harbor-operator: converge secrets
This commit is contained in:
@@ -1,11 +1,3 @@
|
|||||||
Deploy with:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl create namespace harbor-operator
|
|
||||||
kubectl -n harbor-operator create secret generic harbor-minio-credentials --from-literal REGISTRY_STORAGE_S3_ACCESSKEY=...--from-literal=REGISTRY_STORAGE_S3_SECRETKEY=...
|
|
||||||
kubectl -n harbor-operator create secret generic harbor-postgres-password --from-literal password=...
|
|
||||||
|
|
||||||
```
|
|
||||||
# Deployment
|
# Deployment
|
||||||
With ArgoCD. Render it locally:
|
With ArgoCD. Render it locally:
|
||||||
|
|
||||||
|
|||||||
@@ -95,7 +95,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: postgres-appuser-password
|
name: postgres-appuser-password
|
||||||
key: POSTGRES_APPUSER_PASSWORD
|
key: password # required by harbor
|
||||||
- name: EXPORTER_PASSWORD
|
- name: EXPORTER_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
@@ -138,7 +138,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
size: 32
|
size: 32
|
||||||
mapping:
|
mapping:
|
||||||
- key: POSTGRES_APPUSER_PASSWORD
|
- key: password
|
||||||
value: "%(plaintext)s"
|
value: "%(plaintext)s"
|
||||||
---
|
---
|
||||||
apiVersion: codemowers.cloud/v1beta1
|
apiVersion: codemowers.cloud/v1beta1
|
||||||
|
|||||||
@@ -130,7 +130,7 @@ database:
|
|||||||
port: "5432"
|
port: "5432"
|
||||||
username: "kspace_harbor"
|
username: "kspace_harbor"
|
||||||
coreDatabase: "harbor-operator"
|
coreDatabase: "harbor-operator"
|
||||||
existingSecret: "harbor-postgres-password"
|
existingSecret: "postgres-appuser-password"
|
||||||
sslmode: "disable"
|
sslmode: "disable"
|
||||||
|
|
||||||
redis:
|
redis:
|
||||||
|
|||||||
Reference in New Issue
Block a user