager
    namespace: ci
- from:
    sa.sprint-automation.build01.config:
      field: sa.sprint-automation.build01.config
      item: build_farm
    sa.sprint-automation.build01.token.txt:
      field: sa.sprint-automation.build01.token.txt
      item: build_farm
    sa.sprint-automation.build02.config:
      field: sa.sprint-automation.build02.config
      item: build_farm
    sa.sprint-automation.build02.token.txt:
      field: sa.sprint-automation.build02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: sprint-automation
    namespace: ci
- from:
    sa.sinker.app.ci.config:
      field: sa.sinker.app.ci.config
      item: build_farm
    sa.sinker.app.ci.token.txt:
      field: sa.sinker.app.ci.token.txt
      item: build_farm
    sa.sinker.arm01.config:
      field: sa.sinker.arm01.config
      item: build_farm
    sa.sinker.arm01.token.txt:
      field: sa.sinker.arm01.token.txt
      item: build_farm
    sa.sinker.build01.config:
      field: sa.sinker.build01.config
      item: build_farm
    sa.sinker.build01.token.txt:
      field: sa.sinker.build01.token.txt
      item: build_farm
    sa.sinker.build02.config:
      field: sa.sinker.build02.config
      item: build_farm
    sa.sinker.build02.token.txt:
      field: sa.sinker.build02.token.txt
      item: build_farm
    sa.sinker.build03.config:
      field: sa.sinker.build03.config
      item: build_farm
    sa.sinker.build03.token.txt:
      field: sa.sinker.build03.token.txt
      item: build_farm
    sa.sinker.build04.config:
      field: sa.sinker.build04.config
      item: build_farm
    sa.sinker.build04.token.txt:
      field: sa.sinker.build04.token.txt
      item: build_farm
    sa.sinker.build05.config:
      field: sa.sinker.build05.config
      item: build_farm
    sa.sinker.build05.token.txt:
      field: sa.sinker.build05.token.txt
      item: build_farm
    sa.sinker.build09.config:
      field: sa.sinker.build09.config
      item: build_farm
    sa.sinker.build09.token.txt:
      field: sa.sinker.build09.token.txt
      item: build_farm
    sa.sinker.multi01.config:
      field: sa.sinker.multi01.config
      item: build_farm
    sa.sinker.multi01.token.txt:
      field: sa.sinker.multi01.token.txt
      item: build_farm
    sa.sinker.vsphere.config:
      field: sa.sinker.vsphere.config
      item: build_farm
    sa.sinker.vsphere.token.txt:
      field: sa.sinker.vsphere.token.txt
      item: build_farm
    sa.sinker.vsphere02.config:
      field: sa.sinker.vsphere02.config
      item: build_farm
    sa.sinker.vsphere02.token.txt:
      field: sa.sinker.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: sinker
    namespace: ci
- from:
    sa.dptp-controller-manager.arm01.config:
      field: sa.dptp-controller-manager.arm01.config
      item: build_farm
    sa.dptp-controller-manager.arm01.token.txt:
      field: sa.dptp-controller-manager.arm01.token.txt
      item: build_farm
    sa.dptp-controller-manager.build01.config:
      field: sa.dptp-controller-manager.build01.config
      item: build_farm
    sa.dptp-controller-manager.build01.token.txt:
      field: sa.dptp-controller-manager.build01.token.txt
      item: build_farm
    sa.dptp-controller-manager.build02.config:
      field: sa.dptp-controller-manager.build02.config
      item: build_farm
    sa.dptp-controller-manager.build02.token.txt:
      field: sa.dptp-controller-manager.build02.token.txt
      item: build_farm
    sa.dptp-controller-manager.build03.config:
      field: sa.dptp-controller-manager.build03.config
      item: build_farm
    sa.dptp-controller-manager.build03.token.txt:
      field: sa.dptp-controller-manager.build03.token.txt
      item: build_farm
    sa.dptp-controller-manager.build04.config:
      field: sa.dptp-controller-manager.build04.config
      item: build_farm
    sa.dptp-controller-manager.build04.token.txt:
      field: sa.dptp-controller-manager.build04.token.txt
      item: build_farm
    sa.dptp-controller-manager.build05.config:
      field: sa.dptp-controller-manager.build05.config
      item: build_farm
    sa.dptp-controller-manager.build05.token.txt:
      field: sa.dptp-controller-manager.build05.token.txt
      item: build_farm
    sa.dptp-controller-manager.build09.config:
      field: sa.dptp-controller-manager.build09.config
      item: build_farm
    sa.dptp-controller-manager.build09.token.txt:
      field: sa.dptp-controller-manager.build09.token.txt
      item: build_farm
    sa.dptp-controller-manager.multi01.config:
      field: sa.dptp-controller-manager.multi01.config
      item: build_farm
    sa.dptp-controller-manager.multi01.token.txt:
      field: sa.dptp-controller-manager.multi01.token.txt
      item: build_farm
    sa.dptp-controller-manager.vsphere.config:
      field: sa.dptp-controller-manager.vsphere.config
      item: build_farm
    sa.dptp-controller-manager.vsphere.token.txt:
      field: sa.dptp-controller-manager.vsphere.token.txt
      item: build_farm
    sa.dptp-controller-manager.vsphere02.config:
      field: sa.dptp-controller-manager.vsphere02.config
      item: build_farm
    sa.dptp-controller-manager.vsphere02.token.txt:
      field: sa.dptp-controller-manager.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: dptp-controller-manager
    namespace: ci
- from:
    sa.promoted-image-governor.build01.config:
      field: sa.promoted-image-governor.build01.config
      item: build_farm
    sa.promoted-image-governor.build01.token.txt:
      field: sa.promoted-image-governor.build01.token.txt
      item: build_farm
    sa.promoted-image-governor.build02.config:
      field: sa.promoted-image-governor.build02.config
      item: build_farm
    sa.promoted-image-governor.build02.token.txt:
      field: sa.promoted-image-governor.build02.token.txt
      item: build_farm
    sa.promoted-image-governor.build03.config:
      field: sa.promoted-image-governor.build03.config
      item: build_farm
    sa.promoted-image-governor.build03.token.txt:
      field: sa.promoted-image-governor.build03.token.txt
      item: build_farm
    sa.promoted-image-governor.build04.config:
      field: sa.promoted-image-governor.build04.config
      item: build_farm
    sa.promoted-image-governor.build04.token.txt:
      field: sa.promoted-image-governor.build04.token.txt
      item: build_farm
    sa.promoted-image-governor.build05.config:
      field: sa.promoted-image-governor.build05.config
      item: build_farm
    sa.promoted-image-governor.build05.token.txt:
      field: sa.promoted-image-governor.build05.token.txt
      item: build_farm
    sa.promoted-image-governor.build09.config:
      field: sa.promoted-image-governor.build09.config
      item: build_farm
    sa.promoted-image-governor.build09.token.txt:
      field: sa.promoted-image-governor.build09.token.txt
      item: build_farm
    sa.promoted-image-governor.multi01.config:
      field: sa.promoted-image-governor.multi01.config
      item: build_farm
    sa.promoted-image-governor.multi01.token.txt:
      field: sa.promoted-image-governor.multi01.token.txt
      item: build_farm
    sa.promoted-image-governor.vsphere.config:
      field: sa.promoted-image-governor.vsphere.config
      item: build_farm
    sa.promoted-image-governor.vsphere.token.txt:
      field: sa.promoted-image-governor.vsphere.token.txt
      item: build_farm
    sa.promoted-image-governor.vsphere02.config:
      field: sa.promoted-image-governor.vsphere02.config
      item: build_farm
    sa.promoted-image-governor.vsphere02.token.txt:
      field: sa.promoted-image-governor.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: promoted-image-governor
    namespace: ci
- from:
    credentials:
      field: credentials
      item: result-aggregator
    passwd:
      field: passwd
      item: result-aggregator
  to:
  - cluster_groups:
    - build_farm
    name: result-aggregator
    namespace: ci
- from:
    sa.ci-operator.arm01.config:
      field: sa.ci-operator.arm01.config
      item: build_farm
    sa.ci-operator.arm01.token.txt:
      field: sa.ci-operator.arm01.token.txt
      item: build_farm
    sa.ci-operator.build01.config:
      field: sa.ci-operator.build01.config
      item: build_farm
    sa.ci-operator.build01.token.txt:
      field: sa.ci-operator.build01.token.txt
      item: build_farm
    sa.ci-operator.build02.config:
      field: sa.ci-operator.build02.config
      item: build_farm
    sa.ci-operator.build02.token.txt:
      field: sa.ci-operator.build02.token.txt
      item: build_farm
    sa.ci-operator.build03.config:
      field: sa.ci-operator.build03.config
      item: build_farm
    sa.ci-operator.build03.token.txt:
      field: sa.ci-operator.build03.token.txt
      item: build_farm
    sa.ci-operator.build04.config:
      field: sa.ci-operator.build04.config
      item: build_farm
    sa.ci-operator.build04.token.txt:
      field: sa.ci-operator.build04.token.txt
      item: build_farm
    sa.ci-operator.build05.config:
      field: sa.ci-operator.build05.config
      item: build_farm
    sa.ci-operator.build05.token.txt:
      field: sa.ci-operator.build05.token.txt
      item: build_farm
    sa.ci-operator.build09.config:
      field: sa.ci-operator.build09.config
      item: build_farm
    sa.ci-operator.build09.token.txt:
      field: sa.ci-operator.build09.token.txt
      item: build_farm
    sa.ci-operator.multi01.config:
      field: sa.ci-operator.multi01.config
      item: build_farm
    sa.ci-operator.multi01.token.txt:
      field: sa.ci-operator.multi01.token.txt
      item: build_farm
    sa.ci-operator.vsphere.config:
      field: sa.ci-operator.vsphere.config
      item: build_farm
    sa.ci-operator.vsphere.token.txt:
      field: sa.ci-operator.vsphere.token.txt
      item: build_farm
    sa.ci-operator.vsphere02.config:
      field: sa.ci-operator.vsphere02.config
      item: build_farm
    sa.ci-operator.vsphere02.token.txt:
      field: sa.ci-operator.vsphere02.token.txt
      item: build_farm
    sa.pj-rehearse.app.ci.config:
      field: sa.pj-rehearse.app.ci.config
      item: build_farm
    sa.pj-rehearse.app.ci.token.txt:
      field: sa.pj-rehearse.app.ci.token.txt
      item: build_farm
  to:
  - cluster_groups:
    - build_farm
    name: pj-rehearse
    namespace: ci
- from:
    sa.ci-chat-bot.arm01.config:
      field: sa.ci-chat-bot.arm01.config
      item: ci-chat-bot
    sa.ci-chat-bot.arm01.token.txt:
      field: sa.ci-chat-bot.arm01.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build01.config:
      field: sa.ci-chat-bot.build01.config
      item: ci-chat-bot
    sa.ci-chat-bot.build01.token.txt:
      field: sa.ci-chat-bot.build01.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build02.config:
      field: sa.ci-chat-bot.build02.config
      item: ci-chat-bot
    sa.ci-chat-bot.build02.token.txt:
      field: sa.ci-chat-bot.build02.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build03.config:
      field: sa.ci-chat-bot.build03.config
      item: ci-chat-bot
    sa.ci-chat-bot.build03.token.txt:
      field: sa.ci-chat-bot.build03.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build04.config:
      field: sa.ci-chat-bot.build04.config
      item: ci-chat-bot
    sa.ci-chat-bot.build04.token.txt:
      field: sa.ci-chat-bot.build04.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build05.config:
      field: sa.ci-chat-bot.build05.config
      item: ci-chat-bot
