From 87371c400f1141220a3ee2fa3ee9797882b683cc Mon Sep 17 00:00:00 2001 From: awscloude Date: Thu, 16 Jul 2026 15:56:29 +0600 Subject: [PATCH] secrest --- myapp/custom-values.yaml | 16 ++++++++++++++++ myapp/templates/configmap.yaml | 10 ++++++++++ myapp/templates/deployment.yaml | 5 +++++ myapp/templates/secret.yaml | 13 +++++++++++++ 4 files changed, 44 insertions(+) create mode 100644 myapp/templates/configmap.yaml create mode 100644 myapp/templates/secret.yaml diff --git a/myapp/custom-values.yaml b/myapp/custom-values.yaml index 1dff4d0..8be1251 100644 --- a/myapp/custom-values.yaml +++ b/myapp/custom-values.yaml @@ -50,6 +50,22 @@ securityContext: {} # runAsNonRoot: true # runAsUser: 1000 +#config map and secrest + +config: + + APP_NAME: "Gen-iTech CI/CD Test" + APP_ENV: "production" + APP_DEBUG: "false" + +secret: + + DB_HOST: mysql.default.svc.cluster.local + DB_NAME: applicationdb + DB_USER: appuser + DB_PASSWORD: MyStrongPassword123 + + # This is for setting up a service more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/ service: # This sets the service type more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types diff --git a/myapp/templates/configmap.yaml b/myapp/templates/configmap.yaml new file mode 100644 index 0000000..207d8af --- /dev/null +++ b/myapp/templates/configmap.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "myapp.fullname" . }}-config + +data: + +{{- range $key, $value := .Values.config }} + {{ $key }}: "{{ $value }}" +{{- end }} diff --git a/myapp/templates/deployment.yaml b/myapp/templates/deployment.yaml index c72b997..2792549 100644 --- a/myapp/templates/deployment.yaml +++ b/myapp/templates/deployment.yaml @@ -38,6 +38,11 @@ spec: {{- toYaml . | nindent 12 }} {{- end }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + envFrom: + - configMapRef: + name: {{ include "myapp.fullname" . }}-config + - secretRef: + name: {{ include "myapp.fullname" . }}-secret imagePullPolicy: {{ .Values.image.pullPolicy }} ports: - name: http diff --git a/myapp/templates/secret.yaml b/myapp/templates/secret.yaml new file mode 100644 index 0000000..69ac935 --- /dev/null +++ b/myapp/templates/secret.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: Secret + +metadata: + name: {{ include "myapp.fullname" . }}-secret + +type: Opaque + +stringData: + +{{- range $key, $value := .Values.secret }} + {{ $key }}: "{{ $value }}" +{{- end }}