airship
/
deckhand
Code Issues Proposed changes

Chart: Use k8s secret to store config 

This PS moves the chart to use secrets to store potentially sensitive
config information.

Depends-On: https://review.openstack.org/#/c/593732

Change-Id: I884a68b379beefa3aa73018613ac37c0f3ee089d
Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley 2018-08-22 20:52:17 -05:00
parent 1b3b55af5b
commit 36c30d47bf
4 changed files with 12 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
charts/deckhand/templates/configmap-etc.yaml
View File

@ -66,16 +66,13 @@
---
apiVersion: v1
kind: ConfigMap
kind: Secret
metadata:
name: deckhand-etc
type: Opaque
data:
deckhand.conf: |+
{{ include "helm-toolkit.utils.to_oslo_conf" .Values.conf.deckhand | indent 4 }}
logging.conf: |+
{{ include "helm-toolkit.utils.to_ini" .Values.conf.logging | indent 4 }}
deckhand-paste.ini: |+
{{ include "helm-toolkit.utils.to_ini" .Values.conf.paste | indent 4 }}
policy.yaml: |+
{{ toYaml .Values.conf.policy | indent 4 }}
deckhand.conf: {{ include "helm-toolkit.utils.to_oslo_conf" .Values.conf.deckhand | b46enc }}
logging.conf: {{ include "helm-toolkit.utils.to_ini" .Values.conf.logging | b46enc }}
deckhand-paste.ini: {{ include "helm-toolkit.utils.to_ini" .Values.conf.paste | b46enc }}
policy.yaml: {{ toYaml .Values.conf.policy | b46enc }}
{{- end }}

4
charts/deckhand/templates/deployment.yaml
View File

@ -102,8 +102,8 @@ spec:
- name: etc-deckhand
emptyDir: {}
- name: deckhand-etc
configMap:
name: deckhand-etc
secret:
secretName: deckhand-etc
defaultMode: 0444
{{ if $mounts_deckhand.volumes }}{{ toYaml $mounts_deckhand.volumes | indent 8 }}{{ end }}
{{- end }}

4
charts/deckhand/templates/job-db-init.yaml
View File

@ -101,8 +101,8 @@ spec:
- name: etc-deckhand
emptyDir: {}
- name: deckhand-etc
configMap:
name: deckhand-etc
secret:
secretName: deckhand-etc
defaultMode: 0444
- name: deckhand-bin
configMap:

4
charts/deckhand/templates/job-db-sync.yaml
View File

@ -101,8 +101,8 @@ spec:
- name: etc-deckhand
emptyDir: {}
- name: deckhand-etc
configMap:
name: deckhand-etc
secret:
secretName: deckhand-etc
defaultMode: 0444
- name: deckhand-bin
configMap: