sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace static S3 credentials with secret-based environment variables in attachments app deployment configuration

Browse Source
This commit is contained in:
emelinda 2026-04-14 15:02:36 +03:00
parent c6ef405ea9
commit d72873dacf
1 changed files with 34 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
apps/attachments/base/deployment.yaml
View File

@ -29,16 +29,43 @@ spec:
value: "10"
- name: API_ADDRESS
value: 0.0.0.0:8000
- name: YANDEX_S3_ACCOUNT_PATH
value: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
- name: YANDEX_S3_ENDPOINT_URL
valueFrom:
secretKeyRef:
name: s3-secret
key: endpoint
- name: YANDEX_S3_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
name: s3-secret
key: login
- name: YANDEX_S3_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
name: s3-secret
key: password
- name: YANDEX_S3_USE_SSL
valueFrom:
secretKeyRef:
name: s3-secret
key: use_ssl
- name: YANDEX_S3_REGION
valueFrom:
secretKeyRef:
name: s3-secret
key: region
- name: YANDEX_S3_VERIFY
valueFrom:
secretKeyRef:
name: s3-secret
key: verify
- name: BUCKET_NAME
value: attachments-storage
valueFrom:
secretKeyRef:
name: s3-secret
key: bucket
- name: DATABASE_SSL_MODE
value: disable
- name: YANDEX_S3_VERIFY
value: "false"
- name: YANDEX_S3_USE_SSL
value: "false"
- name: DATABASE_HOST
value: "postgresql.attachments"
- name: DATABASE_PORT