From 84fafe9430f64cf0a854a38685a760a8bea9c10b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mart=C3=ADn=20Peveri?= Date: Sun, 3 Mar 2024 19:37:23 +0100 Subject: [PATCH] Create secret file for k8s --- .gitignore | 5 ++++- .k8s/REAMDE.md | 12 +++++++----- .k8s/config-map.yaml | 6 ------ .k8s/{secret.yaml => secret-pod.yaml} | 0 .k8s/secret.yaml.txt | 17 +++++++++++++++++ 5 files changed, 28 insertions(+), 12 deletions(-) rename .k8s/{secret.yaml => secret-pod.yaml} (100%) create mode 100644 .k8s/secret.yaml.txt diff --git a/.gitignore b/.gitignore index edb2e22b..bf4e16ab 100644 --- a/.gitignore +++ b/.gitignore @@ -9,4 +9,7 @@ .stryker-tmp /reports/ stryker.log -.idea \ No newline at end of file +.idea + +# k8s +.k8s/secret.yaml diff --git a/.k8s/REAMDE.md b/.k8s/REAMDE.md index 71cf21d9..e4be2d43 100644 --- a/.k8s/REAMDE.md +++ b/.k8s/REAMDE.md @@ -17,11 +17,7 @@ Getting started docker push mapeveri/languages:latest -3. Create secret - - - kubectl create secret generic languages-app-secret --from-literal=GOOGLE_CLIENT_ID=key --from-literal=POSTGRES_DATABASE=database --from-literal=POSTGRES_USER=user --from-literal=POSTGRES_PASSWORD=password --from-literal=POSTGRESQL_DB_URL=dbconnectionstring - +3. Copy .k8s/secret.yaml.txt to .k8s/secret.yaml and configure it 4. Execute @@ -36,6 +32,12 @@ Getting started minikube service app-service --url +# Encrypt secret values: + + ```bash +echo -n "my-secret" | base64 +``` + # Kubernetes Commands Reference ## Get Information diff --git a/.k8s/config-map.yaml b/.k8s/config-map.yaml index b59d8583..6eb90df1 100644 --- a/.k8s/config-map.yaml +++ b/.k8s/config-map.yaml @@ -8,11 +8,5 @@ metadata: data: NODE_ENV: development SERVER_PORT: "4000" - MONGO_DB_DATABASE: languages - MONGO_DB_URL: mongodb://mongo1:27017/languages?replicaSet=rs0&directConnection=true - JWT_SECRET: "45wef4we566dwdwgv.fi)__d" FRONTED_URL: "http://localhost:3000" - RABBITMQ_DEFAULT_USER: "app" - RABBITMQ_DEFAULT_PASS: "rabbit_app" RABBITMQ_EVENTS_QUEUE: "events_queue" - RABBITMQ_HOST: "amqp://app:rabbit_app@rabbitmq:5672" diff --git a/.k8s/secret.yaml b/.k8s/secret-pod.yaml similarity index 100% rename from .k8s/secret.yaml rename to .k8s/secret-pod.yaml diff --git a/.k8s/secret.yaml.txt b/.k8s/secret.yaml.txt new file mode 100644 index 00000000..0322fd03 --- /dev/null +++ b/.k8s/secret.yaml.txt @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Secret +metadata: + name: languages-app-secret +type: Opaque +data: + JWT_SECRET: bXk0NXdlZjR3ZTU2NmR3ZHdndi5maSlfX2Q= + RABBITMQ_DEFAULT_USER: YXBw + RABBITMQ_DEFAULT_PASS: cmFiYml0X2FwcA== + RABBITMQ_HOST: YW1xcDovL2FwcDpyYWJiaXRfYXBwQHJhYmJpdG1xOjU2NzI= + MONGO_DB_DATABASE: bGFuZ3VhZ2Vz + MONGO_DB_URL: bW9uZ29kYjovL21vbmdvMToyNzAxNy9sYW5ndWFnZXM/cmVwbGljYVNldD1yczAmZGlyZWN0Q29ubmVjdGlvbj10cnVl + GOOGLE_CLIENT_ID: xxxxx + POSTGRES_DATABASE: bGFuZ3VhZ2Vz + POSTGRES_USER: cG9zdGdyZXM= + POSTGRES_PASSWORD: YXBwMTIzNDU2 + POSTGRESQL_DB_URL: cG9zdGdyZXNxbDovL3Bvc3RncmVzOmFwcDEyMzQ1NkBkYi9sYW5ndWFnZXM=