Files
gertjanvg fc74eac0cc [stable/sentry] Pull S3 secrets from Secret rather than ConfigMap (#21990)
* Put S3 keys into Secret and allow specifying an existing secret for that

Signed-off-by: Gert-Jan van Ginkel <gertjanvg@gmail.com>

* [stable/sentry] Version bump

Signed-off-by: Gert-Jan van Ginkel <gertjanvg@gmail.com>
2020-04-18 01:29:36 -07:00

35 lines
1.4 KiB
YAML

apiVersion: v1
kind: Secret
metadata:
name: {{ template "sentry.fullname" . }}
labels:
app: {{ template "sentry.fullname" . }}
chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
type: Opaque
data:
{{ if .Values.sentrySecret }}
sentry-secret: {{ .Values.sentrySecret | b64enc | quote }}
{{ else }}
sentry-secret: {{ randAlphaNum 40 | b64enc | quote }}
{{ end }}
{{- if not .Values.email.existingSecret }}
smtp-password: {{ default "" .Values.email.password | b64enc | quote }}
{{ end }}
{{ if .Values.user.password }}
user-password: {{ .Values.user.password | b64enc | quote }}
{{ else }}
user-password: {{ randAlphaNum 16 | b64enc | quote }}
{{ end }}
{{ if or (not .Values.postgresql.enabled) (.Values.postgresql.password) }}
postgresql-password: {{ .Values.postgresql.postgresqlPassword | default "" | b64enc | quote }}
{{ end }}
{{ if and (not .Values.redis.enabled) (.Values.redis.password) }}
redis-password: {{ .Values.redis.password | default "" | b64enc | quote }}
{{ end }}
{{- if and (eq .Values.filestore.backend "s3") (not .Values.filestore.s3.existingSecret) }}
AWS_ACCESS_KEY_ID: {{ .Values.filestore.s3.accessKey | default "" | b64enc | quote }}
AWS_SECRET_ACCESS_KEY: {{ .Values.filestore.s3.secretKey | default "" | b64enc | quote }}
{{- end }}