init-2.yaml

secrets:
  - name: s3-secret-key
    literals:
      - name: s3-secret-key
    filters:
      - "default"
    namespace: "openfaas-fn"
  - name: s3-access-key
    literals:
      - name: s3-access-key
    filters:
      - "default"
    namespace: "openfaas-fn"
  - name: basic-auth
    files:
      - name: "basic-auth-user"
        value_from: "./credentials/basic-auth-user"
      - name: "basic-auth-password"
        value_from: "./credentials/basic-auth-password"
    filters:
      - "default"
    namespace: "openfaas"
  - name: "payload-secret"
    files:
      - name: "payload-secret"
        value_from: "./credentials/payload-secret"
    filters:
      - "default"
    namespace: "openfaas"
  - name: "jwt-private-key"
    files:
      - name: "key"
        value_from: "./credentials/key"
        value_command: "openssl ecparam -genkey -name prime256v1 -noout -out ./credentials/key"
    filters:
      - "auth"
    namespace: "openfaas"
  - name: "jwt-public-key"
    files:
      - name: "key.pub"
        value_from: "./credentials/key.pub"
        value_command: "openssl ec -in ./credentials/key -pubout -out ./credentials/key.pub"
    filters:
      - "auth"
    namespace: "openfaas"

  ## This value is used by Github to talk to system-github-event
  - name: "github-webhook-secret"
    files:
      - name: "github-webhook-secret"
        value_from: "./credentials/github-webhook-secret"
    filters:
      - "scm_github"
    namespace: "openfaas-fn"

  # Download from GitHub App on GitHub UI or using GitHub app creation tool
  - name: "private-key"
    files:
      - name: "private-key"
        value_from: "./credentials/github-private-key.pem"
    filters:
      - "scm_github"
    namespace: "openfaas-fn"
  # OAuth client_secret
  - name: "of-client-secret"
    files:
      - name: "of-client-secret"
        value_from: "./credentials/of-client-secret"
    filters:
      - "auth"
    namespace: "openfaas"

  ## Use Route 53
  ### Create role and download its secret access key
  - name: "route53-credentials-secret"
    files:
      - name: "secret-access-key"
        value_from: "./credentials/route53-secret-access-key"
    filters:
      - "route53_dns01"
    namespace: "cert-manager"

  # Used by Buildkit to push images to your registry
  - name: "registry-secret"
    files:
      - name: "config.json"
        value_from: "./credentials/config.json"
    filters:
      - "default"
    namespace: "openfaas"

  # Used to pull functions / images to nodes by Kubernetes
  - name: "registry-pull-secret"
    files:
      - name: ".dockerconfigjson"
        value_from: "./credentials/config.json"
    namespace: "openfaas-fn"
    filters:
      - "default"
    type: "kubernetes.io/dockerconfigjson"

    # ECR credentials to push to AWS ECR
  - name: "aws-ecr-credentials"
    files:
      - name: "credentials"
        value_from: "./credentials/aws-ecr-credentials"
    filters:
      - "ecr"
    namespace: "openfaas"

  - name: "aws-ecr-createrepo-credentials"
    files:
      - name: "credentials"
        value_from: "./credentials/aws-ecr-credentials"
    filters:
      - "ecr"
    namespace: "openfaas-fn"

  ## If not using a HTTPS URL, then set a list of CUSTOMERS
  - name: "of-customers"
    files:
      - name: "of-customers"
        value_from: "./credentials/customers"
    namespace: "openfaas"
    filters:
      - "default"
  - name: "customers"
    files:
      - name: "customers"
        value_from: "./credentials/customers"
    namespace: "openfaas-fn"
    filters:
      - "default"