Merge branch 'autogenerate-internal-secrets' into 'master'

Automatically generate django secret

See merge request ananace/charts!6
This commit is contained in:
Alexander Olofsson 2021-03-23 08:01:39 +00:00
commit e6d99e042b
3 changed files with 16 additions and 5 deletions

View file

@ -1,3 +1,5 @@
{{- $secret := (lookup "v1" "Secret" .Release.Namespace (include "funkwhale.fullname" .)) -}}
apiVersion: v1
kind: Secret
metadata:
@ -10,7 +12,11 @@ metadata:
data:
CACHE_URL: {{ include "funkwhale.redisUrl" . | b64enc }}
DATABASE_URL: {{ include "funkwhale.dbUrl" . | b64enc }}
DJANGO_SECRET_KEY: {{ .Values.djangoSecret | b64enc }}
{{ if $secret -}}
DJANGO_SECRET_KEY: {{ $secret.data.DJANGO_SECRET_KEY }}
{{ else -}}
DJANGO_SECRET_KEY: {{ (.Values.djangoSecret | default uuidv4) | b64enc }}
{{ end }}
{{- range $key, $val := .Values.extraSecret }}
{{ $key }}: {{ $val | b64enc }}

View file

@ -47,6 +47,14 @@ database:
database: funkwhale
redis:
# If you already have a Redis service you'd like to use, set
# this to false and adjust the host to use your existing service.
enabled: true
host: ''
redisPort: 6379
password: 'funkwhale'
cluster:
enabled: false
master:
@ -55,9 +63,6 @@ redis:
slave:
persistence:
enabled: false
password: funkwhale
redisPort: 6379
# host: {{ template "funkwhale.fullname" . }}-redis-master
djangoSecret: ''