vexxhost/openstack-operator
Code Issues Proposed changes

Use secret for keystone conf

Browse Source 
Change-Id: Ie28d295115d2b3bcbf87092b12b0fffc67ea247d
This commit is contained in:
okozachenko 2020-07-06 17:54:56 +03:00
parent c6231a80d0
commit 073ce91473
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
devstack/lib/keystone
View File

@ -22,6 +22,7 @@ export -f install_keystone
# init_keystone() - Initialize databases, etc. # init_keystone() - Initialize databases, etc.
function init_keystone { function init_keystone {
kubectl create secret generic keystone-config --from-file=/etc/keystone/keystone.conf -n openstack
# NOTE(mnaser): Permissions here are bad but it's temporary so we don't care as much. # NOTE(mnaser): Permissions here are bad but it's temporary so we don't care as much.
sudo chmod -Rv 777 /etc/keystone sudo chmod -Rv 777 /etc/keystone

7
openstack_operator/templates/keystone/deployment.yml.j2
View File

@ -129,7 +129,7 @@ spec:
runAsUser: 65534 runAsUser: 65534
runAsGroup: 65534 runAsGroup: 65534
volumeMounts: volumeMounts:
- mountPath: /etc/keystone - mountPath: /etc/keystone/
name: config name: config
- name: fernet-keys - name: fernet-keys
mountPath: /etc/keystone/fernet-keys mountPath: /etc/keystone/fernet-keys
@ -137,9 +137,8 @@ spec:
mountPath: /etc/keystone/credential-keys mountPath: /etc/keystone/credential-keys
volumes: volumes:
- name: config - name: config
hostPath: secret:
path: {{ spec['configDir'] }} secretName: keystone-config
type: Directory
- name: fernet-keys - name: fernet-keys
secret: secret:
secretName: keystone-fernet secretName: keystone-fernet