use new decrypt approach

2025-01-29 17:28:12 +01:00
parent 16771227bb
commit 7b0238b4a5
2 changed files with 6 additions and 5 deletions
--- a/deployment/deploy.sh
+++ b/deployment/deploy.sh
@ -19,10 +19,11 @@ kubectl create namespace $NAMESPACE \
  -o yaml | \
  kubectl -f - apply

-SECRETS_FILE=`mktemp`
-gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
-. $SECRETS_FILE
-rm $SECRETS_FILE
+# SECRETS_FILE=`mktemp`
+# gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
+# . $SECRETS_FILE
+# rm $SECRETS_FILE
+eval "`cat secrets.asc | /usr/local/bin/decrypt-secrets.sh`"

 kubectl create secret generic pv-stats \
  --dry-run=client \