plane secrets back to the old version
This commit is contained in:
@@ -18,41 +18,19 @@ spec:
|
|||||||
- /bin/sh
|
- /bin/sh
|
||||||
- -c
|
- -c
|
||||||
- |
|
- |
|
||||||
echo "Patching Plane Secrets & DNS Config…"
|
# Patch plane-app-secrets
|
||||||
|
kubectl patch secret plane-app-secrets -n plane --type='json' -p='[
|
||||||
|
{"op": "replace", "path": "/data/DATABASE_URL", "value": "'$(echo -n "postgresql://plane:plane@plane-pgdb:5432/plane" | base64)'"},
|
||||||
|
{"op": "replace", "path": "/data/REDIS_URL", "value": "'$(echo -n "redis://plane-redis:6379/" | base64)'"},
|
||||||
|
{"op": "replace", "path": "/data/AMQP_URL", "value": "'$(echo -n "amqp://plane:plane@plane-rabbitmq/" | base64)'"}
|
||||||
|
]'
|
||||||
|
|
||||||
DB_URL=$(echo -n "postgresql://plane:plane@plane-pgdb:5432/plane" | base64)
|
# Patch plane-live-secrets
|
||||||
REDIS_URL=$(echo -n "redis://plane-redis:6379/" | base64)
|
kubectl patch secret plane-live-secrets -n plane --type='json' -p='[
|
||||||
AMQP_URL=$(echo -n "amqp://plane:plane@plane-rabbitmq/" | base64)
|
{"op": "replace", "path": "/data/REDIS_URL", "value": "'$(echo -n "redis://plane-redis:6379/" | base64)'"}
|
||||||
|
]'
|
||||||
|
|
||||||
kubectl patch secret plane-app-secrets -n plane --type=json -p "
|
echo "Secrets patched successfully"
|
||||||
[
|
|
||||||
{\"op\": \"replace\", \"path\": \"/data/DATABASE_URL\", \"value\": \"${DB_URL}\"},
|
|
||||||
{\"op\": \"replace\", \"path\": \"/data/REDIS_URL\", \"value\": \"${REDIS_URL}\"},
|
|
||||||
{\"op\": \"replace\", \"path\": \"/data/AMQP_URL\", \"value\": \"${AMQP_URL}\"}
|
|
||||||
]"
|
|
||||||
|
|
||||||
kubectl patch secret plane-live-secrets -n plane --type=json -p "
|
|
||||||
[
|
|
||||||
{\"op\": \"replace\", \"path\": \"/data/REDIS_URL\", \"value\": \"${REDIS_URL}\"}
|
|
||||||
]"
|
|
||||||
|
|
||||||
echo "Secrets patched successfully!"
|
|
||||||
|
|
||||||
# Deployments: plane-api-wl, plane-worker-wl, plane-beat-worker-wl
|
|
||||||
for item in plane-api-wl plane-worker-wl plane-beat-worker-wl; do
|
|
||||||
kubectl patch deployment $item -n plane --type=json -p "
|
|
||||||
[
|
|
||||||
{
|
|
||||||
\"op\": \"add\",
|
|
||||||
\"path\": \"/spec/template/spec/dnsConfig\",
|
|
||||||
\"value\": {
|
|
||||||
\"options\": [{\"name\": \"ndots\", \"value\": \"1\"}]
|
|
||||||
}
|
|
||||||
}
|
|
||||||
]" || echo "DNS patch failed or already applied for $item"
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "All patches completed!"
|
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
@@ -69,9 +47,6 @@ rules:
|
|||||||
- apiGroups: [""]
|
- apiGroups: [""]
|
||||||
resources: ["secrets"]
|
resources: ["secrets"]
|
||||||
verbs: ["get", "patch"]
|
verbs: ["get", "patch"]
|
||||||
- apiGroups: ["apps"]
|
|
||||||
resources: ["deployments"]
|
|
||||||
verbs: ["patch", "get"]
|
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
|
|||||||
Reference in New Issue
Block a user