The ci-secret-bootstrap tool populates secrets onto our ci-clusters based on the items saved in Vault. This directory contains the config file to run the tool.
The defined target ci-secret-bootstrap in Makefile runs the tool as a container.
Be aware that the Makefile makes assumptions about how your contexts are set up and that it will fail, should any of the contexts which are used as cluster in its config file not be present.
Following the deprecation and removal of ServiceAccount token Secrets in
Kubernetes 1.24, kubeconfig files are now generated in two parts. See the
ci-secret-generator documentation for details.