Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32679

Helm chart: allow configuring existingSecrets for nuxeo.conf sensitive data

    Details

      Description

      Currently, the credentials for third-party services can only be configured as plain text in the chart values, enfing up in a ConfigMap mounted as a partial nuxeo.conf file volume.
      See for instance the credentials for:

      Let's allow configuring existingSecrets to rely on Kubernetes secrets instead.
      We could have one or several secret volumes, such as in the MongoDB Bitnami chart, then mount this/these volume(s) as partial nuxeo.conf files, as we already do with the chart's ConfigMaps.

      Or, use environment variables set from Kubernetes secret(s).

      We'll have to rework the way we handle nuxeo.conf properties such as "nuxeo.mongodb.server", "elasticsearch.restClient.username", "elasticsearch.restClient.password", etc.

      Also, it seems that we are not handling Kafka SSL authentication.

        Attachments

          Issue Links

            Activity

            Hide
            hudson Jenkins added a comment -

            SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #24
            NXP-32679: Store credentials in Kubernetes Secret (kevinleturc: 5127f923e95b1db4bb175e34ece82895e3e322d9)

            Show
            hudson Jenkins added a comment - SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #24 NXP-32679 : Store credentials in Kubernetes Secret (kevinleturc: 5127f923e95b1db4bb175e34ece82895e3e322d9 )
            Hide
            hudson Jenkins added a comment -

            SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #25
            NXP-32679: Fix wrong path to existingSecret (kevinleturc: b81db4adea71f12c078418c46282411c3bf7b7bb)

            Show
            hudson Jenkins added a comment - SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #25 NXP-32679 : Fix wrong path to existingSecret (kevinleturc: b81db4adea71f12c078418c46282411c3bf7b7bb )
            Hide
            hudson Jenkins added a comment -

            SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #26
            NXP-32679: Fix wrong variable path (kevinleturc: 80317198996ad7feeff821d478ac2c44cc09b928)

            Show
            hudson Jenkins added a comment - SUCCESS: Integrated in nuxeo » nuxeo-helm-chart » master #26 NXP-32679 : Fix wrong variable path (kevinleturc: 80317198996ad7feeff821d478ac2c44cc09b928 )

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: