feat(ci): improve environment variable management

.github/workflows/google.yml

@@ -67,18 +67,11 @@ jobs:
  # Build the Docker image
  - name: Build
  run: |-
- echo "$REPO_SECRETS" > secrets.json
- echo "$REPO_VARS" > vars.json
- jq -s '.[0] * .[1]' secrets.json vars.json > config.json
-
  docker build \
  --tag "$GAR_LOCATION-docker.pkg.dev/$PROJECT_ID/$REPOSITORY/core:$PROJECT_ENV" \
  --build-arg GITHUB_SHA="$GITHUB_SHA" \
  --build-arg GITHUB_REF="$GITHUB_REF" \
  .
- env:
- REPO_SECRETS: ${{ toJSON(secrets) }}
- REPO_VARS: ${{ toJSON(vars) }}
 
  # Push the Docker image to Google Artifact Registry
  - name: Publish

deploy/templates/configmap.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: {{ .Release.Name }}-configmap
+ namespace: {{ .Release.Namespace }}
+data:
+ {{- toYaml .Values.configMap | nindent 2 }}

deploy/templates/deployment.yaml

@@ -20,3 +20,8 @@ spec:
  containers:
  - name: {{ .Values.container.name }}
  image: {{ .Values.container.image }}
+ envFrom:
+ - configMapRef:
+ name: {{ .Release.Name }}-configmap
+ - secretRef:
+ name: {{ .Release.Name }}-secret

deploy/templates/secrets.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ .Release.Name }}-secret
+ namespace: {{ .Release.Namespace }}
+type: Opaque
+data:
+ {{- toYaml .Values.secrets | nindent 2 }}