    sa.ci-chat-bot.build05.token.txt:
      field: sa.ci-chat-bot.build05.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.build09.config:
      field: sa.ci-chat-bot.build09.config
      item: ci-chat-bot
    sa.ci-chat-bot.build09.token.txt:
      field: sa.ci-chat-bot.build09.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.multi01.config:
      field: sa.ci-chat-bot.multi01.config
      item: ci-chat-bot
    sa.ci-chat-bot.multi01.token.txt:
      field: sa.ci-chat-bot.multi01.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.vsphere.config:
      field: sa.ci-chat-bot.vsphere.config
      item: ci-chat-bot
    sa.ci-chat-bot.vsphere.token.txt:
      field: sa.ci-chat-bot.vsphere.token.txt
      item: ci-chat-bot
    sa.ci-chat-bot.vsphere02.config:
      field: sa.ci-chat-bot.vsphere02.config
      item: ci-chat-bot
    sa.ci-chat-bot.vsphere02.token.txt:
      field: sa.ci-chat-bot.vsphere02.token.txt
      item: ci-chat-bot
    sa.hypershift-workload.hive.config:
      field: sa.hypershift-workload.hive.config
      item: build_farm
    sa.hypershift-workload.hive.token.txt:
      field: sa.hypershift-workload.hive.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: ci-chat-bot-kubeconfigs
    namespace: ci
- from:
    sa.github-ldap-user-group-creator.arm01.config:
      field: sa.github-ldap-user-group-creator.arm01.config
      item: build_farm
    sa.github-ldap-user-group-creator.arm01.token.txt:
      field: sa.github-ldap-user-group-creator.arm01.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build01.config:
      field: sa.github-ldap-user-group-creator.build01.config
      item: build_farm
    sa.github-ldap-user-group-creator.build01.token.txt:
      field: sa.github-ldap-user-group-creator.build01.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build02.config:
      field: sa.github-ldap-user-group-creator.build02.config
      item: build_farm
    sa.github-ldap-user-group-creator.build02.token.txt:
      field: sa.github-ldap-user-group-creator.build02.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build03.config:
      field: sa.github-ldap-user-group-creator.build03.config
      item: build_farm
    sa.github-ldap-user-group-creator.build03.token.txt:
      field: sa.github-ldap-user-group-creator.build03.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build04.config:
      field: sa.github-ldap-user-group-creator.build04.config
      item: build_farm
    sa.github-ldap-user-group-creator.build04.token.txt:
      field: sa.github-ldap-user-group-creator.build04.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build05.config:
      field: sa.github-ldap-user-group-creator.build05.config
      item: build_farm
    sa.github-ldap-user-group-creator.build05.token.txt:
      field: sa.github-ldap-user-group-creator.build05.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.build09.config:
      field: sa.github-ldap-user-group-creator.build09.config
      item: build_farm
    sa.github-ldap-user-group-creator.build09.token.txt:
      field: sa.github-ldap-user-group-creator.build09.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.hive.config:
      field: sa.github-ldap-user-group-creator.hive.config
      item: build_farm
    sa.github-ldap-user-group-creator.hive.token.txt:
      field: sa.github-ldap-user-group-creator.hive.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.multi01.config:
      field: sa.github-ldap-user-group-creator.multi01.config
      item: build_farm
    sa.github-ldap-user-group-creator.multi01.token.txt:
      field: sa.github-ldap-user-group-creator.multi01.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.vsphere.config:
      field: sa.github-ldap-user-group-creator.vsphere.config
      item: build_farm
    sa.github-ldap-user-group-creator.vsphere.token.txt:
      field: sa.github-ldap-user-group-creator.vsphere.token.txt
      item: build_farm
    sa.github-ldap-user-group-creator.vsphere02.config:
      field: sa.github-ldap-user-group-creator.vsphere02.config
      item: build_farm
    sa.github-ldap-user-group-creator.vsphere02.token.txt:
      field: sa.github-ldap-user-group-creator.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: github-ldap-user-group-creator
    namespace: ci
- from:
    sa.prometheus-user-workload.app.ci.token.txt:
      field: sa.prometheus-user-workload.app.ci.token.txt
      item: app-ci-openshift-user-workload-monitoring-credentials
  to:
  - cluster: app.ci
    name: app-ci-openshift-user-workload-monitoring-credentials
    namespace: ci
- from:
    openshift-gce-devel-ci-infra-users-to-bigquery.json:
      field: openshift-gce-devel-ci-infra-users-to-bigquery.json
      item: openshift-gce-devel-ci-infra-users-to-bigquery
  to:
  - cluster: app.ci
    name: openshift-gce-devel-ci-infra-users-to-bigquery-credentials
    namespace: ci
- from:
    token:
      field: ocm-developer-productivity-staging
      item: cluster-bot-cloud-sso-for-ocm-ephemeral-osd
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-bot-cloud-sso-for-ocm-ephemeral-osd
    namespace: ci
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: cluster-bot-aws-account-for-ephemeral-osd
    AWS_ACCOUNT_ID:
      field: AWS_ACCOUNT_ID
      item: cluster-bot-aws-account-for-ephemeral-osd
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: cluster-bot-aws-account-for-ephemeral-osd
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-bot-aws-account-for-ephemeral-osd
    namespace: ci
- from:
    key.json:
      field: service-account.json
      item: cert-issuer
    openshift-ci-build-farm-cert-issuer.json:
      field: service-account.json
      item: openshift-ci-build-farm-cert-issuer
  to:
  - cluster: build02
    name: cert-issuer
    namespace: cert-manager
  - cluster: build03
    name: cert-issuer
    namespace: cert-manager
  - cluster: build04
    name: cert-issuer
    namespace: cert-manager
  - cluster: build05
    name: cert-issuer
    namespace: cert-manager
- from:
    key.json:
      field: service-account.json
      item: cert-issuer
  to:
  - cluster: app.ci
    name: cert-issuer
    namespace: cert-manager
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: cert-manager
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: cert-manager
    key.json:
      field: service-account.json
      item: cert-issuer
  to:
  - cluster: build01
    name: cert-issuer
    namespace: cert-manager
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: cert-manager-multi01
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: cert-manager-multi01
  to:
  - cluster: multi01
    name: route53-credentials
    namespace: cert-manager
- from:
    service-account.json:
      field: service-account.json
      item: openshift-ci-release-signature-publisher
  to:
  - cluster: app.ci
    name: release-controller-signature-publisher
    namespace: ci
- from:
    openshift-ci.gpg:
      base64_decode: true
      field: openshift-ci.gpg
      item: openshift-ci-release-signature-signer
  to:
  - cluster: app.ci
    name: release-controller-signature-signer
    namespace: ci
- from:
    credentials.json:
      field: credentials.json
      item: openshift-private-viewer
  to:
  - cluster: app.ci
    name: openshift-private-viewer
    namespace: ci
- from:
    credentials.json:
      field: credentials.json
      item: qe-private-deck-viewer
  to:
  - cluster: app.ci
    name: qe-private-deck-viewer
    namespace: ci
- from:
    app_id:
      field: app_id
      item: slack-credentials-dptp-bot
    client_id:
      field: client_id
      item: slack-credentials-dptp-bot
    client_secret:
      field: client_secret
      item: slack-credentials-dptp-bot
    oauth_token:
      field: oauth_token
      item: slack-credentials-dptp-bot
    signing_secret:
      field: signing_secret
      item: slack-credentials-dptp-bot
  to:
  - cluster: app.ci
    name: slack-credentials-dptp-bot
    namespace: ci
- from:
    app_id:
      field: app_id
      item: slack-credentials-dptp-bot-alpha
    client_id:
      field: client_id
      item: slack-credentials-dptp-bot-alpha
    client_secret:
      field: client_secret
      item: slack-credentials-dptp-bot-alpha
    oauth_token:
      field: oauth_token
      item: slack-credentials-dptp-bot-alpha
    signing_secret:
      field: signing_secret
      item: slack-credentials-dptp-bot-alpha
  to:
  - cluster: app.ci
    name: slack-credentials-dptp-bot-alpha
    namespace: ci
- from:
    password:
      field: password
      item: jira-credentials-dptp-bot
  to:
  - cluster: app.ci
    name: jira-credentials-dptp-bot
    namespace: ci
- from:
    token:
      field: token
      item: jira-token-dptp-bot
  to:
  - cluster: app.ci
    name: jira-token-dptp-bot
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
  to:
  - cluster: app.ci
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: app.ci
    name: registry-push-credentials-ci-images-mirror
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster: app.ci
    name: mirror-redhat-io-to-ci-central-registry-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: brew.registry.redhat.io-pull-secret
        registry_url: brew.registry.redhat.io
  to:
  - cluster: app.ci
    name: mirror-brew-redhat-io-to-ci-central-registry-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.arm-build01.arm-build.devcluster.openshift.com
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: arm01
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: arm01
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build01.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build01
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build01
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build02
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build02
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: registry.apps.build01-us-west-2.vmc.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: vsphere
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: origin
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-ppc64le
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-ppc64le-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-s390x
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-s390x-priv
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-arm64
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: registry-pull-credentials
    namespace: ocp-arm64-priv
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.arm-build01.arm-build.devcluster.openshift.com
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: arm01
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: arm01
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build01.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build01
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build01
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build02.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build02
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build02
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: registry.apps.build01-us-west-2.vmc.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
  to:
  - cluster: vsphere
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
  to:
  - cluster_groups:
    - non_app_ci
    name: insights-live
    namespace: test-credentials
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: push-token
        item: quay.io
