From 14fb2e281237b6f2f8386ef18b035832919a64d1 Mon Sep 17 00:00:00 2001 From: Denis Patrakeev Date: Mon, 3 Mar 2025 18:21:18 +0300 Subject: [PATCH] [hotfix] fix secret for redis_exporter (!76) Co-authored-by: denis.patrakeev Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/76 --- .../argocd-apps-redis-exporter-secret.yaml | 16 ++++++++++++++++ .../redis-exporter/values-ovveride.yaml | 7 ++++--- 2 files changed, 20 insertions(+), 3 deletions(-) create mode 100644 clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/argocd-apps-redis-exporter-secret.yaml diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/argocd-apps-redis-exporter-secret.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/argocd-apps-redis-exporter-secret.yaml new file mode 100644 index 0000000..8e2b65e --- /dev/null +++ b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/argocd-apps-redis-exporter-secret.yaml @@ -0,0 +1,16 @@ +--- +apiVersion: v1 +kind: Secret +metadata: + labels: + app.kubernetes.io/managed-by: argocd + name: redis-exporter-secret + namespace: cloud-prod + annotations: + vault.security.banzaicloud.io/vault-addr: "https://vault.avroid.tech" + vault.security.banzaicloud.io/vault-role: "cloud-prod" + vault.security.banzaicloud.io/vault-skip-verify: "false" + vault.security.banzaicloud.io/vault-path: "avroid-office" +type: Opaque +data: + REDIS_PASSWORD: dmF1bHQ6dGVhbS1kZXZvcHMvZGF0YS9zZXJ2aWNlcy9tb25pdG9yaW5nL2s4cy9jbG91ZC1wcm9kL3JlZGlzLWV4cG9ydGVyI1JFRElTX1BBU1NXT1JECg== diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-ovveride.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-ovveride.yaml index 288e763..2fb22d6 100644 --- a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-ovveride.yaml +++ b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-ovveride.yaml @@ -28,10 +28,11 @@ annotations: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" - vault.security.banzaicloud.io/vault-env-from-path: "team-devops/data/services/monitoring/k8s/cloud-prod/redis-exporter" auth: # Use password authentication enabled: true - # Redis password (when not stored in a secret) - redisPassword: $REDIS_PASSWORD + # Use existing secret (ignores redisPassword) + secret: + name: "redis-exporter-secret" + key: "REDIS_PASSWORD"