fix(16):

- fix the pipeline to read password from sercrets refs: #16
bcgov · Jul 11, 2023 · 01b33a7 · 01b33a7
1 parent 566c0b2
commit 01b33a7
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/backend/openshift.deploy.yml b/backend/openshift.deploy.yml
@@ -54,6 +54,14 @@ parameters:
  description: The password of the IDIM web serivce
  required: true
 objects:
+ - apiVersion: networking.k8s.io/v1
+ kind: Secret
+ metadata:
+ name: ${NAME}-${ZONE}-${COMPONENT}
+ labels:
+ app: ${NAME}-${ZONE}
+ stringData:
+ idim-web-service-password: "${IDIM_WEB_SERVICE_PASSWORD}"
  - apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
@@ -138,7 +146,10 @@ objects:
  - name: IDIM_WEB_SERVICE_USERNAME
  value: ${IDIM_WEB_SERVICE_USERNAME}
  - name: IDIM_WEB_SERVICE_PASSWORD
- value: ${IDIM_WEB_SERVICE_PASSWORD}
+ valueFrom:
+ secretKeyRef:
+ name: ${NAME}-${ZONE}-${COMPONENT}
+ key: idim-web-service-password
  ports:
  - containerPort: 3000
  protocol: TCP