fixups and mount the secret!
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
This commit is contained in:
parent
f9635faff1
commit
f679d67aa4
|
@ -17,7 +17,6 @@ spec:
|
||||||
{{- with .Values.podAnnotations }}
|
{{- with .Values.podAnnotations }}
|
||||||
{{- toYaml . | nindent 8 }}
|
{{- toYaml . | nindent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
|
|
||||||
labels:
|
labels:
|
||||||
{{- include "sshtunnel.selectorLabels" . | nindent 8 }}
|
{{- include "sshtunnel.selectorLabels" . | nindent 8 }}
|
||||||
spec:
|
spec:
|
||||||
|
@ -46,13 +45,15 @@ spec:
|
||||||
resources:
|
resources:
|
||||||
{{- toYaml .Values.resources | nindent 12 }}
|
{{- toYaml .Values.resources | nindent 12 }}
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /keyfile
|
- mountPath: "/keyfile"
|
||||||
name: keyfile
|
name: keyfile
|
||||||
volumes:
|
volumes:
|
||||||
- name: keyfile
|
- name: keyfile
|
||||||
secret:
|
csi:
|
||||||
defaultMode: 256
|
driver: secrets-store.csi.k8s.io
|
||||||
secretName: {{ .Chart.Name }}-keyfile
|
readOnly: true
|
||||||
|
volumeAttributes:
|
||||||
|
secretsProviderClass: app-secrets
|
||||||
{{- with .Values.nodeSelector }}
|
{{- with .Values.nodeSelector }}
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
{{- toYaml . | nindent 8 }}
|
{{- toYaml . | nindent 8 }}
|
||||||
|
|
Loading…
Reference in New Issue