feat: using a secret to store the space credentials

nemerosa · Dec 27, 2023 · 5218691 · 5218691
1 parent 320dee2
commit 5218691
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/charts/pg-db-backup-do-space/templates/db-extraction-job.yaml b/charts/pg-db-backup-do-space/templates/db-extraction-job.yaml
@@ -41,7 +41,20 @@ spec:
                   value: "require"
                 - name: PGPASSWORD
                   value: {{ .Values.auth.password | quote }}
+                {{- if .Values.digitalocean.space.secretName }}
+                - name: DO_SPACE_ACCESS_KEY
+                  valueFrom:
+                    secretKeyRef:
+                      name: {{ .Values.digitalocean.space.secretName | quote }}
+                      key: accessKey
+                - name: DO_SPACE_SECRET_KEY
+                  valueFrom:
+                    secretKeyRef:
+                      name: {{ .Values.digitalocean.space.secretName | quote }}
+                      key: secretKey
+                {{- else }}
                 - name: DO_SPACE_ACCESS_KEY
                   value: {{ .Values.digitalocean.space.accessKey | quote }}
                 - name: DO_SPACE_SECRET_KEY
                   value: {{ .Values.digitalocean.space.secretKey | quote }}
+                {{- end }}
diff --git a/charts/pg-db-backup-do-space/values.yaml b/charts/pg-db-backup-do-space/values.yaml
@@ -28,6 +28,8 @@ digitalocean:
     accessKey: ""
     # Secret key
     secretKey: ""
+    # Name of the secret containing the keys
+    secretName: ""
     # Region
     region: "fra1"
     # Bucket