From 054889d99f69504edc724917fdd01f9be9c0270d Mon Sep 17 00:00:00 2001 From: Connor Dirks Date: Tue, 11 Feb 2025 17:03:15 -0500 Subject: [PATCH] fix: all secrets i kube now --- k8s/deployment.yaml | 21 ++++++++++++++++----- k8s/postgres.yaml | 15 ++++++++++++--- 2 files changed, 28 insertions(+), 8 deletions(-) diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml index 4e6ec12..28894da 100644 --- a/k8s/deployment.yaml +++ b/k8s/deployment.yaml @@ -33,15 +33,27 @@ spec: name: clerk-credentials key: CLERK_SECRET_KEY - name: DATABASE_URL - value: 'postgresql://postgres:postgres_password@postgres.openbooklm.svc.cluster.local:5432/openbooklm' + valueFrom: + secretKeyRef: + name: db-credentials + key: DATABASE_URL - name: REDIS_URL - value: 'redis://redis.openbooklm.svc.cluster.local:6379' + valueFrom: + secretKeyRef: + name: redis-credentials + key: REDIS_URL - name: NODE_ENV value: 'production' - name: NEXT_PUBLIC_API_URL - value: 'http://openbooklm-backend.openbooklm.svc.cluster.local:8000/python/api' + valueFrom: + configMapKeyRef: + name: openbooklm-config + key: API_URL - name: NEXT_PUBLIC_BASE_URL - value: 'http://143.42.127.58' + valueFrom: + configMapKeyRef: + name: openbooklm-config + key: BASE_URL # Add Cerebras API key to frontend - name: CEREBRAS_API_KEY valueFrom: @@ -84,7 +96,6 @@ spec: npx prisma generate pnpm build pnpm start - # Backend container (single definition) - name: backend image: python:3.12-slim diff --git a/k8s/postgres.yaml b/k8s/postgres.yaml index 18ba8a1..aa3e285 100644 --- a/k8s/postgres.yaml +++ b/k8s/postgres.yaml @@ -19,11 +19,20 @@ spec: - containerPort: 5432 env: - name: POSTGRES_DB - value: openbooklm + valueFrom: + secretKeyRef: + name: postgres-credentials + key: POSTGRES_DB - name: POSTGRES_USER - value: postgres + valueFrom: + secretKeyRef: + name: postgres-credentials + key: POSTGRES_USER - name: POSTGRES_PASSWORD - value: postgres_password + valueFrom: + secretKeyRef: + name: postgres-credentials + key: POSTGRES_PASSWORD - name: PGDATA value: /var/lib/postgresql/data/pgdata volumeMounts: