Pongo user y password en secreto

K8S/env-prod-configmap.yaml

@@ -1,9 +1,6 @@
 apiVersion: v1
 data:
   SSH_HOST: 192.168.1.116
-  SECRET_KEY: change_me
-  SSH_USER: creylopez
-  SSH_PASSWORD: Rey-1176
   SSH_PORT: "22"
 kind: ConfigMap
 metadata:

K8S/secreto.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mi-secreto
+  namespace: <NS>
+type: Opaque
+data:
+  SSH_USER: Y3JleWxvcGV6
+  SSH_PASSWORD: UmV5LTExNzY=

K8S/virtmanager-deployment.yaml

@@ -43,21 +43,14 @@ spec:
             configMapKeyRef:
               key: SSH_HOST
               name: env-prod
-        - name: SSH_USER
-          valueFrom:
-            configMapKeyRef:
-              key: SSH_USER
-              name: env-prod
-        - name: SSH_PASSWORD
-          valueFrom:
-            configMapKeyRef:
-              key: SSH_PASSWORD
-              name: env-prod
         - name: SSH_PORT
           valueFrom:
             configMapKeyRef:
               key: SSH_PORT
               name: env-prod
+        envFrom:
+          - secretRef:
+              name: mi-secreto
         ports:
         - containerPort: 8000
           protocol: TCP

Makefile

@@ -12,21 +12,23 @@ imagen:
 	docker push ${REGISTRY}/virtmanager:${IMG_VERSION}
 
 ns:
-	-cat namespace.yaml | sed -e "s/<NS>/${NAMESPACE}/" |kubectl create -f -
+	-cat K8S/namespace.yaml | sed -e "s/<NS>/${NAMESPACE}/" |kubectl create -f -
 
 install:
-	-cat reg-secret.yaml| sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
-	-cat env-prod-configmap.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
+	-cat K8S/reg-secret.yaml| sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
+	-cat K8S/secreto.yaml| sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
+	-cat K8S/env-prod-configmap.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
 
-	-cat virtmanager-deployment.yaml | sed -e "s/<NS>/${NAMESPACE}/" | sed -e "s/<TAG>/${IMG_VERSION}/" | kubectl create -f -
-	-cat virtmanager-ingress.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
+	-cat K8S/virtmanager-deployment.yaml | sed -e "s/<NS>/${NAMESPACE}/" | sed -e "s/<TAG>/${IMG_VERSION}/" | kubectl create -f -
+	-cat K8S/virtmanager-ingress.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl create -f -
 
 clean:
-	-cat virtmanager-deployment.yaml | sed -e "s/<NS>/${NAMESPACE}/" | sed -e "s/<TAG>/${IMG_VERSION}/" | kubectl delete -f -
+	-cat K8S/virtmanager-deployment.yaml | sed -e "s/<NS>/${NAMESPACE}/" | sed -e "s/<TAG>/${IMG_VERSION}/" | kubectl delete -f -
 
-	-cat env-prod-configmap.yaml  | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
+	-cat K8S/env-prod-configmap.yaml  | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
 
-	-cat reg-secret.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
-	-cat virtmanager-ingress.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
+	-cat K8S/reg-secret.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
+	-cat K8S/secreto.yaml| sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -
+	-cat K8S/virtmanager-ingress.yaml | sed -e "s/<NS>/${NAMESPACE}/" | kubectl delete -f -