Switch secrets gen to use sealed secrets

rackerlabs · Jun 26, 2024 · 2988a6d · 2988a6d
1 parent 4cb86e1
commit 2988a6d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/scripts/easy-secrets-gen.sh b/scripts/easy-secrets-gen.sh
@@ -206,22 +206,22 @@ kubectl --namespace openstack \
     --type Opaque \
     --from-literal=username="nova" \
     --from-literal=password="${NOVA_RABBITMQ_PASSWORD}" \
-    --dry-run=client -o yaml > "${DEST_DIR}/secret-nova-rabbitmq-password.yaml"
+    --dry-run=client -o yaml | secret-seal-stdin "${DEST_DIR}/secret-nova-rabbitmq-password.yaml"
 
 [ ! -f "${DEST_DIR}/secret-nova-db-password.yaml" ] && \
 kubectl --namespace openstack \
     create secret generic nova-db-password \
     --type Opaque \
     --from-literal=password="${NOVA_DB_PASSWORD}" \
-    --dry-run=client -o yaml > "${DEST_DIR}/secret-nova-db-password.yaml"
+    --dry-run=client -o yaml | secret-seal-stdin "${DEST_DIR}/secret-nova-db-password.yaml"
 
 [ ! -f "${DEST_DIR}/secret-nova-keystone-password.yaml" ] && \
 kubectl --namespace openstack \
     create secret generic nova-keystone-password \
     --type Opaque \
     --from-literal=username="nova" \
     --from-literal=password="${NOVA_KEYSTONE_PASSWORD}" \
-    --dry-run=client -o yaml > "${DEST_DIR}/secret-nova-keystone-password.yaml"
+    --dry-run=client -o yaml | secret-seal-stdin "${DEST_DIR}/secret-nova-keystone-password.yaml"
 
 if [ "x${DO_TMPL_VALUES}" = "xy" ]; then
     [ ! -f "${DEST_DIR}/secret-openstack.yaml" ] && \