fix: load secrets in data-sync cron containers (#3165)

fix: load secrets in data-sync cron containers
artsy · Dec 11, 2024 · 5ba5c15 · 5ba5c15
2 parents 9bd507c + c24000e
commit 5ba5c15
Show file tree

Hide file tree

Showing 2 changed files with 50 additions and 0 deletions.
diff --git a/hokusai/production.yml b/hokusai/production.yml
@@ -305,6 +305,10 @@ spec:
             - name: secrets
               mountPath: /secrets
               readOnly: true
+            - name: scripts
+              mountPath: /usr/local/bin/load_secrets_and_run.sh
+              subPath: load_secrets_and_run.sh
+            command: ["/usr/local/bin/load_secrets_and_run.sh"]
             args:
             - sh
             - ./export-db.sh
@@ -323,6 +327,27 @@ spec:
           volumes:
           - name: secrets
             emptyDir: {}
+          - name: scripts
+            configMap:
+              name: positron-scripts
+              defaultMode: 0755
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: positron-scripts
+  namespace: default
+data:
+  load_secrets_and_run.sh: |
+    #!/bin/bash
+    CMD="$@"
+    if [ ! -z "$SECRETS_FILE" ]
+    then
+      echo "SECRETS_FILE env var is defined. Sourcing secrets file..."
+      source "$SECRETS_FILE"
+    fi
+    echo "Running command: $CMD"
+    $CMD
 ---
 apiVersion: v1
 kind: Service

diff --git a/hokusai/staging.yml b/hokusai/staging.yml
@@ -306,6 +306,10 @@ spec:
             - name: secrets
               mountPath: /secrets
               readOnly: true
+            - name: scripts
+              mountPath: /usr/local/bin/load_secrets_and_run.sh
+              subPath: load_secrets_and_run.sh
+            command: ["/usr/local/bin/load_secrets_and_run.sh"]
             args:
             - sh
             - ./import-db.sh
@@ -324,6 +328,27 @@ spec:
           volumes:
           - name: secrets
             emptyDir: {}
+          - name: scripts
+            configMap:
+              name: positron-scripts
+              defaultMode: 0755
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: positron-scripts
+  namespace: default
+data:
+  load_secrets_and_run.sh: |
+    #!/bin/bash
+    CMD="$@"
+    if [ ! -z "$SECRETS_FILE" ]
+    then
+      echo "SECRETS_FILE env var is defined. Sourcing secrets file..."
+      source "$SECRETS_FILE"
+    fi
+    echo "Running command: $CMD"
+    $CMD
 ---
 apiVersion: v1
 kind: Service