e898a18b4d
- Removed direct references to sensitive data (e.g., MongoDB URI, Gitea token, RabbitMQ password) in values files and replaced them with a structured secrets section. - Updated deployment and configuration templates to inject secrets from FreeleapsSecretStore, enhancing security and maintainability. - This change aligns with the new secret management strategy across the application. Signed-off-by: zhenyus <zhenyus@mathmast.com>
20 lines
642 B
YAML
20 lines
642 B
YAML
apiVersion: freeleaps.com/v1alpha1
|
|
kind: FreeleapsSecret
|
|
metadata:
|
|
name: freeleaps-devsvc-secrets
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
secretStoreRef:
|
|
kind: {{ .Values.devsvc.secrets.secretStoreRef.kind }}
|
|
name: {{ .Values.devsvc.secrets.secretStoreRef.name }}
|
|
target:
|
|
name: {{ .Values.devsvc.secrets.target.name }}
|
|
creationPolicy: {{ .Values.devsvc.secrets.target.creationPolicy }}
|
|
refreshInterval: {{ .Values.devsvc.secrets.refreshInterval }}
|
|
data:
|
|
{{- range .Values.devsvc.secrets.data }}
|
|
- secretKey: {{ .key }}
|
|
remoteRef:
|
|
key: {{ .remoteRef.key }}
|
|
type: {{ .remoteRef.type }}
|
|
{{- end }} |