Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kube commands #245

Merged
merged 9 commits into from
May 30, 2017
Merged

Kube commands #245

merged 9 commits into from
May 30, 2017

Conversation

alexey-igrychev
Copy link
Member

  • kube secret generate command: hidden user typing
  • kube secret file encrypt command
  • kube deploy command
    • create temporary chart
    • copy user chart from .helm
    • decode user secrets if DAPP_SECRET_KEY environment variable exist
      • .helm/secret-values.yaml ;
      • .helm/secret/**/*.
    • generate chart helper
      • dapp_secret_file method to work with secrets files.
    ...
        env:
          name: secret
          value: {{ printf "!binary | \n%s" (tuple "secret_file" . | include "dapp_secret_file" | indent 8) }}
    
    ...
    data:
      tls.crt: {{ tuple (print .Values.global.env "/backend-saml/tls.crt") . | include "dapp_secret_file" | b64enc }}
      tls.key: {{ tuple (print .Values.global.env "/backend-saml/tls.key") . | include "dapp_secret_file" | b64enc }}
    
    • flush hooks jobs
      • helm upgrade --dry-run --debug ;
      • parse output ;
      • ignore jobs with 'helm.sh/resource-policy' == 'keep' annotation.
    • deploy temporary chart
      • create namespace if namespace doesn't exist ;
      • helm upgrade.
    • features
      • user get encrypted data if DAPP_SECRET_KEY environment variable doesn't exist ;
      • user can save temporary chart in dev_mode.
  • kube dismiss command

distorhead and others added 9 commits May 16, 2017 17:49
* create temporary chart
* copy user chart from `.helm`
* decode user secrets if `DAPP_SECRET_KEY` environment variable exist
  * `.helm/secret-values.yaml` ;
  * `.helm/secret/**/*`.
* generate chart helper
  * dapp_secret_file method to work with secrets files.
```
...
    env:
      name: secret
      value: {{ printf "!binary | \n%s" (tuple "secret_file" . | include "dapp_secret_file" | indent 8) }}

...
data:
  tls.crt: {{ tuple (print .Values.global.env "/backend-saml/tls.crt") . | include "dapp_secret_file" | b64enc }}
  tls.key: {{ tuple (print .Values.global.env "/backend-saml/tls.key") . | include "dapp_secret_file" | b64enc }}
```
* flush hooks jobs
  * helm upgrade --dry-run --debug ;
  * parse output ;
  * ignore jobs with `'helm.sh/resource-policy' == 'keep'` annotation.
* deploy temporary chart
  * create namespace if namespace doesn't exist ;
  * helm upgrade.
* features
  * user get encrypted data if `DAPP_SECRET_KEY` environment variable doesn't exist ;
  * user can save temporary chart in `dev_mode`.
@alexey-igrychev alexey-igrychev self-assigned this May 30, 2017
@distorhead distorhead merged commit 67254d0 into werf:master May 30, 2017
@alexey-igrychev alexey-igrychev deleted the helm_commands branch June 1, 2017 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants