Merge pull request #2 from OpSecId/edit-chart-secrets

Change reference to the traction id/key to a secret
bcgov · Nov 26, 2024 · de9eb4b · de9eb4b
2 parents a721751 + 664a647
commit de9eb4b
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/charts/orgbook-publisher/templates/backend/deployment.yaml b/charts/orgbook-publisher/templates/backend/deployment.yaml
@@ -40,9 +40,15 @@ spec:
             - name: TRACTION_API_URL
               value: {{ .Values.backend.traction_api_url }}
             - name: TRACTION_API_KEY
-              value: {{ .Values.backend.traction_api_key }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.backend.fullname }}
+                  key: traction_api_key
             - name: TRACTION_TENANT_ID
-              value: {{ .Values.backend.traction_tenant_id }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.backend.fullname }}
+                  key: traction_tenant_id
 
             # DID WEB SERVER
             - name: DID_WEB_SERVER_URL

diff --git a/charts/orgbook-publisher/templates/backend/secret.yaml b/charts/orgbook-publisher/templates/backend/secret.yaml
@@ -10,4 +10,5 @@ metadata:
   namespace: {{ .Release.Namespace }}
 type: Opaque
 data:
-  secret-key: {{ include "getOrGeneratePass" (dict "Namespace" .Release.Namespace "Kind" "Secret" "Name" (include "backend.fullname" .) "Key" "secret-key" "Length" 32) }}
+  traction_tenant_id: ''
+  traction_api_key: ''