From 2dcacdd2ef11b9da25636aa7f899e6afe6b05fdf Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 4 Feb 2018 02:06:04 +0100
Subject: worker password are secrets now as well

---
 templates/default/kubernetes/flumotion-worker-deploy.yml.j2 |  8 +++++++-
 templates/default/kubernetes/flumotion-worker-secret.yml.j2 | 11 +++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 templates/default/kubernetes/flumotion-worker-secret.yml.j2

(limited to 'templates')

diff --git a/templates/default/kubernetes/flumotion-worker-deploy.yml.j2 b/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
index 60a8ebe..9098866 100644
--- a/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
+++ b/templates/default/kubernetes/flumotion-worker-deploy.yml.j2
@@ -30,6 +30,12 @@ spec:
       - name: {{ subname }}
         image: spreadspace/flumotion:worker-{{ desc.globals.deployment.parameter.image_version }}
         imagePullPolicy: Always
+        env:
+        - name: WORKER_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: flumotion-worker-{{ worker.name }}
+              key: password
         args:
         - --verbose
         - -H {{ desc.globals.manager.host }}
@@ -37,7 +43,7 @@ spec:
         - -T {{ desc.globals.manager.transport }}
         - -n {{ sub.fullname }}
         - -u {{ worker.name }}
-        - -p {{ worker.password }}
+        - -p $(WORKER_PASSWORD)
         - -F {{ 8000 + loop.index0 * 10 }}-{{ 8001 + loop.index0 * 10 }}
         volumeMounts:
         - name: home
diff --git a/templates/default/kubernetes/flumotion-worker-secret.yml.j2 b/templates/default/kubernetes/flumotion-worker-secret.yml.j2
new file mode 100644
index 0000000..ec07df7
--- /dev/null
+++ b/templates/default/kubernetes/flumotion-worker-secret.yml.j2
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: {{ namespace }}
+  name: flumotion-worker-{{ worker.name }}
+  labels:
+    app: flumotion
+    type: worker
+type: Opaque
+data:
+  password: dGVzdAo=
-- 
cgit v1.2.3