From 8af7497bad0e3f6dd087d3423f820893d7660677 Mon Sep 17 00:00:00 2001
From: Wolfgang Hottgenroth <wolfgang.hottgenroth@icloud.com>
Date: Wed, 22 Jan 2025 15:16:39 +0100
Subject: [PATCH] secrets

---
 deployment/deploy-yml.tmpl |  3 +++
 deployment/deploy.sh       |  9 +++++++++
 deployment/secrets.asc     | 12 +++++++-----
 3 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/deployment/deploy-yml.tmpl b/deployment/deploy-yml.tmpl
index 4d9b36d..25bc72c 100644
--- a/deployment/deploy-yml.tmpl
+++ b/deployment/deploy-yml.tmpl
@@ -183,6 +183,9 @@ spec:
           env:
             - name: JUPYTER_PORT
               value: "8888"
+          envFrom:
+            - secretRef:
+                name: jupyter
           volumeMounts:
             - mountPath: /home/jovyan/work
               name: work
diff --git a/deployment/deploy.sh b/deployment/deploy.sh
index 3f7c1f3..a5782fb 100755
--- a/deployment/deploy.sh
+++ b/deployment/deploy.sh
@@ -32,6 +32,15 @@ kubectl create secret generic traefik-forward-auth \
   --from-literal=SECRET="$SECRET" | \
   kubectl apply -f - -n $NAMESPACE
 
+kubectl create secret generic jupyter \
+  --dry-run=client \
+  -o yaml \
+  --save-config \
+  --from-literal=PGHOST="$PGHOST" | \
+  --from-literal=PGUSER="$PGUSER" | \
+  --from-literal=PGPASSWORD="$PGPASSWORD" | \
+  --from-literal=PGSSLMODE="$PGSSLMODE" | \
+  kubectl apply -f - -n $NAMESPACE
 
 cat $DEPLOYMENT_DIR/deploy-yml.tmpl | \
   sed -e 's,%IMAGE%,'$IMAGE_NAME':'$IMAGE_TAG','g | \
diff --git a/deployment/secrets.asc b/deployment/secrets.asc
index 88a6f0b..6c18688 100644
--- a/deployment/secrets.asc
+++ b/deployment/secrets.asc
@@ -1,8 +1,10 @@
 -----BEGIN PGP MESSAGE-----
 
-jA0ECQMIRRDA3tLPq/P80qEBBkf5y9YXGgVALu7PoL1Q9a4z+O3IvGZMpXMRW+tA
-Y8Eg7m1il59YrCoHTLXMRHHaVB4hXh6b80Idb/39D5KhqI6I3vQkFiLikAqTa/pE
-t+oPv7SPycPz86kn1+HC5O7VY12e5aMrtS7HQYJBwpCYew0efKTA0UsbThU5HtiL
-kX0oy17vPl4332K5CHFYxZnZkuXis4OxJAOyt3f0+NOp5Q==
-=ez3L
+jA0ECQMIDcQyZABQeUf80sBKAQqlG05S05vOpXgoo7dj3iuiAXzOXA+M49yRAJwO
+2T4OhVeEeUAkrzWNWtarDh8K6FJMS9wxhU6PkoJmry3+krIN+IvGGiMvRaxekB2F
+xS6hA4eSH0GIKf7bzYSBekuyI0PuIXWozy4u8cK17mguPjWml3pp7niRmhDlSHyA
+S8RBgiYCuVE4xk9jmJUPosHbDDpzuNb46iYQQdL7XGTVuASB7sujptgmn+ZJrs3i
+kS6Qzkc6eCd6aDqqNwcynwzIi1e/jBk/zihEEY7qYPcU2Wsw0y9QqFRFR7F3WGUz
+8MNv4bnC60awXzO9O3FTxe1JrkWN+V+q25iElLm2rpUUaPTNjyehnAmK0ho=
+=/vom
 -----END PGP MESSAGE-----