Update kubernetes deployment to handle certs

gcash · Dec 20, 2024 · 317f853 · 317f853
1 parent fb19ae0
commit 317f853
Show file tree

Hide file tree

Showing 2 changed files with 45 additions and 22 deletions.
diff --git a/kube/bchd-deployment.yml b/kube/bchd-deployment.yml
@@ -4,7 +4,7 @@ metadata:
   namespace: default
   labels:
     service: bchd
-    version: 0.18.0
+    version: 0.20.0
   name: bchd
 spec:
   strategy:
@@ -19,31 +19,52 @@ spec:
         service: bchd
     spec:
       containers:
-      - env:
-        - name: BCHD_RPC_USER
-          valueFrom:
-            secretKeyRef:
-              name: bchd
-              key: rpcuser
-        - name: BCHD_RPC_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: bchd
-              key: rpcpass
-        image: zquestz/bchd:latest
-        command: ["bchd"]
-        args: ["-u", "$(BCHD_RPC_USER)", "-P", "$(BCHD_RPC_PASSWORD)", "--addrindex", "--txindex", "-b", "/data", "-C", "/data/bchd.conf"]
-        name: bchd
-        volumeMounts:
-          - mountPath: /data
-            name: bchd-data
-        resources:
-          requests:
-            memory: "3Gi"
+        - env:
+            - name: BCHD_RPC_USER
+              valueFrom:
+                secretKeyRef:
+                  name: bchd
+                  key: rpcuser
+            - name: BCHD_RPC_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: bchd
+                  key: rpcpass
+          image: zquestz/bchd:latest
+          command: ["bchd"]
+          args:
+            [
+              "-u",
+              "$(BCHD_RPC_USER)",
+              "-P",
+              "$(BCHD_RPC_PASSWORD)",
+              "--addrindex",
+              "--txindex",
+              "-b",
+              "/data",
+              "-C",
+              "/data/bchd.conf",
+            ]
+          name: bchd
+          volumeMounts:
+            - mountPath: /data
+              name: bchd-data
+            - name: bchd-config
+              mountPath: /data/rpc.cert
+              subPath: cert
+            - name: bchd-config
+              mountPath: /data/rpc.key
+              subPath: key
+          resources:
+            requests:
+              memory: "3Gi"
       restartPolicy: Always
       terminationGracePeriodSeconds: 600
       volumes:
         - name: bchd-data
           gcePersistentDisk:
             pdName: bchd-data
             fsType: ext4
+        - name: bchd-config
+          secret:
+            secretName: "bchd"
diff --git a/kube/bchd-secrets.yml b/kube/bchd-secrets.yml
@@ -6,3 +6,5 @@ type: Opaque
 data:
   rpcuser: YWRtaW4=
   rpcpass: aXRvbGR5b3V0b2NoYW5nZXRoaXM=
+  cert: YOUR_CERT
+  key: YOUR_KEY