chore: static secret for webserver

bcgov · Feb 22, 2024 · 13bbfe5 · 13bbfe5
1 parent 235fa41
commit 13bbfe5
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/helm/cas-airflow/templates/secrets/webserver.yaml b/helm/cas-airflow/templates/secrets/webserver.yaml
@@ -0,0 +1,19 @@
+{{- $webserverSecret := (randAlphaNum 32) | b64enc | quote }}
+
+{{- $secretName := printf "%s-%s" .Release.Name "webserver-secret" }}
+{{- $secret := (lookup "v1" "Secret" .Release.Namespace $secretName ) }}
+{{- if $secret }}
+{{- $webserverSecret = index $secret.data "webserver-secret-key" }}
+{{- end -}}
+
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ $secretName }}
+  labels: {{ include "cas-airflow.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": "pre-install,pre-upgrade"
+type: Opaque
+data:
+  webserver-secret-key: {{ $webserverSecret }}
diff --git a/helm/cas-airflow/values.yaml b/helm/cas-airflow/values.yaml
@@ -96,6 +96,8 @@ airflow:
       protocol: postgresql
 
   # Airflow webserver settings
+  webserverSecretKeySecretName: cas-airflow-webserver-secret
+
   webserver:
     replicas: 2
     resources: