fix: minio-secretsを定義してminio-secretsからsecretを取得するように

GiganticMinecraft · Dec 2, 2023 · 7e2bf3c · 7e2bf3c
1 parent a0b2bac
commit 7e2bf3c
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 2 deletions.
diff --git a/...-templates/seichi-debug-minecraft-on-seichiassist-pr/templates/debug-s1/stateful-set.yaml b/...-templates/seichi-debug-minecraft-on-seichiassist-pr/templates/debug-s1/stateful-set.yaml
@@ -41,12 +41,12 @@ spec:
             - name: MINIO_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
-                  name: clustersecret
+                  name: minio-secrets
                   key: MINIO_ACCESS_KEY
             - name: MINIO_ACCESS_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: clustersecret
+                  name: minio-secrets
                   key: MINIO_ACCESS_SECRET
             - name: BUCKET_NAME
               value: seichi-plugins

diff --git a/terraform/onp_cluster_minecraft_secrets.tf b/terraform/onp_cluster_minecraft_secrets.tf
@@ -114,3 +114,31 @@ resource "kubernetes_secret" "onp_minecraft_debug_mariadb_root_password" {
 
   type = "Opaque"
 }
+
+resource "helm_release" "onp_minecraft_mariadb_monitoring_password" { 
+  depends_on = [kubernetes_namespace.onp_seichi_debug_minecraft]
+
+  repository = "https://giganticminecraft.github.io/seichi_infra/"
+  chart      = "raw-resources"
+  name       = "seichi-debug-minecraft-minio-secrets"
+  namespace  = "kube-system"
+  version    = "0.3.0"
+
+  set_list {
+    name = "manifests"
+    value = [<<-EOS
+      kind: ClusterSecret
+      apiVersion: clustersecret.io/v1
+      metadata:
+        namespace: clustersecret
+        name: minio-secrets
+      matchNamespace:
+        - seichi-debug-minecraft-on-seichiassist-pr-*
+      data:
+        MINIO_ACCESS_KEY: ${base64encode(var.minio_debug_access_key)}
+        MINIO_DEBUG_ACCESS_SECRET: ${base64encode(var.minio_debug_access_secret)}
+    EOS
+    ]
+  }
+
+}