adrien/ansible-role-k8s-storage
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Change Secrets Store deployment
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Adrien Reslinger 2021-04-03 14:32:31 +02:00
parent 838b0de25f
commit cf4bab4db7
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
12 changed files with 24 additions and 444 deletions
Download patch file Download diff file Expand all files Collapse all files

15
bin/update.sh
View file

@ -56,20 +56,5 @@ rm -fr files/digitalocean.old
#https://github.com/juicedata/juicefs-csi-driver ?
SECRETS_STORE_FILE=vars/secrets_store_files_list.yml
echo -e "---\nsecrets_store_files:" > "${SECRETS_STORE_FILE}"
git clone https://github.com/kubernetes-sigs/secrets-store-csi-driver.git
kubernetes-split-yaml secrets-store-csi-driver/deploy/rbac-secretproviderclass.yaml > generated.log
kubernetes-split-yaml secrets-store-csi-driver/deploy/csidriver.yaml >> generated.log
kubernetes-split-yaml secrets-store-csi-driver/deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml >> generated.log
kubernetes-split-yaml secrets-store-csi-driver/deploy/secrets-store-csi-driver.yaml >> generated.log
cat generated.log | while read LIGNE; do if [ $(echo "${LIGNE}" | grep -c ^File) -eq 1 ]; then echo -n "${LIGNE} "; else echo "${LIGNE}"; fi; done | grep ^File | sed 's|.*\(generated/\)\(.*\.yaml\)| - "secrets-store/\2"|' >> "${SECRETS_STORE_FILE}"
mv files/secrets-store{,.old}
mv generated files/secrets-store
sed "/^metadata:$/a \ namespace: csi-secrets-store" -i files/secrets-store/csi-secrets-store-DaemonSet.yaml
rm -fr files/secrets-store.old generated.log secrets-store-csi-driver
curl -s -o files/secrets-store/provider-vault-installer.yaml https://raw.githubusercontent.com/hashicorp/secrets-store-csi-driver-provider-vault/master/deployment/provider-vault-installer.yaml
sed "/^metadata:$/a \ namespace: csi-secrets-store" -i files/secrets-store/provider-vault-installer.yaml
echo ' - "secrets-store/provider-vault-installer.yaml"' >> "${SECRETS_STORE_FILE}"
#https://github.com/Azure/secrets-store-csi-driver-provider-azure
#https://github.com/hashicorp/secrets-store-csi-driver-provider-vault