From 450e363b6573d3b6d8b3ad19dc592d304284ee54 Mon Sep 17 00:00:00 2001 From: "Kajur, Harish (vk250x)" Date: Thu, 26 Apr 2018 11:26:45 -0400 Subject: [PATCH] Update the keystore for resources and traversal to use the aaf generated keystore for our apps Issue-ID: AAI-1101 Change-Id: I5a5642f86e8bb924f2c01fa685a0493abf500623 Signed-off-by: Kajur, Harish (vk250x) --- .../aai-resources/resources/config/aai_keystore | Bin 3811 -> 0 bytes .../charts/aai-resources/templates/configmap.yaml | 9 --------- .../charts/aai-resources/templates/deployment.yaml | 2 +- .../aai-traversal/resources/config/aai_keystore | Bin 3811 -> 0 bytes .../charts/aai-traversal/templates/configmap.yaml | 9 --------- .../charts/aai-traversal/templates/deployment.yaml | 2 +- .../aai/charts/aai-traversal/templates/job.yaml | 2 +- kubernetes/aai/resources/config/aai/aai_keystore | Bin 0 -> 4928 bytes kubernetes/aai/templates/configmap.yaml | 21 ++++++++++++++++++++- kubernetes/aai/values.yaml | 2 +- 10 files changed, 24 insertions(+), 23 deletions(-) delete mode 100644 kubernetes/aai/charts/aai-resources/resources/config/aai_keystore delete mode 100644 kubernetes/aai/charts/aai-traversal/resources/config/aai_keystore create mode 100644 kubernetes/aai/resources/config/aai/aai_keystore diff --git a/kubernetes/aai/charts/aai-resources/resources/config/aai_keystore b/kubernetes/aai/charts/aai-resources/resources/config/aai_keystore deleted file mode 100644 index 1ddef0c9bdfd4bcedbf6068115d69687664eceb3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3811 zcmdT{XHZk?)=okK0V6GnfRq5z1$U4xDqTdHbm@VF5Fi9Fp;%Btvr!CHK@L)-2?_|( zL_w4qT4;g@a*!qns36T7kEh);ckVaee80XQd-iJY%vx)&=UMOG{kZ!P1Oh>Rf50FF z216kEdCtU|@g>-2pgRIpkTvP_P_?2MmURpj7Bw+1oVmx>&kR z?3f*A0Ooo|{E?kG2<6;c-sk-*2W06@}0q@7ftxIUJqbxODrbZF8%SP_u(X zvQ}T^H@(nh3gxL!?y^$OMJrupccY0yo++0L#fS8AAEJF^x>>)5@o~O8w_P8pr)1Q1 zD#*uza^JXan?`xgFYjzm>zu@atvr^M{EByurVALcT@yq+s6CkP?&r{^!LPbDwm8ga zZD}R=4PR9&o9#qW0YQ*;bKDmbY-Ayy$=##}uiJwn{6|9BdREuDcxy7$EN`XN465+Y zjDiJdjLt)r@WNR|=;Eoh5NNYc)t3T&AQf>DTcTrci~wb5*ak ze{mpvou$f2j7|!UL05QYlcMUn8%*p5H*y;SC5TFvTsdqISzcagMylPV^=f_5s^?#Q zg4T96pJEA>g>9qr7AbmW54UrKZgAMQrjOf}Ly_WXis4JW<*1nXqMOGDuLQ}7c{Gi^ zMIi%3R`^JV*DPI}U+71dAQvuKImRTOQL_^qj#$t}9=2Y$75TzRZmgY^I($F*eCwOM z#{gf{tw?-cscT^2lS>u8iVtTcd+kKu7c)NaXPoRR??)(bNS44osy8?eLA>qB2aPP` z)UaFp5N@jyx~fjTcb5)QZQ+DjFD72>DmZZg-^PWq^}4>w>iB#yA(;>&Br-zqK6tWb zQI_`doQUVrtCQs92F$GU*eK`uDnI1}e9b370{ z*Bt44FJh3VepT&}!LqaCRGVh_9j}(NptQJEXZ7U5m9yy}sHiMHH72KEtnQd!!3&aA zL^!#0ZBbx!_esEj{2eX327XDIV~6~dg;oNe_WSIv-Jq7i?=@XR zi$bWy29;CKOwMj{yy!5QCLd@tww_DvLRc}#q2ojXqudeWS!7n96-0b3=42~{+4@L2S{bCx+>NH|h>fHh6QIma$%R$6VMB>^LZsb1pOw?6d;~jeyQS0l z*n&Mef=Q8J5X@dt1<(M2Sm*$ir30WsDj@8j1(wb=Y~ET1u$PrxF4`!1eJ>ci2L=Md zOVN7(c2*V}C@T_TWA%puM?lPs(MW*jhldTpp^L*334Z6vxIi>7!2QF>fnYahaurmBus0#tujf$*$9O85`;>;rgz*0bkl zJ%ry1+6(OYSrF9ROveH(3rPP=8^v5RiWq-_;$O)q{#!C=WkBigSxYhxD0q?1lePcb zDS!$V|NB>9?kE;2mBc8=xZ+W1#z9Ua@Fexj*xEFIV zJl4haHfLUj1-)i@L2X1!V7#;EA#(pIhAB6LEeC(WRo0N8J!Z?%iSc}i!Ox&F6^@;A zs3PHG=3PpJrIm$D5oLJy;SOPT&075#^?`!qH!rBm{rkgoCvJqlAA(aos2{hU(=mfEqJo1CLL=cSa1`V#-~D=E%-M&MK7s{6D=UhZXz z6JF6M>2`z}rSV`>VYXnykij#tT8i}8iku=m2=Zvrw$H8Bt?6>su-;-MrN`AfDwyv` zhR)}cN*->!nH^$`vGH8h#>RxM9+BiBaq%wSAvuMU4V`ljr8>JlQ9JB1%j%l)=m=c! z{8Ha=-0&23WP11Rn5tInmDpA}?o(!B85yPU$JP7aH4fFWFbuT6e=&1@0_Bqj6T@R9 zYnO~=!D`vYbL|7?;tfnZi!pA4-BpwoH@ESYqWJj!&5~@ zRoAfIO?Kz@+k~s#13d*?Qmcyof?-AKzla7LIcf9`v7r}gZU0IoFW_3Y~A%LMN&-yU?Y~dw*8Z;7jsckhN z(ebTo#?x(t`P!MD&9)SG z=6DGs!Qk&u7{J1OG4J|J1J@4&lsWd%fbb8U6UqnOXI9|r4vrO^89#KP;YsWDNct&c z2H^k0je-&YJb+_`GDQ&J3^=mFng0tg7#jovmL=>uOyYwrXEz1|z(&c%0*6Kp0G-USY{93_zwh(g& ze=x*oG-vR^$@n_0D~=E?XZ@v4eeSm~-nO%@P8S?HC&-K^qs6Rqwk z7;L%(?Ie^1Q$d2+aw*wkr!C~wGPVzu>dXYc*A25SZL=O+Z4A1YEn}KG_4px7*e_h7Ss(oMRc-kFG?M@t=){vS&6Q4>6iS>Tgq-|7`r80`#5f67MadWpw&zapo zsjrlA-`8KxocVS+iSxC}XCFWN7q^Wj6!;pSc{fyH)i(6^HM94XN>4=#C&uefKWQGbLtyro_TZ*{zGVy09lE zgrU9)fliTF0i>&gfc@Rl3K7`!HF1GA`9$hOhe|!Petg%~a+dzt`I~rYO7)wztnjVT Uqa7Y|Vd=pIubnfG)Q-3P3t9q14gdfE diff --git a/kubernetes/aai/charts/aai-resources/templates/configmap.yaml b/kubernetes/aai/charts/aai-resources/templates/configmap.yaml index 5e371ea5bf..373819e39e 100644 --- a/kubernetes/aai/charts/aai-resources/templates/configmap.yaml +++ b/kubernetes/aai/charts/aai-resources/templates/configmap.yaml @@ -53,12 +53,3 @@ metadata: namespace: {{ include "common.namespace" . }} data: {{ tpl (.Files.Glob "resources/config/realm.properties").AsConfig . | indent 2 }} ---- -apiVersion: v1 -kind: Secret -metadata: - name: {{ include "common.fullname" . }}-auth-secret - namespace: {{ include "common.namespace" . }} -type: Opaque -data: -{{ tpl (.Files.Glob "resources/config/aai_keystore").AsSecrets . | indent 2 }} diff --git a/kubernetes/aai/charts/aai-resources/templates/deployment.yaml b/kubernetes/aai/charts/aai-resources/templates/deployment.yaml index 6c65bce4cc..72c7bc0379 100644 --- a/kubernetes/aai/charts/aai-resources/templates/deployment.yaml +++ b/kubernetes/aai/charts/aai-resources/templates/deployment.yaml @@ -542,7 +542,7 @@ spec: name: {{ include "common.fullname" . }}-realm-configmap - name: {{ include "common.fullname" . }}-auth-sec secret: - secretName: {{ include "common.fullname" . }}-auth-secret + secretName: aai-auth-secret restartPolicy: {{ .Values.restartPolicy }} imagePullSecrets: - name: "{{ include "common.namespace" . }}-docker-registry-key" diff --git a/kubernetes/aai/charts/aai-traversal/resources/config/aai_keystore b/kubernetes/aai/charts/aai-traversal/resources/config/aai_keystore deleted file mode 100644 index 1ddef0c9bdfd4bcedbf6068115d69687664eceb3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3811 zcmdT{XHZk?)=okK0V6GnfRq5z1$U4xDqTdHbm@VF5Fi9Fp;%Btvr!CHK@L)-2?_|( zL_w4qT4;g@a*!qns36T7kEh);ckVaee80XQd-iJY%vx)&=UMOG{kZ!P1Oh>Rf50FF z216kEdCtU|@g>-2pgRIpkTvP_P_?2MmURpj7Bw+1oVmx>&kR z?3f*A0Ooo|{E?kG2<6;c-sk-*2W06@}0q@7ftxIUJqbxODrbZF8%SP_u(X zvQ}T^H@(nh3gxL!?y^$OMJrupccY0yo++0L#fS8AAEJF^x>>)5@o~O8w_P8pr)1Q1 zD#*uza^JXan?`xgFYjzm>zu@atvr^M{EByurVALcT@yq+s6CkP?&r{^!LPbDwm8ga zZD}R=4PR9&o9#qW0YQ*;bKDmbY-Ayy$=##}uiJwn{6|9BdREuDcxy7$EN`XN465+Y zjDiJdjLt)r@WNR|=;Eoh5NNYc)t3T&AQf>DTcTrci~wb5*ak ze{mpvou$f2j7|!UL05QYlcMUn8%*p5H*y;SC5TFvTsdqISzcagMylPV^=f_5s^?#Q zg4T96pJEA>g>9qr7AbmW54UrKZgAMQrjOf}Ly_WXis4JW<*1nXqMOGDuLQ}7c{Gi^ zMIi%3R`^JV*DPI}U+71dAQvuKImRTOQL_^qj#$t}9=2Y$75TzRZmgY^I($F*eCwOM z#{gf{tw?-cscT^2lS>u8iVtTcd+kKu7c)NaXPoRR??)(bNS44osy8?eLA>qB2aPP` z)UaFp5N@jyx~fjTcb5)QZQ+DjFD72>DmZZg-^PWq^}4>w>iB#yA(;>&Br-zqK6tWb zQI_`doQUVrtCQs92F$GU*eK`uDnI1}e9b370{ z*Bt44FJh3VepT&}!LqaCRGVh_9j}(NptQJEXZ7U5m9yy}sHiMHH72KEtnQd!!3&aA zL^!#0ZBbx!_esEj{2eX327XDIV~6~dg;oNe_WSIv-Jq7i?=@XR zi$bWy29;CKOwMj{yy!5QCLd@tww_DvLRc}#q2ojXqudeWS!7n96-0b3=42~{+4@L2S{bCx+>NH|h>fHh6QIma$%R$6VMB>^LZsb1pOw?6d;~jeyQS0l z*n&Mef=Q8J5X@dt1<(M2Sm*$ir30WsDj@8j1(wb=Y~ET1u$PrxF4`!1eJ>ci2L=Md zOVN7(c2*V}C@T_TWA%puM?lPs(MW*jhldTpp^L*334Z6vxIi>7!2QF>fnYahaurmBus0#tujf$*$9O85`;>;rgz*0bkl zJ%ry1+6(OYSrF9ROveH(3rPP=8^v5RiWq-_;$O)q{#!C=WkBigSxYhxD0q?1lePcb zDS!$V|NB>9?kE;2mBc8=xZ+W1#z9Ua@Fexj*xEFIV zJl4haHfLUj1-)i@L2X1!V7#;EA#(pIhAB6LEeC(WRo0N8J!Z?%iSc}i!Ox&F6^@;A zs3PHG=3PpJrIm$D5oLJy;SOPT&075#^?`!qH!rBm{rkgoCvJqlAA(aos2{hU(=mfEqJo1CLL=cSa1`V#-~D=E%-M&MK7s{6D=UhZXz z6JF6M>2`z}rSV`>VYXnykij#tT8i}8iku=m2=Zvrw$H8Bt?6>su-;-MrN`AfDwyv` zhR)}cN*->!nH^$`vGH8h#>RxM9+BiBaq%wSAvuMU4V`ljr8>JlQ9JB1%j%l)=m=c! z{8Ha=-0&23WP11Rn5tInmDpA}?o(!B85yPU$JP7aH4fFWFbuT6e=&1@0_Bqj6T@R9 zYnO~=!D`vYbL|7?;tfnZi!pA4-BpwoH@ESYqWJj!&5~@ zRoAfIO?Kz@+k~s#13d*?Qmcyof?-AKzla7LIcf9`v7r}gZU0IoFW_3Y~A%LMN&-yU?Y~dw*8Z;7jsckhN z(ebTo#?x(t`P!MD&9)SG z=6DGs!Qk&u7{J1OG4J|J1J@4&lsWd%fbb8U6UqnOXI9|r4vrO^89#KP;YsWDNct&c z2H^k0je-&YJb+_`GDQ&J3^=mFng0tg7#jovmL=>uOyYwrXEz1|z(&c%0*6Kp0G-USY{93_zwh(g& ze=x*oG-vR^$@n_0D~=E?XZ@v4eeSm~-nO%@P8S?HC&-K^qs6Rqwk z7;L%(?Ie^1Q$d2+aw*wkr!C~wGPVzu>dXYc*A25SZL=O+Z4A1YEn}KG_4px7*e_h7Ss(oMRc-kFG?M@t=){vS&6Q4>6iS>Tgq-|7`r80`#5f67MadWpw&zapo zsjrlA-`8KxocVS+iSxC}XCFWN7q^Wj6!;pSc{fyH)i(6^HM94XN>4=#C&uefKWQGbLtyro_TZ*{zGVy09lE zgrU9)fliTF0i>&gfc@Rl3K7`!HF1GA`9$hOhe|!Petg%~a+dzt`I~rYO7)wztnjVT Uqa7Y|Vd=pIubnfG)Q-3P3t9q14gdfE diff --git a/kubernetes/aai/charts/aai-traversal/templates/configmap.yaml b/kubernetes/aai/charts/aai-traversal/templates/configmap.yaml index cc88444ae2..373819e39e 100644 --- a/kubernetes/aai/charts/aai-traversal/templates/configmap.yaml +++ b/kubernetes/aai/charts/aai-traversal/templates/configmap.yaml @@ -53,12 +53,3 @@ metadata: namespace: {{ include "common.namespace" . }} data: {{ tpl (.Files.Glob "resources/config/realm.properties").AsConfig . | indent 2 }} ---- -apiVersion: v1 -kind: Secret -metadata: - name: {{ include "common.fullname" . }}-auth-secret - namespace: {{ include "common.namespace" . }} -type: Opaque -data: -{{ tpl (.Files.Glob "resources/config/aai_keystore").AsSecrets . | indent 2 }} \ No newline at end of file diff --git a/kubernetes/aai/charts/aai-traversal/templates/deployment.yaml b/kubernetes/aai/charts/aai-traversal/templates/deployment.yaml index bda80a0483..b1b6f74d3f 100644 --- a/kubernetes/aai/charts/aai-traversal/templates/deployment.yaml +++ b/kubernetes/aai/charts/aai-traversal/templates/deployment.yaml @@ -375,7 +375,7 @@ spec: name: {{ include "common.fullname" . }}-realm-configmap - name: {{ include "common.fullname" . }}-auth-sec secret: - secretName: {{ include "common.fullname" . }}-auth-secret + secretName: aai-auth-secret restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }} imagePullSecrets: - name: "{{ include "common.namespace" . }}-docker-registry-key" diff --git a/kubernetes/aai/charts/aai-traversal/templates/job.yaml b/kubernetes/aai/charts/aai-traversal/templates/job.yaml index b9b2501304..9d0acf6a63 100644 --- a/kubernetes/aai/charts/aai-traversal/templates/job.yaml +++ b/kubernetes/aai/charts/aai-traversal/templates/job.yaml @@ -125,7 +125,7 @@ spec: name: {{ include "common.fullname" . }}-realm-configmap - name: {{ include "common.fullname" . }}-auth-sec secret: - secretName: {{ include "common.fullname" . }}-auth-secret + secretName: aai-auth-secret restartPolicy: OnFailure imagePullSecrets: - name: "{{ include "common.namespace" . }}-docker-registry-key" diff --git a/kubernetes/aai/resources/config/aai/aai_keystore b/kubernetes/aai/resources/config/aai/aai_keystore new file mode 100644 index 0000000000000000000000000000000000000000..16d93a7e9f375e28e682dc36508763505daf9236 GIT binary patch literal 4928 zcmb`KcQl;o-^QmBbuf%BL|75z8Fh#jqC`*hUPno^sL>W9YKYEgQKLnOnjm@?H4#$O zUHRCjE;1nz~Nb7s2Cj zz?b#4O)aarzTW;W^`xHKVDLqw*+7w>&Uedo6XEhbduERpFR|3|!$_#&A?@a)wl;ER zJOj^Do5H)6v9U9}a+%mE3vSbcI?p~@{=?DMC8pkdR~#Ul=7H0x1oAkZbm%}IMw5snvZwcdQqitUn4@V zsHxUBI=n666oIXseXliM`GCEsL-yr>$|0A(>pCvc=NhNwL#dQ@no><&QD%O%!^(ly zB(4p)kZtlXgSN2eKIdmG>O_LR=TYArQYaR4to~3muD_rOwN-l~f?00fTG%MWrR_6m zwL21xOhHm@lUNIf`dQ=XFh!AoE!?w!;K6^557 zW~TxrQI?FDlwxQ>Q+=b3*3zjR)wY15m;ZpgbEuoDIMT0tx$b z8xmAOXhSea=6tVx#l39xXEIE7mXgi1<`lXzw2glQ#d{Mu9a59Z zP$n?v1P7}2n71b|=||ncS0;wa2^goed_6qj=4fPhwr~0>ld0u8{6=ugZKt9$ckNY{ zYP)UfZaEN_<}*NtxoXUM9Oz`&#@(9rJ>_*VEa$HKG^6{y=#0##3YPgtD*Xe`T1^y6 zavvEZ6JK#X3HmJC-YGa!eb+U#rtt-az3ahD?8VRptr%*VdpX&KTSIT}`7Ph+jb(T; zQ5KcuUE9It8_BJ!Qc>Tesx;uj0p9GbQ+$(3IpZC+ncABTqFW5*H=2gQE4`g9rCYV*w1CUMBFnRkXe&%`SugiE7zUWhm#ZxO|azmWD|`FT`gQqyJLY`s)b? z7JAPxg2jSC#sJu_Wpq2uTTI7JL@9S%S2!pm={6~Cb$<22U|Ti z?1^$dcTZ1H;i!7tFzLvf=|!#K8y9l!bi)L}*8#gKpT)-~r>-t%7Wtgi*;!|LsK?G^ zQ^cJHOKeikzN?_>G%kFu*xqR!^7O=_xk)f@g`|r`CR@H)+klB4WSh%2b@)Vokay6Q zzlx`&vlmp%qC`}`wu}@p93Zt)St;di1J7W3s?rxI#pB%T3uoQvmSX5cFLxb@?2uhH zm8}pE1zQoZD!T&3WO z5K{pacATjh{@_abZB&24tnrP)%x~l&`x~ksYdh*^--M_iU0WHdBduYi0{IlO&qLk5LAzlx>M`SE&0ncLVy zUK+?XcED)L7NnuihSa6`B{@#|{C}4IL~At>lc24xp6Q%)!Tmj27>1$J@YwNN#D@f5 zpO)$vFb_-8aAvtVbO4t2p@TXF3LQ~uh<#8>%as^#W4icpCE4KaQ=v}_q=6c451gM2 zMAhLOJoAd^#%6}Jhr7FO%2BB({Nloaw!1a4&}ptgRK<77T<-#_0djojOVSzEek`=)_M(_p8p!8gs27EKS$j9JEX1<0zi4#JjO3 zb80!%cam5ymMnOWLOMk|h}@4xG#cGITL%p9CtaeGo>6Tq%fM>D6|aw@DCVs{_HSSV zmEe^t-{Bj9MSQ968TLDLK&KBg4+;uhhGj*|pJT7~=UdI+mXy9V&;>$RMpG zyV0WTdfAwsM9T~90s>3n{^T{q58&wJ*OLm$S|BzZSnD@$(pewAZqEhu!&;lY;r*@! zmi^Kk)<6Y`x#!))66FIdYOCJT+}}?u*U{_JZkHIQ49`W-Ax~BUh_+`fevX<8)YAKu zIZ{K>KXDGpe{xY9&UQWL>FZw^^mpQf2@o8Smq45}KZp}d@wYP-Q2Gl>{v9*_PN9qd zJ>iIkLCL8coIS8^PFNcUOAoC4HFNau5Q-KOL<@?Dh!Y?bElyxk%x@*&^nd=*Zx1FT zry^LpEa4Jxakg|7aB;Ky4-&ozT==mD=Cf&*t_}k34oSnwIe zf(aB027}7#WbIdiC={}@EpUCVzFf;5nw$RO201)08Fa#r1tOi=b}7C$*2DD=9;)2C zIbWDR--<7^@EMH$@))zsVMJ95zuY4&HftFqW4Xxy7)XoGh<}qpBNF$-!vqX3+ZWIj z#8~mQl9_cb)(CfMB$|J?h1Y7CxB(t!!@GO;w~TO;T<|JKGO6C*v^XVG)CnoY?Qc}p zx$kZ6)qR=I2hHv9t8m)iG^#Kfz608$=6Hf$SyCL}aZvC)j;PDIUwbd7DJwBnKGh3_ z5k84lsYNwJ&2JW0pnO!Lj_f0t9tC!Hg|}|DciE&wekysG%7$p)mWZ!HR@I01!Y;L}C%93=TVx1B1^XjHne5`rjc67&q#oCgI@K)>dOz zBAmZ&gx$Ac*T%YeVcpo}v2Gp?whq>Wu|J_`d55}&;D2h7Yqf^5}hLu z0US;Y1^@90@;4GKJB;tA0hwBm%-u}E z$C=4di-m{bno46m7c=dQRx41+-Ocee)Z@09S207u@qWB>lfECkTrBJvrmWf#moLDX zm{y*F-}?so_=+w65mjLZ1mn;lWIoB?j060)*Y)pq=XZDb5mAMKGk3rMqJZ#OL?x8} ze>U{rbdR43Y5jhmbvTj|5#l|A~Imt05ghpwgRikV1Q)pAi$eo8@Dunzcr6b2wK#@rJ8gho`(D&8WKe4zllx`bqZs;3cP1WK^2W)D8bYPStU^k*`L%P~*@R z>Hg201)uN4&)1EJa>mmQj!qn;fF-F+bod_b-lwz@bk5c4oRv1KeV9eVtHQjMMt`^h ziAwvSdt1QfPZIqn1^)N+Msud&U(?$;fQXRU2;uCn3jF5)mrk4)H6s6D4_0j8MOx~i z6U^JuYgKQ4wG1?3(EcLqM9<8$p9|9k@hr2@B`tR@8y8ZV$aP~-(~%=*$A#_a%|x?t z@y!&ECGt)`Kf3=*>HP3|-ywf0^AnMrBB+AaX^aLhF%P4GmRci;U$x9RnmxRUHD-F) zmvU{4epFiDE4nbffYI?#(Dw}c_NL-^=1r?e_}yThe#av$I(pY>uFU=Uvtf1y>snb6N3@*^qpB`OiOV8 z)@`|9>CC$f@I^|j0wWntKvw(4qGP>`Y>X*khP`PSW7r$ZDxTgN+Du=V3QEY)#LFxr z8~;6>`kwmF+rca9Mh3{I<%}C&j-v`k5(7@Ft)qk@GC!wQ-;7W%nise=P2;zkEz*{} zieJ(yikEm>E&LL3#KN9*4a?je69J8{qxX}|NJR2ynpYkL2Es%r4M<-kB^tivTUS^u z2`n3Px5QHo(uiHy7~eXMelIxw!H!Y1JG&IE=E}a|V;ZW^!lquIG7NZ~(!MQle9K+7 z5u};4rh20%E=|=Rk+A!fhHNs#*dW8`K-d=kvU;=-p}S5hbPic5TU5EcP*`nPr}95i CuP3Ac literal 0 HcmV?d00001 diff --git a/kubernetes/aai/templates/configmap.yaml b/kubernetes/aai/templates/configmap.yaml index 592e4129d1..00d2a80d9c 100644 --- a/kubernetes/aai/templates/configmap.yaml +++ b/kubernetes/aai/templates/configmap.yaml @@ -13,6 +13,25 @@ metadata: name: aai-deployment-configmap namespace: {{ include "common.namespace" . }} data: -{{ tpl (.Files.Glob "resources/config/haproxy/*").AsConfig . | indent 2 }} +{{ tpl (.Files.Glob "resources/config/haproxy/haproxy.cfg").AsConfig . | indent 2 }} +--- +apiVersion: v1 +kind: Secret +metadata: + name: aai-haproxy-secret + namespace: {{ include "common.namespace" . }} +type: Opaque +data: +{{ tpl (.Files.Glob "resources/config/haproxy/aai.pem").AsSecrets . | indent 2 }} +# This is a shared key for both resources and traversal +--- +apiVersion: v1 +kind: Secret +metadata: + name: aai-auth-secret + namespace: {{ include "common.namespace" . }} +type: Opaque +data: +{{ tpl (.Files.Glob "resources/config/aai/aai_keystore").AsSecrets . | indent 2 }} diff --git a/kubernetes/aai/values.yaml b/kubernetes/aai/values.yaml index e8798186ed..b29f8a2b13 100644 --- a/kubernetes/aai/values.yaml +++ b/kubernetes/aai/values.yaml @@ -57,7 +57,7 @@ global: # global defaults # application image dockerhubRepository: registry.hub.docker.com -image: aaionap/haproxy:1.1.0 +image: aaionap/haproxy:1.2.1 pullPolicy: Always # flag to enable debugging - application support required -- 2.16.6