summaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/charts/policy-distribution/values.yaml
diff options
context:
space:
mode:
authorjhh <jorge.hernandez-herrero@att.com>2020-06-29 12:31:25 -0500
committerJorge Hernandez <jorge.hernandez-herrero@att.com>2020-07-02 18:41:57 +0000
commit0379af76b82b1bb92ccf03d79f3e0d3ccdb762d6 (patch)
tree9dbad8829d15688c289e367a633d1df3f04ca26e /kubernetes/policy/charts/policy-distribution/values.yaml
parentb34e3c934d38900c2137b94d15835621aefcf113 (diff)
[POLICY] add env passwords to api/pap/xacml/dist
keystore and truststore passwords are now stored as secrets to be accessed by environment variables. Issue-ID: POLICY-2575 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I5831f5c7bc040d036c38c321b5cc87848e80ca48
Diffstat (limited to 'kubernetes/policy/charts/policy-distribution/values.yaml')
-rw-r--r--kubernetes/policy/charts/policy-distribution/values.yaml13
1 files changed, 13 insertions, 0 deletions
diff --git a/kubernetes/policy/charts/policy-distribution/values.yaml b/kubernetes/policy/charts/policy-distribution/values.yaml
index 73c9e99e61..dfed7648d4 100644
--- a/kubernetes/policy/charts/policy-distribution/values.yaml
+++ b/kubernetes/policy/charts/policy-distribution/values.yaml
@@ -45,6 +45,16 @@ secrets:
login: '{{ .Values.sdcBe.user }}'
password: '{{ .Values.sdcBe.password }}'
passwordPolicy: required
+ - uid: keystore-password
+ type: password
+ externalSecret: '{{ tpl (default "" .Values.certStores.keyStorePasswordExternalSecret) . }}'
+ password: '{{ .Values.certStores.keyStorePassword }}'
+ passwordPolicy: required
+ - uid: truststore-password
+ type: password
+ externalSecret: '{{ tpl (default "" .Values.certStores.trustStorePasswordExternalSecret) . }}'
+ password: '{{ .Values.certStores.trustStorePassword }}'
+ passwordPolicy: required
#################################################################
# Global configuration defaults.
@@ -78,6 +88,9 @@ papParameters:
sdcBe:
user: policy
password: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
+certStores:
+ keyStorePassword: Pol1cy_0nap
+ trustStorePassword: Pol1cy_0nap
# default number of instances
replicaCount: 1