.lagoon.secrets.yaml

apiVersion: v1
kind: Template
metadata:
  creationTimestamp: null
  name: lagoon-secret-environment-template
parameters:
  - name: JWTSECRET
    description: JSON Web Token generation secret
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: RABBITMQ_PASSWORD
    description: Password to connect to rabbitmq to
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: LOGSTASH_USERNAME
    description: Username to for incoming logstash http connections
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: LOGSTASH_PASSWORD
    description: Password to for incoming logstash http connections
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: OPENDISTRO_SECURITY_COOKIE_PASSWORD
    description: Password to for opendistro-security cookies
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: API_DB_PASSWORD
    description: Password used for connecting to the api-db
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: KEYCLOAK_DB_PASSWORD
    description: Password used for connecting to the keycloak-db
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: API_REDIS_PASSWORD
    description: Password used for connecting to the api-redis
    generate: expression
    from: "[a-zA-Z0-9]{32}"
  - name: SAFE_BRANCH
    description: Which branch this belongs to, special chars replaced with dashes
    required: true
  - name: SAFE_PROJECT
    description: Which project this belongs to, special chars replaced with dashes
    required: true
  - name: BRANCH
    description: Which branch this belongs to, original value
    required: true
  - name: PROJECT
    description: Which project this belongs to, original value
    required: true
  - name: LAGOON_GIT_SHA
    description: git hash sha of the current deployment
    required: true
  - name: OPENSHIFT_PROJECT
    description: Name of the Project that this service is in
    required: true
objects:
- kind: Secret
  apiVersion: v1
  metadata:
    name: jwtsecret
  stringData:
    JWTSECRET: ${JWTSECRET}
- kind: Secret
  apiVersion: v1
  metadata:
    name: rabbitmq-password
  stringData:
    RABBITMQ_PASSWORD: ${RABBITMQ_PASSWORD}
- kind: Secret
  apiVersion: v1
  metadata:
    name: rabbitmq-username
  stringData:
    RABBITMQ_USERNAME: lagoon
- kind: Secret
  apiVersion: v1
  metadata:
    name: api-db-password
  stringData:
    API_DB_PASSWORD: ${API_DB_PASSWORD}
- kind: Secret
  apiVersion: v1
  metadata:
    name: keycloak-db-password
  stringData:
    KEYCLOAK_DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD}
- kind: Secret
  apiVersion: v1
  metadata:
    name: logstash-username
  stringData:
    LOGSTASH_USERNAME: ${LOGSTASH_USERNAME}
- kind: Secret
  apiVersion: v1
  metadata:
    name: logstash-password
  stringData:
    LOGSTASH_PASSWORD: ${LOGSTASH_PASSWORD}
- kind: Secret
  apiVersion: v1
  metadata:
    name: opendistro-security-cookie-password
  stringData:
    OPENDISTRO_SECURITY_COOKIE_PASSWORD: ${OPENDISTRO_SECURITY_COOKIE_PASSWORD}
- kind: Secret
  apiVersion: v1
  metadata:
    name: api-redis-password
  stringData:
    API_REDIS_PASSWORD: ${API_REDIS_PASSWORD}