feat: secrets

README.md

@@ -0,0 +1,9 @@
+# Smardigo Mobene
+
+## Description
+
+## Development
+
+## Architektur
+
+![architecture view](docs/architecture_view.svg "architecture view")

docs/architecture_view.drawio

@@ -0,0 +1 @@
+<mxfile host="Electron" modified="2022-06-03T08:16:51.990Z" agent="5.0 (Macintosh; Intel Mac OS X 12_3_1) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/14.9.6 Chrome/89.0.4389.128 Electron/12.0.16 Safari/537.36" etag="nIKSkwF3D7TrS1znmBED" version="14.9.6" type="device"><diagram id="fhIIgn7zAF7uhBMf8lFk" name="Seite-1">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</diagram></mxfile>

smardigo/templates/connect/deployment.yml

@@ -47,7 +47,10 @@ spec:
         - name: ADMIN_LOGIN
           value: "{{ .Values.connect.admin.username }}"
         - name: ADMIN_PASSWORD
-          value: "{{ .Values.connect.admin.password }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: ADMIN_PASSWORD
         - name: SMA_JWT_ENABLED
           value: "True"
         - name: SMA_JWT_SECRET
@@ -62,18 +65,30 @@ spec:
         - name: DATASOURCE_URL
           value: "jdbc:postgresql://{{ .Values.connect.database.host }}:{{ .Values.connect.database.port }}/{{ .Values.connect.database.name }}"
         - name: DATASOURCE_USERNAME
-          value: "{{ .Values.connect.database.username }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: DATASOURCE_USERNAME
         - name: DATASOURCE_PASSWORD
-          value: "{{ .Values.connect.database.password }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: DATASOURCE_PASSWORD
 
         - name: ELASTIC_HOST
           value: "{{ .Values.connect.elastic.host }}"
         - name: ELASTIC_PREFIX
           value: "{{ .Release.Name }}-connect"
         - name: ELASTIC_USERNAME
-          value: "{{ .Values.connect.elastic.username }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: ELASTIC_USERNAME
         - name: ELASTIC_PASSWORD
-          value: "{{ .Values.connect.elastic.password }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: ELASTIC_PASSWORD
         - name: ELASTIC_CA
           value:  "file:/usr/share/smardigo/ca.crt"
 
@@ -82,7 +97,10 @@ spec:
         - name: OIDC_CLIENT_ID
           value: "{{ .Values.connect.oidc.client_id }}"
         - name: OIDC_CLIENT_SECRET
-          value: "{{ .Values.connect.oidc.client_secret }}"
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: OIDC_CLIENT_SECRET
         - name: OIDC_REGISTRATION_ID
           value: "{{ .Values.connect.oidc.registration_id }}"
         - name: OIDC_ISSUER_URI
@@ -102,8 +120,16 @@ spec:
         - name: MAIL_PORT
           value: "{{ .Values.connect.mail.post }}"
         - name: MAIL_USER
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: MAIL_USER
           value: "{{ .Values.connect.mail.username }}"
         - name: MAIL_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: "connect-secrets"
+              key: MAIL_PASSWORD
           value: "{{ .Values.connect.mail.password }}"
         - name: MAIL_PROPERTIES_SIMULATION
           value: "{{ .Values.connect.mail.properties.simulation }}"

smardigo/templates/connect/secret.yml

@@ -5,3 +5,11 @@ metadata:
   name: connect-secrets
 data:
   JWT_SECRET: "{{ .Values.connect.jwt.secret | b64enc }}"
+  ADMIN_PASSWORD: "{{ .Values.connect.database.password | b64enc}}"
+  DATASOURCE_USERNAME: "{{ .Values.connect.database.username | b64enc }}"
+  DATASOURCE_PASSWORD: "{{ .Values.connect.database.password | b64enc }}"
+  ELASTIC_USERNAME: "{{ .Values.connect.database.username | b64enc }}"
+  ELASTIC_PASSWORD: "{{ .Values.connect.database.password | b64enc }}"
+  OIDC_CLIENT_SECRET: "{{ .Values.connect.oidc.client_secret | b64enc }}"
+  MAIL_USER: "{{ .Values.connect.mail.username | b64enc }}"
+  MAIL_PASSWORD: "{{ .Values.connect.mail.password | b64enc }}"