feat(gcp-sa): gcp sa via file (#439)

basedosdados · Oct 16, 2023 · 398be0b · 398be0b
1 parent 0bb7806
commit 398be0b
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 0 deletions.
diff --git a/.github/workflows/cd-dev.yaml b/.github/workflows/cd-dev.yaml
@@ -77,6 +77,7 @@ jobs:
       - name: Write values.yaml file
         run: |
           cat << EOF > values.yaml
+          environment: "development"
           api:
             name: "api-development"
             image:

diff --git a/.github/workflows/cd-prod.yaml b/.github/workflows/cd-prod.yaml
@@ -51,6 +51,7 @@ jobs:
       - name: Write values.yaml file
         run: |
           cat << EOF > values.yaml
+          environment: "prod"
           api:
             name: "api-prod"
             image:

diff --git a/.github/workflows/cd-staging.yaml b/.github/workflows/cd-staging.yaml
@@ -51,6 +51,7 @@ jobs:
       - name: Write values.yaml file
         run: |
           cat << EOF > values.yaml
+          environment: "staging"
           api:
             name: "api-staging"
             image:

diff --git a/charts/basedosdados-api/templates/deployment.yaml b/charts/basedosdados-api/templates/deployment.yaml
@@ -30,6 +30,10 @@ spec:
         - name: basedosdados-api
           image: "{{ .Values.api.image.name }}:{{ .Values.api.image.tag }}"
           imagePullPolicy: {{ .Values.api.image.pullPolicy }}
+          volumeMounts:
+            - mountPath: /var/secrets/
+              name: gcp-sa
+              readOnly: true
           ports:
             - name: http
               containerPort: 80
@@ -79,3 +83,10 @@ spec:
             timeoutSeconds: 5
             failureThreshold: 5
             successThreshold: 1
+      volumes:
+        - name: gcp-sa
+          secret:
+            secretName: api-{{ .Values.environment }}-secrets
+            items:
+              - key: GCP_SA
+                path: gcp-sa.json