feat(atlantis): mount sops age key as volume

tyriis · Dec 27, 2023 · e33dba4 · e33dba4
1 parent 30be24b
commit e33dba4
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/app/external-secret.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/app/external-secret.yaml
@@ -13,7 +13,7 @@ spec:
     name: *name
     creationPolicy: Owner
   data:
-    - secretKey: keys.txt
+    - secretKey: terraform-gworkspace.txt
       remoteRef:
         key: infra/techtales/terraform-gworkspace
         property: age
diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml
@@ -133,3 +133,13 @@ spec:
     readinessProbe:
       periodSeconds: 5
       initialDelaySeconds: 10
+
+    extraVolumes:
+      - name: terraform-gworkspace
+        secret:
+          secretName: terraform-gworkspace
+
+    extraVolumeMounts:
+      - name: terraform-gworkspace
+        mountPath: /home/atlantis/.config/sops/age
+        readOnly: true