feat(Helm): Provide sensitive values as secret (#493)

Issue: #479
aquasecurity · Jan 19, 2023 · d08f044 · d08f044
1 parent eff9fcf
commit d08f044
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 12 deletions.
diff --git a/deploy/helm/postee/templates/cfg-configmap.yaml b/deploy/helm/postee/templates/cfg-configmap.yaml
diff --git a/deploy/helm/postee/templates/cfg-secret.yaml b/deploy/helm/postee/templates/cfg-secret.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "postee.fullname" . }}-secret
+data:
+  cfg.yaml: |
+{{ .Values.posteeConfig  | b64enc | indent 4 }}
diff --git a/deploy/helm/postee/templates/postee.yaml b/deploy/helm/postee/templates/postee.yaml
@@ -45,7 +45,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: {{ include (print $.Template.BasePath "/cfg-configmap.yaml") . | sha256sum }}
+        checksum/secret: {{ include (print $.Template.BasePath "/cfg-secret.yaml") . | sha256sum }}
       {{- with .Values.podAnnotations }}
         {{- toYaml . | nindent 8 }}
       {{- end }}
@@ -72,7 +72,7 @@ spec:
           imagePullPolicy: {{ .Values.imageInit.pullPolicy }}
           command: ["/bin/cp", "/k8s/cfg.yaml", "/data/cfg.yaml"]
           volumeMounts:
-            - name: {{ $fullName }}-configmap-vol
+            - name: {{ $fullName }}-secret-vol
               mountPath: /k8s
             - name: {{ $fullName }}-config
               mountPath: {{ .Values.persistentVolume.mountPathConfig }}
@@ -106,9 +106,9 @@ spec:
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
       volumes:
-        - configMap:
-            name: {{ $fullName }}-cfg
-          name: {{ $fullName }}-configmap-vol
+        - secret:
+            secretName: {{ $fullName }}-secret
+          name: {{ $fullName }}-secret-vol
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}