feat(secrets): replace config maps with secrets for sensitive configurations in multiple modules

This commit is contained in:
2025-05-11 20:17:35 +02:00
parent 457f2bd810
commit 19f599e502
5 changed files with 69 additions and 25 deletions
+8 -3
View File
@@ -49,7 +49,7 @@ resource "kubernetes_secret" "admin_credentials" {
type = "Opaque"
}
resource "kubernetes_config_map" "object_store_credentials" {
resource "kubernetes_secret" "object_store_credentials" {
metadata {
name = "nextcloud-object-store-credentials"
namespace = kubernetes_namespace.sftpgo.metadata[0].name
@@ -57,6 +57,7 @@ resource "kubernetes_config_map" "object_store_credentials" {
data = {
"credentials" = local.credentials
}
type = "Opaque"
}
resource "kubernetes_service_account" "sftpgo" {
@@ -217,8 +218,12 @@ resource "kubernetes_deployment" "sftpgo" {
}
volume {
name = "object-store-credentials"
config_map {
name = kubernetes_config_map.object_store_credentials.metadata[0].name
secret {
secret_name = kubernetes_secret.object_store_credentials.metadata[0].name
items {
key = "credentials"
path = "credentials"
}
}
}
dynamic "volume" {