airship
/
deckhand
Code Issues Proposed changes

Chart: Use k8s secret to store config 

This PS moves the chart to use secrets to store potentially sensitive
config information.

Depends-On: https://review.openstack.org/#/c/593732

Change-Id: I884a68b379beefa3aa73018613ac37c0f3ee089d
Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley 2018-08-22 20:52:17 -05:00
parent 1b3b55af5b
commit 36c30d47bf
4 changed files with 12 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
charts/deckhand/templates/configmap-etc.yaml
View File

@ -66,16 +66,13 @@
--- ---
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: Secret
metadata: metadata:
name: deckhand-etc name: deckhand-etc
type: Opaque
data: data:
deckhand.conf: |+ deckhand.conf: {{ include "helm-toolkit.utils.to_oslo_conf" .Values.conf.deckhand | b46enc }}
{{ include "helm-toolkit.utils.to_oslo_conf" .Values.conf.deckhand | indent 4 }} logging.conf: {{ include "helm-toolkit.utils.to_ini" .Values.conf.logging | b46enc }}
logging.conf: |+ deckhand-paste.ini: {{ include "helm-toolkit.utils.to_ini" .Values.conf.paste | b46enc }}
{{ include "helm-toolkit.utils.to_ini" .Values.conf.logging | indent 4 }} policy.yaml: {{ toYaml .Values.conf.policy | b46enc }}
deckhand-paste.ini: |+
{{ include "helm-toolkit.utils.to_ini" .Values.conf.paste | indent 4 }}
policy.yaml: |+
{{ toYaml .Values.conf.policy | indent 4 }}
{{- end }} {{- end }}

4
charts/deckhand/templates/deployment.yaml
View File

@ -102,8 +102,8 @@ spec:
- name: etc-deckhand - name: etc-deckhand
emptyDir: {} emptyDir: {}
- name: deckhand-etc - name: deckhand-etc
configMap: secret:
name: deckhand-etc secretName: deckhand-etc
defaultMode: 0444 defaultMode: 0444
{{ if $mounts_deckhand.volumes }}{{ toYaml $mounts_deckhand.volumes | indent 8 }}{{ end }} {{ if $mounts_deckhand.volumes }}{{ toYaml $mounts_deckhand.volumes | indent 8 }}{{ end }}
{{- end }} {{- end }}

4
charts/deckhand/templates/job-db-init.yaml
View File

@ -101,8 +101,8 @@ spec:
- name: etc-deckhand - name: etc-deckhand
emptyDir: {} emptyDir: {}
- name: deckhand-etc - name: deckhand-etc
configMap: secret:
name: deckhand-etc secretName: deckhand-etc
defaultMode: 0444 defaultMode: 0444
- name: deckhand-bin - name: deckhand-bin
configMap: configMap:

4
charts/deckhand/templates/job-db-sync.yaml
View File

@ -101,8 +101,8 @@ spec:
- name: etc-deckhand - name: etc-deckhand
emptyDir: {} emptyDir: {}
- name: deckhand-etc - name: deckhand-etc
configMap: secret:
name: deckhand-etc secretName: deckhand-etc
defaultMode: 0444 defaultMode: 0444
- name: deckhand-bin - name: deckhand-bin
configMap: configMap: