68 lines
3.0 KiB
YAML
68 lines
3.0 KiB
YAML
{{- if and .Values.secrets.enabled (not .Values.secrets.existingSecret) }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "trigger-v4.fullname" . }}-secrets
|
|
labels:
|
|
{{- include "trigger-v4.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
data:
|
|
SESSION_SECRET: {{ .Values.secrets.sessionSecret | b64enc | quote }}
|
|
MAGIC_LINK_SECRET: {{ .Values.secrets.magicLinkSecret | b64enc | quote }}
|
|
ENCRYPTION_KEY: {{ .Values.secrets.encryptionKey | b64enc | quote }}
|
|
MANAGED_WORKER_SECRET: {{ .Values.secrets.managedWorkerSecret | b64enc | quote }}
|
|
{{- if and .Values.s3.external.accessKeyId (not .Values.s3.external.existingSecret) }}
|
|
s3-access-key-id: {{ .Values.s3.external.accessKeyId | b64enc | quote }}
|
|
s3-secret-access-key: {{ .Values.s3.external.secretAccessKey | b64enc | quote }}
|
|
{{- end }}
|
|
{{- if and .Values.s3.deploy (not .Values.s3.auth.existingSecret) }}
|
|
s3-auth-access-key-id: {{ include "trigger-v4.s3.auth.effectiveAccessKeyId" . | b64enc | quote }}
|
|
s3-auth-secret-access-key: {{ include "trigger-v4.s3.auth.effectiveSecretAccessKey" . | b64enc | quote }}
|
|
{{- end }}
|
|
{{- if and .Values.postgres.external.databaseUrl (not .Values.postgres.external.existingSecret) }}
|
|
postgres-database-url: {{ .Values.postgres.external.databaseUrl | b64enc | quote }}
|
|
{{- if .Values.postgres.external.directUrl }}
|
|
postgres-direct-url: {{ .Values.postgres.external.directUrl | b64enc | quote }}
|
|
{{- else }}
|
|
postgres-direct-url: {{ .Values.postgres.external.databaseUrl | b64enc | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if and .Values.redis.external.host (not .Values.redis.external.existingSecret) .Values.redis.external.password }}
|
|
redis-password: {{ .Values.redis.external.password | b64enc | quote }}
|
|
{{- end }}
|
|
{{- if and .Values.clickhouse.external.host (not .Values.clickhouse.external.existingSecret) .Values.clickhouse.external.password }}
|
|
clickhouse-password: {{ .Values.clickhouse.external.password | b64enc | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
---
|
|
{{- if and .Values.registry.deploy .Values.registry.auth.enabled }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "trigger-v4.fullname" . }}-registry-auth
|
|
labels:
|
|
{{- include "trigger-v4.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
data:
|
|
htpasswd: {{ htpasswd .Values.registry.auth.username .Values.registry.auth.password | trim | b64enc | quote }}
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "trigger-v4.fullname" . }}-registry-secret
|
|
labels:
|
|
{{- include "trigger-v4.labels" . | nindent 4 }}
|
|
type: kubernetes.io/dockerconfigjson
|
|
data:
|
|
.dockerconfigjson: {{ include "trigger-v4.imagePullSecret" . | b64enc }}
|
|
{{- else if and (not .Values.registry.deploy) .Values.registry.external.auth.enabled }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "trigger-v4.fullname" . }}-registry-secret
|
|
labels:
|
|
{{- include "trigger-v4.labels" . | nindent 4 }}
|
|
type: kubernetes.io/dockerconfigjson
|
|
data:
|
|
.dockerconfigjson: {{ include "trigger-v4.imagePullSecret" . | b64enc }}
|
|
{{- end }} |