        registry_url: quay.io
      - auth_field: push-token
        item: docker.io
        registry_url: https://index.docker.io/v1/
  to:
  - cluster: app.ci
    name: registry-push-credentials-openshift
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    appid:
      field: appid
      item: openshift-prow-app
    cert:
      field: openshift-prow.2020-12-03.private-key.pem
      item: openshift-prow-app
    hmac:
      field: hmac
      item: openshift-prow-app
  to:
  - cluster: app.ci
    name: openshift-prow-github-app
    namespace: ci
- from:
    appid:
      field: appid
      item: openshift-ci-staging-prow-app
    cert:
      field: cert
      item: openshift-ci-staging-prow-app
    hmac:
      field: hmac
      item: openshift-ci-staging-prow-app
  to:
  - cluster: app.ci
    name: openshift-prow-github-app
    namespace: ci-staging
- from:
    client-id:
      field: rh-internal-sso-client-id
      item: dex
    client-secret:
      field: rh-internal-sso-client-secret
      item: dex
  to:
  - cluster: app.ci
    name: rh-sso
    namespace: dex
- from:
    app.ci-id:
      field: app.ci-id
      item: dex
    app.ci-secret:
      field: app.ci-secret
      item: dex
  to:
  - cluster: app.ci
    name: app.ci-secret
    namespace: dex
- from:
    arm01-id:
      field: arm01-id
      item: dex
    arm01-secret:
      field: arm01-secret
      item: dex
  to:
  - cluster: app.ci
    name: arm01-secret
    namespace: dex
  - cluster: app.ci
    name: arm01-dex-oidc
    namespace: ci
- from:
    clientSecret:
      field: arm01-secret
      item: dex
  to:
  - cluster: arm01
    name: dex-rh-sso
    namespace: openshift-config
- from:
    build01-id:
      field: build01-id
      item: dex
    build01-secret:
      field: build01-secret
      item: dex
  to:
  - cluster: app.ci
    name: build01-secret
    namespace: dex
  - cluster: app.ci
    name: build01-dex-oidc
    namespace: ci
- from:
    clientSecret:
      field: build01-secret
      item: dex
  to:
  - cluster: build01
    name: dex-rh-sso
    namespace: openshift-config
- from:
    build02-id:
      field: build02-id
      item: dex
    build02-secret:
      field: build02-secret
      item: dex
  to:
  - cluster: app.ci
    name: build02-secret
    namespace: dex
  - cluster: app.ci
    name: build02-dex-oidc
    namespace: ci
- from:
    build03-id:
      field: build03-id
      item: dex
    build03-secret:
      field: build03-secret
      item: dex
  to:
  - cluster: app.ci
    name: build03-secret
    namespace: dex
- from:
    build04-id:
      field: build04-id
      item: dex
    build04-secret:
      field: build04-secret
      item: dex
  to:
  - cluster: app.ci
    name: build04-secret
    namespace: dex
- from:
    build05-id:
      field: build05-id
      item: dex
    build05-secret:
      field: build05-secret
      item: dex
  to:
  - cluster: app.ci
    name: build05-secret
    namespace: dex
- from:
    build09-id:
      field: build09-id
      item: dex
    build09-secret:
      field: build09-secret
      item: dex
  to:
  - cluster: app.ci
    name: build09-secret
    namespace: dex
  - cluster: app.ci
    name: build09-dex-oidc
    namespace: ci
- from:
    multi01-id:
      field: multi01-id
      item: dex
    multi01-secret:
      field: multi01-secret
      item: dex
  to:
  - cluster: app.ci
    name: multi01-secret
    namespace: dex
- from:
    dpcr-id:
      field: dpcr-id
      item: dex
    dpcr-secret:
      field: dpcr-secret
      item: dex
  to:
  - cluster: app.ci
    name: dpcr-secret
    namespace: dex
- from:
    hive-id:
      field: hive-id
      item: dex
    hive-secret:
      field: hive-secret
      item: dex
  to:
  - cluster: app.ci
    name: hive-secret
    namespace: dex
- from:
    art-id:
      field: art-id
      item: dex
    art-secret:
      field: art-secret
      item: dex
  to:
  - cluster: app.ci
    name: art-secret
    namespace: dex
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: aws-prow-retester-robot-user-credentials
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: aws-prow-retester-robot-user-credentials
  to:
  - cluster: app.ci
    name: retester-aws-credentials
    namespace: ci
- from:
    clientSecret:
      field: build02-secret
      item: dex
  to:
  - cluster: build02
    name: dex-rh-sso
    namespace: openshift-config
- from:
    clientSecret:
      field: build09-secret
      item: dex
  to:
  - cluster: build09
    name: dex-rh-sso
    namespace: openshift-config
- from:
    .awscred:
      field: .awscred
      item: openshift-ci-2-aws-credentials
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: id_rsa
      item: openshift-ci-2-aws-credentials
    ssh-publickey:
      field: id_rsa.pub
      item: openshift-ci-2-aws-credentials
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-2
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: openshift-ci-3-aws-credentials
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: id_rsa
      item: openshift-ci-3-aws-credentials
    ssh-publickey:
      field: id_rsa.pub
      item: openshift-ci-3-aws-credentials
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-3
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster: hive
    name: pull-secret
    namespace: ci-cluster-pool
    type: kubernetes.io/dockerconfigjson
- from:
    aws_access_key_id:
      field: aws_access_key_id
      item: openshift-ci-pools-hive
    aws_secret_access_key:
      field: aws_secret_access_key
      item: openshift-ci-pools-hive
  to:
  - cluster: hive
    name: hive-aws-credentials
    namespace: ci-cluster-pool
  - cluster: hive
    name: hive-aws-credentials
    namespace: fake-cluster-pool
