Implemented automatic fetching secrets from Azure KeyVault
This commit is contained in:
26
deploy.yaml
26
deploy.yaml
@ -1,10 +1,4 @@
|
||||
---
|
||||
# Namespace (opcjonalnie)
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: user-microservice
|
||||
---
|
||||
# MySQL Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
@ -44,9 +38,18 @@ spec:
|
||||
volumeMounts:
|
||||
- name: mysql-pv
|
||||
mountPath: /var/lib/mysql
|
||||
- name: secrets-store
|
||||
mountPath: "/mnt/secrets"
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: mysql-pv
|
||||
emptyDir: {}
|
||||
- name: secrets-store
|
||||
csi:
|
||||
driver: secrets-store.csi.k8s.io
|
||||
readOnly: true
|
||||
volumeAttributes:
|
||||
secretProviderClass: "azure-kvname"
|
||||
---
|
||||
# MySQL Service
|
||||
apiVersion: v1
|
||||
@ -87,6 +90,17 @@ spec:
|
||||
secretKeyRef:
|
||||
name: sqlalchemy-database-uri
|
||||
key: SQLALCHEMY_DATABASE_URI
|
||||
volumeMounts:
|
||||
- name: secrets-store
|
||||
mountPath: "/mnt/secrets"
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: secrets-store
|
||||
csi:
|
||||
driver: secrets-store.csi.k8s.io
|
||||
readOnly: true
|
||||
volumeAttributes:
|
||||
secretProviderClass: "azure-kvname"
|
||||
---
|
||||
# API Service
|
||||
apiVersion: v1
|
||||
|
Reference in New Issue
Block a user