feat(k8s): use secret as shared source for admin private key

2024-03-28 15:53:40 +01:00
parent 35717429a2
commit 7de166765b
18 changed files with 351 additions and 60 deletions
--- a/misc/k8s/kustomization/base/resources/bouncer-admin/files/config.yml
+++ b/misc/k8s/kustomization/base/resources/bouncer-admin/files/config.yml
@ -20,7 +20,7 @@ admin:
    debug: false
  auth:
    issuer: http://127.0.0.1:8081
-    privateKey: /etc/bouncer/admin-key.json
+    privateKey: /var/lib/bouncer/admin-key.json
  metrics:
    enabled: true
    endpoint: /.bouncer/metrics
@ -44,3 +44,4 @@ integrations:
    enabled: true
    writerTokenSecret: ${BOUNCER_WRITER_TOKEN_SECRET}
    readerTokenSecret: ${BOUNCER_READER_TOKEN_SECRET}
+    privateKeySecret: ${BOUNCER_PRIVATE_KEY_SECRET}