16 lines
741 B
YAML
16 lines
741 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: s3-credentials
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
app.kubernetes.io/tenant: 'tenant-{{ .Values.name }}'
|
|
type: Opaque
|
|
stringData:
|
|
AWS_ACCESS_KEY_ID: 'tenant-{{ .Values.name }}-user'
|
|
# If the secret exist, keep. Otherwise create a new random one. (To prevent a new password at each sync).
|
|
AWS_SECRET_ACCESS_KEY: {{ if and $existingSecret $existingSecret.data (hasKey $existingSecret.data "AWS_SECRET_ACCESS_KEY") }}{{ index $existingSecret.data "AWS_SECRET_ACCESS_KEY" | b64dec }}{{ else }}{{ randAlphaNum 24 }}{{ end }}
|
|
S3_ENDPOINT: "http://minio.minio.svc.cluster.local:9000"
|
|
BUCKET_REF: "ref-tenant-{{ .Values.name }}"
|
|
BUCKET_WORK: "work-tenant-{{ .Values.name }}"
|