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-hypershift
    namespace: ci
- from:
    vault-secret-manager-id:
      field: vault-secret-manager-client-id
      item: dex
    vault-secret-manager-secret:
      field: vault-secret-manager-client-secret
      item: dex
  to:
  - cluster: app.ci
    name: vault-secret-manager
    namespace: dex
  - cluster: app.ci
    name: vault-secret-collection-manager-oauth
    namespace: ci
- from:
    secret:
      field: secret
      item: vault-secret-collection-manager-cookie-secret
  to:
  - cluster: app.ci
    name: vault-secret-collection-manager-cookie-secret
    namespace: ci
- from:
    client-id:
      field: client-id
      item: loki-collector
    client-secret:
      field: client-secret
      item: loki-collector
  to:
  - cluster_groups:
    - build_farm
    name: promtail-prod-creds
    namespace: loki
- from:
    WebHookSecretKey:
      field: Token
      item: github-deploymentconfig-webhook-token
  to:
  - cluster: app.ci
    name: github-deploymentconfig-trigger
    namespace: ci
- from:
    sa.cluster-display.app.ci.config:
      field: sa.cluster-display.app.ci.config
      item: build_farm
    sa.cluster-display.app.ci.token.txt:
      field: sa.cluster-display.app.ci.token.txt
      item: build_farm
    sa.cluster-display.arm01.config:
      field: sa.cluster-display.arm01.config
      item: build_farm
    sa.cluster-display.arm01.token.txt:
      field: sa.cluster-display.arm01.token.txt
      item: build_farm
    sa.cluster-display.build01.config:
      field: sa.cluster-display.build01.config
      item: build_farm
    sa.cluster-display.build01.token.txt:
      field: sa.cluster-display.build01.token.txt
      item: build_farm
    sa.cluster-display.build02.config:
      field: sa.cluster-display.build02.config
      item: build_farm
    sa.cluster-display.build02.token.txt:
      field: sa.cluster-display.build02.token.txt
      item: build_farm
    sa.cluster-display.build03.config:
      field: sa.cluster-display.build03.config
      item: build_farm
    sa.cluster-display.build03.token.txt:
      field: sa.cluster-display.build03.token.txt
      item: build_farm
    sa.cluster-display.build04.config:
      field: sa.cluster-display.build04.config
      item: build_farm
    sa.cluster-display.build04.token.txt:
      field: sa.cluster-display.build04.token.txt
      item: build_farm
    sa.cluster-display.build05.config:
      field: sa.cluster-display.build05.config
      item: build_farm
    sa.cluster-display.build05.token.txt:
      field: sa.cluster-display.build05.token.txt
      item: build_farm
    sa.cluster-display.build09.config:
      field: sa.cluster-display.build09.config
      item: build_farm
    sa.cluster-display.build09.token.txt:
      field: sa.cluster-display.build09.token.txt
      item: build_farm
    sa.cluster-display.hive.config:
      field: sa.cluster-display.hive.config
      item: build_farm
    sa.cluster-display.hive.token.txt:
      field: sa.cluster-display.hive.token.txt
      item: build_farm
    sa.cluster-display.multi01.config:
      field: sa.cluster-display.multi01.config
      item: build_farm
    sa.cluster-display.multi01.token.txt:
      field: sa.cluster-display.multi01.token.txt
      item: build_farm
    sa.cluster-display.vsphere.config:
      field: sa.cluster-display.vsphere.config
      item: build_farm
    sa.cluster-display.vsphere.token.txt:
      field: sa.cluster-display.vsphere.token.txt
      item: build_farm
    sa.cluster-display.vsphere02.config:
      field: sa.cluster-display.vsphere02.config
      item: build_farm
    sa.cluster-display.vsphere02.token.txt:
      field: sa.cluster-display.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: cluster-display
    namespace: ci
- from:
    github-client-id:
      field: github-client-id
      item: repo-init-github-client
    github-client-secret:
      field: github-client-secret
      item: repo-init-github-client
    github-redirect-uri:
      field: github-redirect-uri
      item: repo-init-github-client
  to:
  - cluster: app.ci
    name: repo-init-client
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-ibmcloud
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-ibmcloud-qe
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-ibmcloud-multi-ppc64le
    namespace: ci
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-ibmcloud-multi-s390x
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-powervs-1
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-powervs-2
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-hypershift-powervs
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-hypershift-powervs-cb
    namespace: ci
- from:
    cacert.pem:
      field: cacert.pem
      item: rh-corp-logging
    outputs.conf:
      field: outputs.conf
      item: rh-corp-logging
    server.pem:
      field: server.pem
      item: rh-corp-logging
    splunk-client-osd-pw.pem:
      field: splunk-client-osd-pw.pem
      item: rh-corp-logging
    splunk.conf:
      field: splunk.conf
      item: rh-corp-logging
  to:
  - cluster_groups:
    - non_app_ci
    name: splunk-auth
    namespace: rh-corp-logging
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build03.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build03
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build03
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build03_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build03.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build03
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build03
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.build03.config
      item: build_farm
