Remove minio secrets

REBELinBLUE · Dec 1, 2019 · 3335214 · 3335214
1 parent e566d6a
commit 3335214
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 17 deletions.
diff --git a/deployments/infra/minio/minio.yaml b/deployments/infra/minio/minio.yaml
@@ -32,8 +32,6 @@ metadata:
   annotations:
     kubernetes.io/tls-acme: "true"
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    #ingress.kubernetes.io/auth-type: basic
-    #ingress.kubernetes.io/auth-secret: dashboards-auth
 spec:
   rules:
     - host: s3.cluster.rebelinblue.com
@@ -47,19 +45,6 @@ spec:
     - hosts:
         - s3.cluster.rebelinblue.com
       secretName: minio-tls
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: minio
-  namespace: infra
-  labels:
-    app: minio
-type: Opaque
-data:
-  accesskey: "QUtJQUlPU0ZPRE5ON0VYQU1QTEU="
-  secretkey: "d0phbHJYVXRuRkVNSS9LN01ERU5HL2JQeFJmaUNZRVhBTVBMRUtFWQ=="
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

diff --git a/setup/.env.sample b/setup/.env.sample
@@ -14,4 +14,7 @@ VAULT_UNSEAL_KEY_3=""
 VAULT_UNSEAL_KEY_4=""
 VAULT_UNSEAL_KEY_5=""
 
-SLACK_URL=""
+SLACK_URL=""
+
+S3_ACCESS_KEY=""
+S3_SECRET_KEY=""
diff --git a/setup/bin/bootstrap-secrets.sh b/setup/bin/bootstrap-secrets.sh
@@ -20,4 +20,8 @@ kubectl -n vault create secret generic vault-unseal-keys --from-literal="VAULT_U
                                                          --from-literal="VAULT_UNSEAL_KEY_5=$VAULT_UNSEAL_KEY_5"
 
 kubectl -n flux create secret generic fluxcloud --from-literal="slack_url=$SLACK_URL"
-kubectl -n monitoring create secret generic alertmanager --from-literal="slack_url=$SLACK_URL"
+kubectl -n monitoring create secret generic alertmanager --from-literal="slack_url=$SLACK_URL"
+
+
+kubectl -n infra create secret generic minio --from-literal="accesskey=$S3_ACCESS_KEY" \
+                                             --from-literal="secretkey=$S3_SECRET_KEY"