feat: separate the secrets for the gossip keys for each node (#955)

Signed-off-by: Jeromy Cannon <[email protected]>
hashgraph · Aug 21, 2024 · 01711a6 · 01711a6
1 parent 828995a
commit 01711a6
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/charts/fullstack-deployment/templates/network-node-statefulset.yaml b/charts/fullstack-deployment/templates/network-node-statefulset.yaml
@@ -1,6 +1,7 @@
 {{ range $index, $node := $.Values.hedera.nodes }}
 {{- $hapiAppSecrets := lookup "v1" "Secret" $.Release.Namespace "network-node-hapi-app-secrets" }}
-{{- $networkNodeKeySecrets := lookup "v1" "Secret" $.Release.Namespace "network-node-keys-secrets" }}
+{{- $networkNodeKeySecretName := (printf "network-%s-keys-secrets" $node.name) }}
+{{- $networkNodeKeySecrets := lookup "v1" "Secret" $.Release.Namespace $networkNodeKeySecretName }}
 {{- $root := $node.root | default $.Values.defaults.root -}}
 {{- $rootExtraEnv := ($root).extraEnv | default $.Values.defaults.root.extraEnv -}}
 {{- $rootImage := ($node.root).image | default $.Values.defaults.root.image -}}
@@ -140,7 +141,7 @@ spec:
         {{- if $networkNodeKeySecrets }}
         - name: network-node-keys
           secret: # TODO pem vs pfx
-            secretName: network-node-keys-secrets
+            secretName: {{ $networkNodeKeySecretName }}
             optional: true
         {{- end }}
       containers: