mdsamsulhaque
bbf501269d
- Move env-specific config into environments/<env>/{values,configmap,secret}.yaml
for both nginx-chart and mysql-chart (dev, stg, prod)
- Make templates env-agnostic: resource names come from values
(configMap.name, secret.name)
- nginx deployment mounts env ConfigMap and loads env Secret via envFrom
- mysql statefulset reads DB config from ConfigMap, passwords from Secret
- Remove mysql-chart/templates/secret.yaml (secrets are now per-env manifests)
- Add README with layout and deploy commands
32 lines
1.1 KiB
YAML
32 lines
1.1 KiB
YAML
# ---------------------------------------------------------------------------
|
|
# Registry pull secret used by the nginx Deployment (imagePullSecrets).
|
|
# Replace the credentials with the real registry values, or regenerate with:
|
|
# kubectl create secret docker-registry harbor-secret \
|
|
# --docker-server=imageregistry.gen-itech.com \
|
|
# --docker-username=demo --docker-password=demo123 \
|
|
# -n dev --dry-run=client -o yaml
|
|
# ---------------------------------------------------------------------------
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: harbor-secret
|
|
namespace: dev
|
|
type: kubernetes.io/dockerconfigjson
|
|
stringData:
|
|
.dockerconfigjson: |
|
|
{"auths":{"imageregistry.gen-itech.com":{"username":"demo","password":"demo123","auth":"ZGVtbzpkZW1vMTIz"}}}
|
|
|
|
---
|
|
# ---------------------------------------------------------------------------
|
|
# Application secret for the nginx container (loaded via envFrom).
|
|
# ---------------------------------------------------------------------------
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: nginx-secret-dev
|
|
namespace: dev
|
|
type: Opaque
|
|
stringData:
|
|
APP_ENV: dev
|
|
APP_SECRET: change-me-dev
|