summaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2018-02-04 02:06:04 +0100
committerChristian Pointner <equinox@spreadspace.org>2018-02-04 02:06:04 +0100
commit2dcacdd2ef11b9da25636aa7f899e6afe6b05fdf (patch)
treef45e8da479a3721eac1155872f6364df428f6c60 /templates
parentseperate paswords for each work (diff)
worker password are secrets now as well
Diffstat (limited to 'templates')
-rw-r--r--templates/default/kubernetes/flumotion-worker-deploy.yml.j28
-rw-r--r--templates/default/kubernetes/flumotion-worker-secret.yml.j211
2 files changed, 18 insertions, 1 deletions
diff --git a/templates/default/kubernetes/flumotion-worker-deploy.yml.j2 b/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
index 60a8ebe..9098866 100644
--- a/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
+++ b/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
@@ -30,6 +30,12 @@ spec:
- name: {{ subname }}
image: spreadspace/flumotion:worker-{{ desc.globals.deployment.parameter.image_version }}
imagePullPolicy: Always
+ env:
+ - name: WORKER_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: flumotion-worker-{{ worker.name }}
+ key: password
args:
- --verbose
- -H {{ desc.globals.manager.host }}
@@ -37,7 +43,7 @@ spec:
- -T {{ desc.globals.manager.transport }}
- -n {{ sub.fullname }}
- -u {{ worker.name }}
- - -p {{ worker.password }}
+ - -p $(WORKER_PASSWORD)
- -F {{ 8000 + loop.index0 * 10 }}-{{ 8001 + loop.index0 * 10 }}
volumeMounts:
- name: home
diff --git a/templates/default/kubernetes/flumotion-worker-secret.yml.j2 b/templates/default/kubernetes/flumotion-worker-secret.yml.j2
new file mode 100644
index 0000000..ec07df7
--- /dev/null
+++ b/templates/default/kubernetes/flumotion-worker-secret.yml.j2
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ namespace: {{ namespace }}
+ name: flumotion-worker-{{ worker.name }}
+ labels:
+ app: flumotion
+ type: worker
+type: Opaque
+data:
+ password: dGVzdAo=