Skip to content

Commit 476406a

Browse files
Merge pull request #40 from CodeForPhilly/develop
Release: v1.1.16
2 parents a6e0c0e + 315ad75 commit 476406a

File tree

3 files changed

+5
-23
lines changed

3 files changed

+5
-23
lines changed

.github/workflows/k8s-deploy.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,7 @@ jobs:
146146
--install \
147147
--namespace "${KUBE_NAMESPACE}" \
148148
--set site.name="${RELEASE_NAME}" \
149-
--set site.title="laddr/${RELEASE_NAME}" \
149+
--set site.title="codeforphilly/${RELEASE_NAME}" \
150150
--set site.image.repository="${DOCKER_REGISTRY}/${DOCKER_REPOSITORY}/${DOCKER_PACKAGE}" \
151151
--set site.image.tag="${RELEASE_NAME}" \
152152
--set ingress.enabled=true \

docs/operations/deploy-secret.md

Lines changed: 1 addition & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,3 @@
11
# Deploy a secret
22

3-
## Prerequisites
4-
5-
Install the `kubeseal` client command on your local workstation from the latest stable release: <https://github.com/bitnami-labs/sealed-secrets/releases>
6-
7-
## Configure public certificate
8-
9-
Place the public URL for the target cluster's sealed secret's certificate into the `SEALED_SECRETS_CERT` environment variable:
10-
11-
```bash
12-
export SEALED_SECRETS_CERT=https://sealed-secrets.live.k8s.phl.io/v1/cert.pem
13-
```
14-
15-
## Encrypt secrets to cluster repository
16-
17-
Create a Kubernetes `Secret` manifest containing one or more key+value pair, and then use the `kubeseal` client to encrypt it into a `SealedSecret` manifest. The target namespace must be provided and will become part of the encryption such that the secret can only be loaded into that namespace. Commit the sealed secret to the cluster's repository under the path `code-for-philly/helm-chart/templates/secrets/` where it will become part of the deployed helm chart:
18-
19-
```bash
20-
kubeseal \
21-
--namespace code-for-philly \
22-
-f mysecret.yaml \
23-
-w ~/Repositories/cfp-live-cluster/code-for-philly/helm-chart/templates/secrets/mysecret.yaml
24-
```
3+
See <https://codeforphilly.github.io/cfp-live-cluster/development/features/sealed-secrets/>
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
<?php
2+
3+
Emergence\CMS\BlogRequestHandler::$accountLevelWrite = 'Staff';

0 commit comments

Comments
 (0)