fix secret building
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/tag/woodpecker Pipeline was successful

This commit is contained in:
Wolfgang Hottgenroth 2025-01-27 18:47:27 +01:00
parent 7f3f5b20ab
commit 08b50b2e0c

View File

@ -21,12 +21,21 @@ kubectl create namespace $NAMESPACE \
SECRETS_FILE=`mktemp`
gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
. $SECRETS_FILE
rm $SECRETS_FILE
kubectl create secret generic mini_flask \
--dry-run=client \
-o yaml \
--save-config \
--from-env-file=<(sed 's/^export //g' $SECRETS_FILE) | \
--from-literal=REDIS_URL="$REDIS_URL" \
--from-literal=SECRET_KEY="$SECRET_KEY" \
--from-literal=PGPASSWORD="$PGPASSWORD" \
--from-literal=PGUSER="$PGUSER" \
--from-literal=PGHOST="$PGHOST" \
--from-literal=PGSSLMODE="$PGSSLMODE" \
--from-literal=PGDATABASE="$PGDATABASE" \
--from-literal=OIDC_CLIENT_SECRETS="$OIDC_CLIENT_SECRETS" | \
kubectl apply -f - -n $NAMESPACE
rm $SECRETS_FILE