    sa.ci-operator.build03.token.txt:
      field: sa.ci-operator.build03.token.txt
      item: build_farm
  to:
  - cluster: build03
    name: ci-operator
    namespace: test-credentials
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build04.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build04
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build04
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build04_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build04.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build04
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build04
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.build04.config
      item: build_farm
    sa.ci-operator.build04.token.txt:
      field: sa.ci-operator.build04.token.txt
      item: build_farm
  to:
  - cluster: build04
    name: ci-operator
    namespace: test-credentials
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build05.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build05
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build05
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build05_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build05.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build05
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build05
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.build05.config
      item: build_farm
    sa.ci-operator.build05.token.txt:
      field: sa.ci-operator.build05.token.txt
      item: build_farm
  to:
  - cluster: build05
    name: ci-operator
    namespace: test-credentials
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-nutanix
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-nutanix-qe
    namespace: ci
- from:
    .awscred:
      field: .awscred
      item: jenkins-ci-iam
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-nutanix-qe-dis
    namespace: ci
- from:
    api-token:
      field: api-token
      item: snyk-credentials
  to:
  - cluster_groups:
    - build_farm
    name: snyk-credentials
    namespace: ci
- from:
    content:
      field: content
      item: cloudfront-app-ci-internal-registry-private-key
  to:
  - cluster: app.ci
    name: cloudfront-app-ci-internal-registry-private-key
    namespace: openshift-image-registry
- from:
    content:
      field: content
      item: cloudfront-buildfarm-internal-registry-private-key
  to:
  - cluster_groups:
    - non_app_ci
    name: cloudfront-buildfarm-internal-registry-private-key
    namespace: openshift-image-registry
- from:
    AWS_ACCESS_KEY_ID:
      field: AWS_ACCESS_KEY_ID
      item: quayio-pull-through-cache-user
    AWS_SECRET_ACCESS_KEY:
      field: AWS_SECRET_ACCESS_KEY
      item: quayio-pull-through-cache-user
  to:
  - cluster: app.ci
    name: quayio-pull-through-cache-credentials
    namespace: ci
- from:
    credentials.json:
      field: credentials.json
      item: gcs-quayio-pull-through-cache-service-account
  to:
  - cluster: app.ci
    name: gcs-sa-quayio-pull-through-cache
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: brew.registry.redhat.io-pull-secret
        registry_url: brew.registry.redhat.io
      - auth_field: auth
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
  to:
  - cluster: app.ci
    name: multi-arch-mirroring-secrets
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
  to:
  - cluster_groups:
    - osd_global_pull_secret
    name: pull-secret
    namespace: openshift-config
- from:
    OPENSHIFT_MONITORING_CI_TOKEN:
      field: sa.ci-monitoring.app.ci.token.txt
      item: openshift-monitoring-credentials
    OPENSHIFT_MONITORING_CI_TOKEN_ON_HIVE:
      field: sa.ci-monitoring.hive.token.txt
      item: openshift-monitoring-credentials
    PROMETHEUS_USER_WORKLOAD_TOKEN:
      field: sa.prometheus-user-workload.app.ci.token.txt
      item: app-ci-openshift-user-workload-monitoring-credentials
  to:
  - cluster: app.ci
    name: external-credentials
    namespace: ci-grafana
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-aws-virtualization
    namespace: ci
- from:
    insights-live.yaml:
      field: insights-live.yaml
      item: insights-ci-account
    ops-mirror.pem:
      field: cert-key.pem
      item: mirror.openshift.com
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    repository-credentials-password:
      field: password
      item: mirror.openshift.com
    repository-credentials-username:
      field: username
      item: mirror.openshift.com
    ssh-privatekey:
      field: ssh-privatekey
      item: gcp-openshift-gce-devel-ci
    ssh-publickey:
      field: ssh-publickey
      item: gcp-openshift-gce-devel-ci
    telemeter-token:
      field: telemeter-token
      item: telemeter
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-gcp-virtualization
    namespace: ci
- from:
    pull-secret:
      dockerconfigJSON:
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: cloud.openshift.com-pull-secret
        registry_url: cloud.openshift.com
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
      - auth_field: auth
        email_field: email
        item: registry.connect.redhat.com-pull-secret
        registry_url: registry.connect.redhat.com
      - auth_field: auth
        email_field: email
        item: registry.redhat.io-pull-secret
        registry_url: registry.redhat.io
    ssh-privatekey:
      field: ssh-privatekey
      item: jenkins-ci-iam
    ssh-publickey:
      field: ssh-publickey
      item: jenkins-ci-iam
  to:
  - cluster_groups:
    - non_app_ci
    name: cluster-secrets-azure-virtualization
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.multi01.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: multi01
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: multi01
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.multi01.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: multi01
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: multi01
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.multi01.config
      item: build_farm
    sa.ci-operator.multi01.token.txt:
      field: sa.ci-operator.multi01.token.txt
      item: build_farm
  to:
  - cluster: multi01
    name: ci-operator
    namespace: test-credentials
- from:
    quay_io_password:
      field: quay_io_password
      item: quay-io-pull-credentials
    quay_io_username:
      field: quay_io_username
      item: quay-io-pull-credentials
  to:
  - cluster: app.ci
    name: quay-io-pull-credentials
    namespace: ci
- from:
    sa.ci-images-mirror.app.ci.config:
      field: sa.ci-images-mirror.app.ci.config
      item: build_farm
    sa.ci-images-mirror.app.ci.token.txt:
      field: sa.ci-images-mirror.app.ci.token.txt
      item: build_farm
  to:
  - cluster: app.ci
    name: ci-images-mirror
    namespace: ci
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_multi-arch-builder-controller_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: registry.multi-build01.arm-build.devcluster.openshift.com
  to:
  - cluster: multi01
    name: multi-arch-builder-controller-multi01-registry-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.apps.build02.vmc.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: vsphere02
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere02
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: registry.apps.build02.vmc.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: vsphere02
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere02
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.vsphere02.config
      item: build_farm
    sa.ci-operator.vsphere02.token.txt:
      field: sa.ci-operator.vsphere02.token.txt
      item: build_farm
  to:
  - cluster: vsphere02
    name: ci-operator
    namespace: test-credentials
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: app.ci
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: app.ci
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_build01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: build01
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build01
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_build02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: build02
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build02
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_build03_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: build03
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build03
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_build04_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: build04
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build04
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_build05_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: build05
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build05
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_multi01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: multi01
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: multi01
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_arm01_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: arm01
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: arm01
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_vsphere_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: vsphere
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-pusher_vsphere02_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
  to:
  - cluster: vsphere02
    name: manifest-tool-local-pusher
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: vsphere02
    name: manifest-tool-local-pusher
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build09.ci.openshift.org
      - auth_field: token_image-pusher_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        item: quay-io-push-credentials
        registry_url: quay.io/openshift/ci
  to:
  - cluster: build09
    name: registry-push-credentials-ci-central
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build09
    name: registry-push-credentials-ci-central
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    .dockerconfigjson:
      dockerconfigJSON:
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc.cluster.local:5000
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: image-registry.openshift-image-registry.svc:5000
      - auth_field: token_image-puller_build09_reg_auth_value.txt
        item: build_farm
        registry_url: registry.build09.ci.openshift.org
      - auth_field: token_image-puller_app.ci_reg_auth_value.txt
        item: build_farm
        registry_url: registry.ci.openshift.org
      - auth_field: auth
        email_field: email
        item: quay.io-pull-secret
        registry_url: quay.io
  to:
  - cluster: build09
    name: registry-pull-credentials
    namespace: ci
    type: kubernetes.io/dockerconfigjson
  - cluster: build09
    name: registry-pull-credentials
    namespace: test-credentials
    type: kubernetes.io/dockerconfigjson
- from:
    kubeconfig:
      field: sa.ci-operator.build09.config
      item: build_farm
    sa.ci-operator.build09.token.txt:
      field: sa.ci-operator.build09.token.txt
      item: build_farm
  to:
  - cluster: build09
    name: ci-operator
    namespace: test-credentials
user_secrets_target_clusters:
- app.ci
- arm01
- build01
- build02
- build03
- build04
- build05
- build09
- hive
- multi01
- vsphere
- vsphere02
vault_dptp_prefix: dptp