kommander: Only copy opsportal secret username

mesosphere · Jan 31, 2020 · 0a2615e · 0a2615e
1 parent ac8c0c6
commit 0a2615e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/...grafana/opsportal-credentials-secret.yaml → ...es/grafana/opsportal-username-secret.yaml b/...grafana/opsportal-credentials-secret.yaml → ...es/grafana/opsportal-username-secret.yaml
@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: copy-opsportal-credentials-secret
+  name: copy-{{ .Values.grafana.hooks.secretKeyRef }}
   namespace: {{ .Release.Namespace }}
   labels:
 {{ include "kommander.labels" . | indent 4 }}
@@ -13,7 +13,7 @@ metadata:
 spec:
   template:
     metadata:
-      name: copy-opsportal-credentials-secret
+      name: copy-{{ .Values.grafana.hooks.secretKeyRef }}
     spec:
       containers:
         - name: kubectl
@@ -23,13 +23,13 @@ spec:
           command:
             - /bin/sh
             - -c
-            - kubectl get secret ops-portal-credentials --namespace=kubeaddons --export -o yaml | kubectl apply --namespace={{ .Release.Namespace }} -f -
+            - kubectl create secret generic {{ .Values.grafana.hooks.secretKeyRef }} -n {{ .Release.Namespace }} --from-literal=username=$(kubectl get secret ops-portal-credentials --namespace=kubeaddons --export -o jsonpath="{.data.username}" | base64 --decode)
       restartPolicy: OnFailure
 ---
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: cleanup-opsportal-credentials-secret
+  name: cleanup-{{ .Values.grafana.hooks.secretKeyRef }}
   namespace: {{ .Release.Namespace }}
   labels:
 {{ include "kommander.labels" . | indent 4 }}
@@ -40,7 +40,7 @@ metadata:
 spec:
   template:
     metadata:
-      name: cleanup-opsportal-credentials-secret
+      name: cleanup-{{ .Values.grafana.hooks.secretKeyRef }}
     spec:
       serviceAccountName: {{ .Values.grafana.hooks.kommanderServiceAccount }}
       containers:
@@ -50,6 +50,6 @@ spec:
           command:
             - /bin/sh
             - -c
-            - kubectl delete secret ops-portal-credentials --namespace={{ .Release.Namespace }}
+            - kubectl delete secret {{ .Values.grafana.hooks.secretKeyRef }} --namespace={{ .Release.Namespace }}
       restartPolicy: OnFailure
-{{- end }}
+{{- end }}
diff --git a/stable/kommander/values.yaml b/stable/kommander/values.yaml
@@ -81,7 +81,7 @@ grafana:
   hooks:
     jobName: set-kommander-grafana-home-dashboard
     image: dwdraju/alpine-curl-jq
-    secretKeyRef: ops-portal-credentials
+    secretKeyRef: ops-portal-username
     serviceURL: http://kommander-kubeaddons-grafana.kommander
     # This is the UID of the "Kubernetes / Compute Resources / Clusters" summary dashboard
     homeDashboardUID: efa86fd1d0c121a26444b636a3f509a8