diff --git a/components/ra/approved-experiments/base/deployment.yaml b/components/ra/approved-experiments/base/deployment.yaml index 1def4c5e..079a2b41 100644 --- a/components/ra/approved-experiments/base/deployment.yaml +++ b/components/ra/approved-experiments/base/deployment.yaml @@ -22,6 +22,9 @@ spec: env: - name: FILTERS_PATH value: /app/filters.json + envFrom: + - secretRef: + name: approved-experiments volumeMounts: - name: common-views mountPath: "/app/build/common-views" diff --git a/components/ra/approved-experiments/overlays/dev/deployment.yaml b/components/ra/approved-experiments/overlays/dev/deployment.yaml index 4343a85d..10855b77 100644 --- a/components/ra/approved-experiments/overlays/dev/deployment.yaml +++ b/components/ra/approved-experiments/overlays/dev/deployment.yaml @@ -8,6 +8,3 @@ spec: containers: - name: approved-experiments image: ghcr.io/isisbusapps/approved-experiments@sha256:9e63b784fd614f69cefa3a9ad3d261f460b8ffd6e1b5d912f09df5e96a37cf8d - envFrom: - - secretRef: - name: approved-experiments diff --git a/components/ra/approved-experiments/overlays/prod/deployment.yaml b/components/ra/approved-experiments/overlays/prod/deployment.yaml index a02db6de..de91de78 100644 --- a/components/ra/approved-experiments/overlays/prod/deployment.yaml +++ b/components/ra/approved-experiments/overlays/prod/deployment.yaml @@ -8,14 +8,3 @@ spec: containers: - name: approved-experiments image: ghcr.io/isisbusapps/approved-experiments:1.8.0 - env: - - name: CONFIG_PATH - value: /FBS/.env - volumeMounts: - - name: env-config - mountPath: "/FBS" - readOnly: true - volumes: - - name: env-config - secret: - secretName: approved-experiments-environment diff --git a/components/ra/approved-experiments/overlays/prod/kustomization.yaml b/components/ra/approved-experiments/overlays/prod/kustomization.yaml index 433e34ab..638c8b6d 100644 --- a/components/ra/approved-experiments/overlays/prod/kustomization.yaml +++ b/components/ra/approved-experiments/overlays/prod/kustomization.yaml @@ -3,6 +3,7 @@ kind: Kustomization resources: - ../../base + - static-secret.yaml namespace: apps diff --git a/components/ra/approved-experiments/overlays/prod/static-secret.yaml b/components/ra/approved-experiments/overlays/prod/static-secret.yaml new file mode 100644 index 00000000..de1b86e8 --- /dev/null +++ b/components/ra/approved-experiments/overlays/prod/static-secret.yaml @@ -0,0 +1,16 @@ +apiVersion: secrets.hashicorp.com/v1beta1 +kind: VaultStaticSecret +metadata: + name: approved-experiments + namespace: apps +spec: + type: kv-v2 + refreshAfter: 30s + vaultAuthRef: static-auth + + mount: reviews_and_allocations + path: prod/approved-experiments + destination: + name: approved-experiments + overwrite: true + create: true