From 354c0932e910f6e12eb8274ec243fef6a2e36133 Mon Sep 17 00:00:00 2001
From: Jack Lucas <jflucas@research.att.com>
Date: Thu, 5 Apr 2018 15:16:48 +0000
Subject: Supply CM password from secret

Change-Id: I88b0817c0fb2becdf44dd9d9012d19e4d5174c63
Issue-ID: DCAEGEN2-411
Signed-off-by: Jack Lucas <jflucas@research.att.com>
---
 blueprints/k8s-deployment_handler.yaml-template | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/blueprints/k8s-deployment_handler.yaml-template b/blueprints/k8s-deployment_handler.yaml-template
index 3aae790..9d4c5b8 100644
--- a/blueprints/k8s-deployment_handler.yaml-template
+++ b/blueprints/k8s-deployment_handler.yaml-template
@@ -72,3 +72,13 @@ node_templates:
           version: 'v4'
         log_info:
           log_directory: '/opt/app/dh/log'
+    # Inject CM password through environment variable
+    # so that it does not appear in Consul
+    interfaces:
+      cloudify.interfaces.lifecycle:
+        start:
+          inputs:
+            envs:
+              CLOUDIFY_PASSWORD: { get_secret: cmpass }
+              CLOUDIFY_USER: admin
+
-- 
cgit 1.2.3-korg