Skip to content

Instantly share code, notes, and snippets.

@sparkoo
Created February 17, 2023 12:33
Show Gist options
  • Save sparkoo/9a8698519d9a52bf30391bde48353a64 to your computer and use it in GitHub Desktop.
Save sparkoo/9a8698519d9a52bf30391bde48353a64 to your computer and use it in GitHub Desktop.
SPI AWS deployment patch
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 24289f9..a56abb0 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -59,14 +59,14 @@ spec:
name: config-file
readOnly: true
subPath: config.yaml
- - mountPath: /etc/spi/secret_id
- name: vault-approle
+ - mountPath: /etc/spi/aws/config
+ name: aws-creds
readOnly: true
- subPath: secret_id
- - mountPath: /etc/spi/role_id
- name: vault-approle
+ subPath: config
+ - mountPath: /etc/spi/aws/credentials
+ name: aws-creds
readOnly: true
- subPath: role_id
+ subPath: credentials
- name: kube-rbac-proxy
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
args:
@@ -102,11 +102,11 @@ spec:
items:
- key: config.yaml
path: config.yaml
- - name: vault-approle
+ - name: aws-creds
secret:
- secretName: vault-approle-spi-operator
+ secretName: aws-secretmanager-credentials
items:
- - key: role_id
- path: role_id
- - key: secret_id
- path: secret_id
+ - key: config
+ path: config
+ - key: credentials
+ path: credentials
diff --git a/config/oauth/deployment.yaml b/config/oauth/deployment.yaml
index e4a78e1..ef2a59c 100644
--- a/config/oauth/deployment.yaml
+++ b/config/oauth/deployment.yaml
@@ -58,14 +58,14 @@ spec:
name: config-file
readOnly: true
subPath: config.yaml
- - mountPath: /etc/spi/secret_id
- name: vault-approle
+ - mountPath: /etc/spi/aws/config
+ name: aws-creds
readOnly: true
- subPath: secret_id
- - mountPath: /etc/spi/role_id
- name: vault-approle
+ subPath: config
+ - mountPath: /etc/spi/aws/credentials
+ name: aws-creds
readOnly: true
- subPath: role_id
+ subPath: credentials
- name: kube-rbac-proxy
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
args:
@@ -101,11 +101,11 @@ spec:
items:
- key: config.yaml
path: config.yaml
- - name: vault-approle
+ - name: aws-creds
secret:
- secretName: vault-approle-spi-oauth
+ secretName: aws-secretmanager-credentials
items:
- - key: role_id
- path: role_id
- - key: secret_id
- path: secret_id
+ - key: config
+ path: config
+ - key: credentials
+ path: credentials
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment