diff options
| author | chemicstry <chemicstry@gmail.com> | 2022-06-20 18:49:38 +0300 |
|---|---|---|
| committer | Maximilien R <maximilien@deuxfleurs.fr> | 2022-09-30 18:46:57 +0200 |
| commit | b71fa2ddf45e21f40067fc021b3a81d738556eca (patch) | |
| tree | a3ab91563a4177950420c869cfd0d7cc6df2c6b0 /script/helm/garage/templates/statefulset.yaml | |
| parent | 37a73d7d3782ec8a5cd8b0e71a00722f90321ced (diff) | |
| download | garage-b71fa2ddf45e21f40067fc021b3a81d738556eca.tar.gz garage-b71fa2ddf45e21f40067fc021b3a81d738556eca.zip | |
Generate random RPC secret if not provided
Diffstat (limited to 'script/helm/garage/templates/statefulset.yaml')
| -rw-r--r-- | script/helm/garage/templates/statefulset.yaml | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/script/helm/garage/templates/statefulset.yaml b/script/helm/garage/templates/statefulset.yaml index 82fe89a9..bda40117 100644 --- a/script/helm/garage/templates/statefulset.yaml +++ b/script/helm/garage/templates/statefulset.yaml @@ -26,6 +26,23 @@ spec: serviceAccountName: {{ include "garage.serviceAccountName" . }} securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }} + initContainers: + # Copies garage.toml from configmap to temporary etc volume and replaces RPC secret placeholder + - name: {{ .Chart.Name }}-init + image: busybox:1.28 + command: ["sh", "-c", "sed \"s/__RPC_SECRET_REPLACE__/$RPC_SECRET/\" /mnt/garage.toml > /mnt/etc/garage.toml"] + env: + - name: RPC_SECRET + valueFrom: + secretKeyRef: + name: {{ include "garage.rpcSecretName" . }} + key: rpcSecret + volumeMounts: + - name: configmap + mountPath: /mnt/garage.toml + subPath: garage.toml + - name: etc + mountPath: /mnt/etc containers: - name: {{ .Chart.Name }} securityContext: @@ -57,9 +74,11 @@ spec: resources: {{- toYaml .Values.resources | nindent 12 }} volumes: - - name: etc + - name: configmap configMap: name: {{ include "garage.fullname" . }}-config + - name: etc + emptyDir: {} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} |