Skip secret generation for production env

Retales-To: #654
Change-Id: I984cfbc0e67ec32ae70ae3646bd59f5911494afb
This commit is contained in:
Siraj Yasin 2021-11-30 22:51:46 +00:00
parent 6d797812d3
commit 4ed3a80412
3 changed files with 13 additions and 1 deletions

View File

@ -43,6 +43,13 @@
path: "/spec/containers/6/env/10/value"
value: none
# The following relate to secret regeneration
# Set this to "true" in production environment to prevent secret generation
# and secret show
- op: replace
path: "/spec/containers/6/env/11/value"
value: "false"
# The following relate to authorization for pulling the airshipctl repository
# This is the type of authorization to use. Currently supported types are
# [none http-basic ssh-key]

View File

@ -332,6 +332,8 @@ spec:
value:
- name: AIRSHIP_CONFIG_MANIFEST_REPO_AUTH_TYPE
value: "none"
- name: SKIP_REGENERATE
value:
volumeMounts:
- name: cache

View File

@ -76,7 +76,10 @@ else
export NO_CHECKOUT="true"
fi
./tools/deployment/23_pull_documents.sh
if [[ "$SKIP_REGENERATE" = "false" ]]; then
./tools/deployment/23_generate_secrets.sh
fi
repo_url=$(yq -r .manifests.dummy_manifest.repositories.primary.url /root/.airship/config)
repo_name=$(basename ${repo_url})