feat(secrets): replace config maps with secrets for sensitive configurations in multiple modules
This commit is contained in:
@@ -49,7 +49,7 @@ resource "kubernetes_secret" "admin_credentials" {
|
||||
type = "Opaque"
|
||||
}
|
||||
|
||||
resource "kubernetes_config_map" "object_store_credentials" {
|
||||
resource "kubernetes_secret" "object_store_credentials" {
|
||||
metadata {
|
||||
name = "nextcloud-object-store-credentials"
|
||||
namespace = kubernetes_namespace.sftpgo.metadata[0].name
|
||||
@@ -57,6 +57,7 @@ resource "kubernetes_config_map" "object_store_credentials" {
|
||||
data = {
|
||||
"credentials" = local.credentials
|
||||
}
|
||||
type = "Opaque"
|
||||
}
|
||||
|
||||
resource "kubernetes_service_account" "sftpgo" {
|
||||
@@ -217,8 +218,12 @@ resource "kubernetes_deployment" "sftpgo" {
|
||||
}
|
||||
volume {
|
||||
name = "object-store-credentials"
|
||||
config_map {
|
||||
name = kubernetes_config_map.object_store_credentials.metadata[0].name
|
||||
secret {
|
||||
secret_name = kubernetes_secret.object_store_credentials.metadata[0].name
|
||||
items {
|
||||
key = "credentials"
|
||||
path = "credentials"
|
||||
}
|
||||
}
|
||||
}
|
||||
dynamic "volume" {
|
||||
|
||||
Reference in New Issue
Block a user