openshift/secrets/migrate-exclude¶

Params the openshift-secrets-migrate task must never move into the external store

Params the openshift-secrets-migrate task skips even when the cluster's profile chain supplies a LookupUri reference for them. The task discovers migration candidates by introspection (every reference-valued param in the cluster's profile chain), so this list is the safety valve, not an inventory.

Requirements¶

Values are full param names (for example openshift/pull-secret). The task reads this list with ParamComposeExpand, so contributions from the cluster, its profiles, the invoking work order, and global merge instead of shadowing each other.

Usage¶

The default is empty: because contributions COMPOSE, a schema default could never be removed by an override, so this param carries no built-in exclusions. The shared openshift/pull-secret is protected separately by the task itself and opted into via openshift/secrets/migrate-pull-secret.

Objects that Reference openshift/secrets/migrate-exclude¶

• tasks openshift-secrets-migrate in Openshift as part of Templates.[0].Contents (used)

Objects used by openshift/secrets/migrate-exclude¶

Not used in current content packs