wehub-resource-sync
d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
52 lines
2.1 KiB
YAML
52 lines
2.1 KiB
YAML
{{- if and .Values.app.enabled (include "sim.createAppSecrets" .) }}
|
|
{{/*
|
|
Secret for app + realtime env. Every key in .Values.app.env and
|
|
.Values.realtime.env is written here and mounted via envFrom on the
|
|
respective Deployments. Chart-computed values (DATABASE_URL,
|
|
SOCKET_SERVER_URL, OLLAMA_URL, PII_URL) are omitted — they're injected as
|
|
inline env on the container so they reflect chart-time resolution.
|
|
|
|
Treating all env values as secret-grade avoids maintaining a sensitivity
|
|
classifier and prevents accidental leaks when new provider keys are added.
|
|
*/}}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "sim.fullname" . }}-app-secrets
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "sim.app.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
stringData:
|
|
{{- $chartComputed := list "DATABASE_URL" "SOCKET_SERVER_URL" "OLLAMA_URL" "PII_URL" }}
|
|
{{- /*
|
|
Intent: app.env is authoritative for shared keys (both pods envFrom this
|
|
Secret, so the app container must not be silently overwritten by a
|
|
realtime-side value), BUT empty strings must never win.
|
|
|
|
Sprig `merge` treats "" as a real value, so a default-empty app.env entry
|
|
would shadow a non-empty realtime.env entry. Build the effective dict
|
|
manually: start from realtime.env, then overlay non-empty app.env values
|
|
on top — this gives app.env-wins-on-collision without empty-string
|
|
shadowing. Mirrors the pattern used in deployment-realtime.yaml.
|
|
*/}}
|
|
{{- $appEnv := .Values.app.env | default dict }}
|
|
{{- $rtEnv := .Values.realtime.env | default dict }}
|
|
{{- $effective := dict }}
|
|
{{- range $key, $value := $rtEnv }}
|
|
{{- if and (ne (toString $value) "") (ne (toString $value) "<nil>") }}
|
|
{{- $_ := set $effective $key $value }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- range $key, $value := $appEnv }}
|
|
{{- if and (ne (toString $value) "") (ne (toString $value) "<nil>") }}
|
|
{{- $_ := set $effective $key $value }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- range $key, $value := $effective }}
|
|
{{- if not (has $key $chartComputed) }}
|
|
{{ $key }}: {{ $value | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|