Files
helm-charts-hardened/charts/spire/charts/spire-server/templates/cloud-secret.yaml
T
kfox1111andFaisal Memon e72b94fc13 Add all built in BundlePublishers (#430)
* Add all built in BundlePublishers

Signed-off-by: Kevin Fox <[email protected]>

* Add secret management

Signed-off-by: Kevin Fox <[email protected]>

* Fix typo

Signed-off-by: Kevin Fox <[email protected]>

* Update charts/spire/charts/spire-server/values.yaml

Co-authored-by: Faisal Memon <[email protected]>
Signed-off-by: kfox1111 <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: Faisal Memon <[email protected]>
2024-08-27 12:35:23 -07:00

25 lines
1.2 KiB
YAML

{{- $root := . }}
{{- if or (ne .Values.keyManager.awsKMS.accessKeyID "") (ne .Values.keyManager.awsKMS.secretAccessKey "") (ne .Values.secrets.aws.accessKeyID "") (ne .Values.secrets.aws.secretAccessKey "") (ne .Values.secrets.gcp.applicationCredentials "") }}
apiVersion: v1
kind: Secret
metadata:
name: {{ include "spire-server.fullname" $root }}-cloud
namespace: {{ include "spire-server.namespace" $root }}
data:
{{- if ne .Values.keyManager.awsKMS.accessKeyID "" }}
AWS_KMS_ACCESS_KEY_ID: {{ .Values.keyManager.awsKMS.accessKeyID | b64enc }}
{{- end }}
{{- if ne .Values.keyManager.awsKMS.secretAccessKey "" }}
AWS_KMS_SECRET_ACCESS_KEY: {{ .Values.keyManager.awsKMS.secretAccessKey | b64enc }}
{{- end }}
{{- if ne .Values.secrets.aws.accessKeyID "" }}
AWS_ACCESS_KEY_ID: {{ .Values.secrets.aws.accessKeyID | b64enc }}
{{- end }}
{{- if ne .Values.secrets.aws.secretAccessKey "" }}
AWS_SECRET_ACCESS_KEY: {{ .Values.secrets.aws.secretAccessKey | b64enc }}
{{- end }}
{{- if ne .Values.secrets.gcp.applicationCredentials "" }}
GOOGLE_APPLICATION_CREDENTIALS: {{ .Values.secrets.gcp.applicationCredentials | b64enc }}
{{- end }}
{{- end }}