summaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml
diff options
context:
space:
mode:
authorjhh <jorge.hernandez-herrero@att.com>2020-07-10 13:14:58 -0500
committerjhh <jorge.hernandez-herrero@att.com>2020-07-16 15:19:44 -0500
commit8e9f8bda5bac4ea122f130de6a20fd3e179bb2b2 (patch)
tree74d95c7f22c6a020982c79e9667a77293cbb040a /kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml
parent6f84e8b16401337d93f25833ad6ed8cb3db182d2 (diff)
[POLICY] tomcat security upgrade legacy components
Cert stores password support for APEX component in frankfurt (POLICY-2633). Issue-ID: POLICY-2678 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Ic7bda77f0ecc59109bc0263eeb1d7c630d326128 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Diffstat (limited to 'kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml')
-rw-r--r--kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml9
1 files changed, 6 insertions, 3 deletions
diff --git a/kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml b/kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml
index 35f8aacb40..2e6a08c487 100644
--- a/kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml
+++ b/kubernetes/policy/charts/policy-apex-pdp/templates/statefulset.yaml
@@ -1,5 +1,6 @@
# ============LICENSE_START=======================================================
# Copyright (C) 2018 Ericsson. All rights reserved.
+# Modifications Copyright (C) 2020 Nordix Foundation.
# ================================================================================
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -43,10 +44,8 @@ spec:
- sh
args:
- -c
- - "export TRUSTSTORE_PASSWORD_BASE64=`echo -n ${TRUSTSTORE_PASSWORD} | base64`; cd /config-input && for PFILE in `ls -1`; do envsubst <${PFILE} >/config/${PFILE}; done"
+ - "cd /config-input && for PFILE in `ls -1`; do envsubst <${PFILE} >/config/${PFILE}; done"
env:
- - name: TRUSTSTORE_PASSWORD
- {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "truststore-pass" "key" "password") | indent 10 }}
- name: RESTSERVER_USER
{{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "login") | indent 10 }}
- name: RESTSERVER_PASSWORD
@@ -84,6 +83,10 @@ spec:
env:
- name: REPLICAS
value: "{{ .Values.replicaCount }}"
+ - name: KEYSTORE_PASSWORD
+ {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "keystore-pass" "key" "password") | indent 12 }}
+ - name: TRUSTSTORE_PASSWORD
+ {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "truststore-pass" "key" "password") | indent 12 }}
volumeMounts:
- mountPath: /etc/localtime
name: localtime