From eb2936f48b3e7f43b2262d69b8d551446995c7fc Mon Sep 17 00:00:00 2001 From: Anthony LC Date: Fri, 24 May 2024 12:36:14 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=90(helm)=20add=20djangoSuperUserEmail?= =?UTF-8?q?=20secret?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit To fit with the production environment, we need to add the djangoSuperUserEmail secret to the staging environment. --- src/helm/env.d/staging/secrets.enc.yaml | 63 ++++++++++--------- .../env.d/staging/values.impress.yaml.gotmpl | 6 +- 2 files changed, 37 insertions(+), 32 deletions(-) diff --git a/src/helm/env.d/staging/secrets.enc.yaml b/src/helm/env.d/staging/secrets.enc.yaml index ae0c612c..5cb1d4d6 100644 --- a/src/helm/env.d/staging/secrets.enc.yaml +++ b/src/helm/env.d/staging/secrets.enc.yaml @@ -1,8 +1,9 @@ -djangoSuperUserPass: ENC[AES256_GCM,data:Ej4rSd73dYxRJ1jU9A==,iv:pj4+e3TneNw6kkQA0U6HOUlnJBfAzNSBoBBDLmxIJe4=,tag:GdEwF6/UHhH6gj+nEDmreA==,type:str] -djangoSecretKey: ENC[AES256_GCM,data:gW2ajtgZwPf+se4K0f2SyVW2tSl2bxKLn5EC5SNX5f/QZOZkop7s959GG/eeADkgwRE=,iv:CbcuCgl/Nadrfxy0gkDIMJ6dmx95BoQHn43iLxrmSDg=,tag:a3z8ilda0q4cA+EtxFb/tA==,type:str] +djangoSuperUserEmail: ENC[AES256_GCM,data:hi+ZWcENFGKlU84LR/yli0A=,iv:Zgfz+8x1PLhDL0rHd4idH21hPmAslw8mWXzknC5i9MM=,tag:533v4b/1y1mDD7C2nBqGsw==,type:str] +djangoSuperUserPass: ENC[AES256_GCM,data:AAsV3FuAZJ5QzIlyOw==,iv:YfeWOEqgZHQxmI6IfPOWHPRoMyaej6SJH7OUgj8yDWQ=,tag:VXJ/VhzcqE/WarwjPxzIvg==,type:str] +djangoSecretKey: ENC[AES256_GCM,data:/JVAyc96seMRTiyGEw/0hSSacKfFC4eQXJGo+Nu5ngAicrnHJqPa0fq9pJq63kLfLgU=,iv:gdMfxI8HrzmdcdV4C+VfgxikT/O6SptQFmkRhikS52U=,tag:O7xSA14bQtcxNb8sZwZh9g==,type:str] oidc: - clientId: ENC[AES256_GCM,data:ptPBMb4Zcp1Wk4HqNebVsgvaBD2twGuaCy3BNsxYguZaUygk,iv:dBbTRe/RpDKLsKwQj008D8M7Usu28DI/c6eumaP+fb8=,tag:tPO+NjzNg4j7q1urkVtK6w==,type:str] - clientSecret: ENC[AES256_GCM,data:vSrRLcV2cFKuTbUr3o837SubtNm8uYNMVc/0ZD3AG0OzvD4uVOSNRzfvfK68X0VOeUSw8PFddFVwmVGTe5XauQ==,iv:2DlSDHpdq/PtDL3D+0WoZuA/tfKigZdzrQTLibdaaQQ=,tag:kNz7QNHaF2Fb32ZvV7QlFQ==,type:str] + clientId: ENC[AES256_GCM,data:qFMt3wOxi2N/SLbHsw3nlqYjXCkcW8Dk1tJ1GexM9nlnhuLO,iv:bQpKzMNZv2Kcm6blDWJwbKiSjUAFjVwEUalLqgylaTY=,tag:Wm4NioIktA+p9XWldEWDbw==,type:str] + clientSecret: ENC[AES256_GCM,data:MiYBGSyuJDcf1f8//7p6L1SIY/4f0f7lKA7OLcbojaZ28q8hh8cr0fPU9s+ftfQe4Ztxg/0wSX/QSUEP4DtiXg==,iv:HrbljXaj2Ki6ElINPoVvaZqn4gyThBLT4SKQDJ0oJrA=,tag:N5i1vqqxlMX7nOb2ymGFHg==,type:str] sops: kms: [] gcp_kms: [] @@ -12,50 +13,50 @@ sops: - recipient: age15fyxdwmg5mvldtqqus87xspuws2u0cpvwheehrtvkexj4tnsqqysw6re2x enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3Smh0VnlDZHlVMEUvTGVY - aFFOVXpsSVZTcWk5N1pOMWFlQ3FFT2RiVkdNCjYraHhMY2FvU3AydTVhS3l3NGxx - VWx3WGFEOVYyT0NkMFZKd2hSQUNOSFkKLS0tIDB4eXJLTDd2ZS91b0YxejV4QkJ4 - c2kyU254cUtZZEhkZUY5RGN4a2V3WVUKl3/j8mv0as9Q6TXJrMIU5ctyQzxD5YwP - MByw6rRAx5teDgQNG3U+85ru1k4oxWvOqF0DyZWWko1O8iCqdXhsOA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreXo5bDRITnYyVE8wODBC + RkVsRlc1V1dZZHltYWg1UTRBcjAwK3pJSkFvCmlmczNPMVVsU1lSRHhTWStiZEN6 + ZXFhcFcvaXVEMHJtWXdWV3lDUlhaR3MKLS0tIFZ1R0hHVEttUWY3T1pHTUwrU2Zn + TFJzd2ZHZFFmSFdwY0YyYmd6dnFRQkUKJH+7TZtZvl/L6vRq9gwhDhWj7gmcq8Zn + WlYcRcrqNDBweDwSlER80DhF0xuS0Ero0bh9cr/HiFPwZZ6RxUJoHA== -----END AGE ENCRYPTED FILE----- - recipient: age16hnlml8yv4ynwy0seer57g8qww075crd0g7nsundz3pj4wk7m3vqftszg7 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTEIxRGdyRVNmbW1WRVRw - NWd2ZG00ZWVDeDA0bk11UUI2Y25FZldMTDNnCnc3VnZEVE1rdjc4VnZpeTZTNmM0 - UEplT3hrUGFCT0lIQUROY1g3U2JKZ28KLS0tIEhwZlZxNm1aaFljK2p6NFJDNkIz - cS9vVjdsV3J0b0V1YS85T0NHK3ZpdUEK8FErAEUY9gL7zo3khxkOtY4dQOIum8uv - zo3q0k5fN0lCzEOMf3JtNEcUWfVeiEbOXfYCN5/GvItrahLM14VDsA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UU9nenMwZDlrTkJOZzZu + dmVvVWlBKy9wTVVlRFlybzJldDJoZ0xjOTBvClIyL3M0TTFtL1UxaitnZUNGZXlO + ZVRYVDBsYXphaTZ4TmdGbXJFOHpMMzQKLS0tIFdJSkk4NnZMYTJtSE5sMVoyYU9Z + bjlkVG1QQnVXUXhuK2JXN2ZnWmtQeE0KGbOeGa2hIPrrDcfQ64GEjTR0ZeCyIIZK + 2bxSivdOw+1I96+OOIqjvGaa12FfPI58uizldaI0+hSY77vT4sr/7Q== -----END AGE ENCRYPTED FILE----- - recipient: age1plkp8td6zzfcavjusmsfrlk54t9vn8jjxm8zaz7cmnr7kzl2nfnsd54hwg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSkRja3JFV0MrZjA1bDRG - MUY5TEI4SVgzQzFPUUs5ZExqTUlJN0ZYMEhVCnNxekthSEcxWnVPZ3NiTFJQMGxm - ZUlMN3NTTTMvMkNwSFM4aTlERFhVRnMKLS0tIFBObjlDbzkyVWcwcXFOSkwvUW1w - eGxFanpjNUUrR1BXV3BTTU9NdXNhZDAKZdNWLBukO8Bw+JFbEsPJqJzQuIgeXf2c - gWXX5K5Kq23YfBYJT0PjF9iR0k8JyB9gNpdkiYy6ohqhFkMIySFs7w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxVnhHdmpjK2hsd2d4Mk1Y + UlE4NHdjNHAwbGM4K0ZOVFkzd0JiOTNzYW00Ck9sVnoyRXJFa2F1SnVxemV3b016 + MzJzZUNrVVNPYlhkM2hDK0ZiMEpCNmcKLS0tIEdseGhqZ1dLeGh0TE1tSDRldWVk + M0hDVGJaN2Jmc004TFYzSGJOTEVDNVUKB3TenK4RxkoGRAzX2AlcbyCddGfHte3N + mSEUuy0ig2tlF0eL0yA5GR8BIfGEEMQS6tJCliUsKwC6M233mkD0tQ== -----END AGE ENCRYPTED FILE----- - recipient: age12g6f5fse25tgrwweleh4jls3qs52hey2edh759smulwmk5lnzadslu2cp3 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0T3BZWlJtTkhjVHVzTGo5 - ZTJUTlZoalI1RUI2cDBSbUd3UGxwKzFCeDBjCmdQVTVQU0c3MHB6OVBydENIbE9P - RTMzditXT1A5VHNpdmFDWkRQMmdETjgKLS0tIFJyc0ZoL2ZXS2hYb0ZNcFl2TjZV - NVhrT0M1NFpKODlUZDNTNW5QdkdtaFUKnj6wNku3j6l8hCWhZHV6rq+4LNE4FYdv - xIm1og9vuvL6CSQGRkmLY0ZgEVlhSZ20wxDG+hvernlF/u17XEDdqg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMdHFEeVUyL3d4WVdNaTJ1 + SU9PaG1vSG5YUXpobFhCbnhhNlpwWGZaaldvCkFrWTBSNWdWOVlBeU1sQWUyTlFy + QVk5QjJ2UmNhRmVVMFgxZ1lpdzNKVmMKLS0tIHF5VjVJcVV3Zk5uUFhIZEljMzAx + SUNyejQ4alppMC9tanRFeCtBcndHaTAKfBO4hj5T/bdwbvK8hbEvcAcjuLA7oxg9 + eSWcPZp27LhXMaEwnDlFnLDFEMic/WU6HQBYcSCpt+n98Y4z9T1q2Q== -----END AGE ENCRYPTED FILE----- - recipient: age1qy04neuzwpasmvljqrcvhwnf0kz5cpyteze38c8avp0czewskasszv9pyw enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZk96VlVNK2ZKK0RLUnVY - NVdpKzUyODl5SXpxbTBrUDYyd2o2b21pc0Q0CnVUWmlGa2c4T011U3VVcW9hOEc4 - azNJTEpzZ0g0U2FuN3V4allyaG1YdDAKLS0tIGhHYWJkOFhCczB4V01mbjNZcGtm - Yk01dXJybWJOSnR1c28wMjVsRk40MDQKr6q2Qbb5Qi8PKUJ3DRVCDfUMKXDb68nK - QyWEBL4YsZco1rnPtX7xtzKiut15RBx63dG1C7NsiqFg5tD56N3NjA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4UGxFUlhiVDNIRTVhdjNO + ZEZLcDhrUjNNOGZ6a0lvcFRQa0pwMjYyL0hnCmIyQ2tTVXRocFRvNmVkVENXVUEx + YnpySzF5RXA1djlMSlhhcjRVdlliTmsKLS0tIGtwb2x1cmlKMTkzTUxENi9NK2ZI + b2dKNENuQmorTXZtdVhLNGo5UVBPZzgK1gaZkRtxV+BVO1lX25XXAonvyrK7V48d + oAHG/v2OyD7dJJKYmHyIcrWLCRplgQb2r7t6gLSr0llf9rbWQhmkiw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-05-08T10:44:25Z" - mac: ENC[AES256_GCM,data:bcS2cFxaclYLgJ1o5qxpemhXQNZzrsMs/Z1mfbBRsnvdOEa3aWehmN9JGgdVIjNdpdAxB/MX5DIViCDuqeuxg/EfzajEhB5k9a1H7pWLctb7dDAwq1Rla/FiuwISauNFoEQC1da8L34vVErLYHMyST5TI0gd8PB9WS2Lac6wnXU=,iv:5qlh8iGjA/qH/4R5bL5sx91CemDHGddc0D88DrDLXoo=,tag:5R26MV0ohoJ/0N3M7bMQzg==,type:str] + lastmodified: "2024-05-24T10:35:08Z" + mac: ENC[AES256_GCM,data:A6YUQM3N2DwqjPILfPT4Nc6vlpu52c8qa2+5OJABL2cz6jzvhO2e/0CzJl7P/bOYhlYMpHHeCTX3jk2DMyppuDJsqBN5ouw2oDe/S8WOC9xaKWRxqlgkD93K8ZCYGad9sS58BJN3upBEjln+yu/2trihOsEi6pCQkB/Jrmbe+Qo=,iv:SRgaH9W6FApY8qf8HGfdMpiErx+FOnJJBAd/op93Bxg=,tag:IlDeS9weVroGKhOvU3xwAw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1 diff --git a/src/helm/env.d/staging/values.impress.yaml.gotmpl b/src/helm/env.d/staging/values.impress.yaml.gotmpl index 12787441..4773963f 100644 --- a/src/helm/env.d/staging/values.impress.yaml.gotmpl +++ b/src/helm/env.d/staging/values.impress.yaml.gotmpl @@ -16,6 +16,10 @@ backend: name: backend key: DJANGO_SECRET_KEY DJANGO_SETTINGS_MODULE: impress.settings + DJANGO_SUPERUSER_EMAIL: + secretKeyRef: + name: backend + key: DJANGO_SUPERUSER_EMAIL DJANGO_SUPERUSER_PASSWORD: secretKeyRef: name: backend @@ -104,7 +108,7 @@ backend: - "/bin/sh" - "-c" - | - python manage.py createsuperuser --email admin@staging.com --password $DJANGO_SUPERUSER_PASSWORD + python manage.py createsuperuser --email $DJANGO_SUPERUSER_EMAIL --password $DJANGO_SUPERUSER_PASSWORD restartPolicy: Never frontend: