Skip to content

Instantly share code, notes, and snippets.

@Waterdrips
Last active Apr 1, 2020
Embed
What would you like to do?
secrets:
- name: s3-secret-key
literals:
- name: s3-secret-key
filters:
- "default"
namespace: "openfaas-fn"
- name: s3-access-key
literals:
- name: s3-access-key
filters:
- "default"
namespace: "openfaas-fn"
- name: basic-auth
files:
- name: "basic-auth-user"
value_from: "./credentials/basic-auth-user"
- name: "basic-auth-password"
value_from: "./credentials/basic-auth-password"
filters:
- "default"
namespace: "openfaas"
- name: "payload-secret"
files:
- name: "payload-secret"
value_from: "./credentials/payload-secret"
filters:
- "default"
namespace: "openfaas"
- name: "jwt-private-key"
files:
- name: "key"
value_from: "./credentials/key"
value_command: "openssl ecparam -genkey -name prime256v1 -noout -out ./credentials/key"
filters:
- "auth"
namespace: "openfaas"
- name: "jwt-public-key"
files:
- name: "key.pub"
value_from: "./credentials/key.pub"
value_command: "openssl ec -in ./credentials/key -pubout -out ./credentials/key.pub"
filters:
- "auth"
namespace: "openfaas"
## This value is used by Github to talk to system-github-event
- name: "github-webhook-secret"
files:
- name: "github-webhook-secret"
value_from: "./credentials/github-webhook-secret"
filters:
- "scm_github"
namespace: "openfaas-fn"
# Download from GitHub App on GitHub UI or using GitHub app creation tool
- name: "private-key"
files:
- name: "private-key"
value_from: "./credentials/github-private-key.pem"
filters:
- "scm_github"
namespace: "openfaas-fn"
# OAuth client_secret
- name: "of-client-secret"
files:
- name: "of-client-secret"
value_from: "./credentials/of-client-secret"
filters:
- "auth"
namespace: "openfaas"
## Use Route 53
### Create role and download its secret access key
- name: "route53-credentials-secret"
files:
- name: "secret-access-key"
value_from: "./credentials/route53-secret-access-key"
filters:
- "route53_dns01"
namespace: "cert-manager"
# Used by Buildkit to push images to your registry
- name: "registry-secret"
files:
- name: "config.json"
value_from: "./credentials/config.json"
filters:
- "default"
namespace: "openfaas"
# Used to pull functions / images to nodes by Kubernetes
- name: "registry-pull-secret"
files:
- name: ".dockerconfigjson"
value_from: "./credentials/config.json"
namespace: "openfaas-fn"
filters:
- "default"
type: "kubernetes.io/dockerconfigjson"
# ECR credentials to push to AWS ECR
- name: "aws-ecr-credentials"
files:
- name: "credentials"
value_from: "./credentials/aws-ecr-credentials"
filters:
- "ecr"
namespace: "openfaas"
- name: "aws-ecr-createrepo-credentials"
files:
- name: "credentials"
value_from: "./credentials/aws-ecr-credentials"
filters:
- "ecr"
namespace: "openfaas-fn"
## If not using a HTTPS URL, then set a list of CUSTOMERS
- name: "of-customers"
files:
- name: "of-customers"
value_from: "./credentials/customers"
namespace: "openfaas"
filters:
- "default"
- name: "customers"
files:
- name: "customers"
value_from: "./credentials/customers"
namespace: "openfaas-fn"
filters:
- "default"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment