fix: all secrets i kube now

open-biz · Feb 11, 2025 · 054889d · 054889d
1 parent 4161310
commit 054889d
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 8 deletions.
diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
@@ -33,15 +33,27 @@ spec:
                   name: clerk-credentials
                   key: CLERK_SECRET_KEY
             - name: DATABASE_URL
-              value: 'postgresql://postgres:[email protected]:5432/openbooklm'
+              valueFrom:
+                secretKeyRef:
+                  name: db-credentials
+                  key: DATABASE_URL
             - name: REDIS_URL
-              value: 'redis://redis.openbooklm.svc.cluster.local:6379'
+              valueFrom:
+                secretKeyRef:
+                  name: redis-credentials
+                  key: REDIS_URL
             - name: NODE_ENV
               value: 'production'
             - name: NEXT_PUBLIC_API_URL
-              value: 'http://openbooklm-backend.openbooklm.svc.cluster.local:8000/python/api'
+              valueFrom:
+                configMapKeyRef:
+                  name: openbooklm-config
+                  key: API_URL
             - name: NEXT_PUBLIC_BASE_URL
-              value: 'http://143.42.127.58'
+              valueFrom:
+                configMapKeyRef:
+                  name: openbooklm-config
+                  key: BASE_URL
             # Add Cerebras API key to frontend
             - name: CEREBRAS_API_KEY
               valueFrom:
@@ -84,7 +96,6 @@ spec:
               npx prisma generate
               pnpm build
               pnpm start
-
         # Backend container (single definition)
         - name: backend
           image: python:3.12-slim

diff --git a/k8s/postgres.yaml b/k8s/postgres.yaml
@@ -19,11 +19,20 @@ spec:
             - containerPort: 5432
           env:
             - name: POSTGRES_DB
-              value: openbooklm
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: POSTGRES_DB
             - name: POSTGRES_USER
-              value: postgres
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: POSTGRES_USER
             - name: POSTGRES_PASSWORD
-              value: postgres_password
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: POSTGRES_PASSWORD
             - name: PGDATA
               value: /var/lib/postgresql/data/pgdata
           volumeMounts: