Supply CM password from secret

Change-Id: I88b0817c0fb2becdf44dd9d9012d19e4d5174c63
Issue-ID: DCAEGEN2-411
Signed-off-by: Jack Lucas <jflucas@research.att.com>

diff --git a/blueprints/k8s-deployment_handler.yaml-template b/blueprints/k8s-deployment_handler.yaml-template
index 3aae790..9d4c5b8 100644 (file)
--- a/blueprints/k8s-deployment_handler.yaml-template
+++ b/blueprints/k8s-deployment_handler.yaml-template
@@ -72,3 +72,13 @@ node_templates:
           version: 'v4'
         log_info:
           log_directory: '/opt/app/dh/log'
+    # Inject CM password through environment variable
+    # so that it does not appear in Consul
+    interfaces:
+      cloudify.interfaces.lifecycle:
+        start:
+          inputs:
+            envs:
+              CLOUDIFY_PASSWORD: { get_secret: cmpass }
+              CLOUDIFY_USER: admin
+