From f66be53eb6854cc6f5be5f0d4b7bf425365e2623 Mon Sep 17 00:00:00 2001 From: Philip Haupt <“der.mad.mob@gmail.com”> Date: Mon, 14 Apr 2025 00:22:35 +0200 Subject: [PATCH] secrets --- velero/main.yaml | 27 ++++----------------------- velero/src/values.yaml | 10 +++++----- 2 files changed, 9 insertions(+), 28 deletions(-) diff --git a/velero/main.yaml b/velero/main.yaml index 4595301..a876c64 100644 --- a/velero/main.yaml +++ b/velero/main.yaml @@ -3450,19 +3450,6 @@ subjects: namespace: velero --- apiVersion: v1 -data: null -kind: Secret -metadata: - labels: - app.kubernetes.io/instance: velero - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: velero - helm.sh/chart: velero-7.0.0 - name: velero - namespace: velero -type: Opaque ---- -apiVersion: v1 kind: Service metadata: labels: @@ -3505,7 +3492,6 @@ spec: template: metadata: annotations: - checksum/secret: b9754ca4d83dab2f2e3ce5d2f763c69ed92c2298dc2737084680716557250af3 prometheus.io/path: /metrics prometheus.io/port: "8085" prometheus.io/scrape: "true" @@ -3588,7 +3574,7 @@ spec: volumes: - name: cloud-credentials secret: - secretName: velero + secretName: secret-s3 - emptyDir: {} name: plugins - emptyDir: {} @@ -3611,7 +3597,6 @@ spec: template: metadata: annotations: - checksum/secret: b9754ca4d83dab2f2e3ce5d2f763c69ed92c2298dc2737084680716557250af3 prometheus.io/path: /metrics prometheus.io/port: "8085" prometheus.io/scrape: "true" @@ -3671,7 +3656,7 @@ spec: volumes: - name: cloud-credentials secret: - secretName: velero + secretName: secret-s3 - hostPath: path: /var/lib/kubelet/pods name: host-pods @@ -3744,9 +3729,7 @@ spec: region: home-nas s3ForcePathStyle: "true" s3Url: http://s3.home:9000 - credential: - key: nas-s3 - name: secret-s3 + credential: null default: true objectStorage: bucket: kubernetes @@ -3765,7 +3748,5 @@ metadata: spec: config: region: home-nas - credential: - key: nas-s3 - name: secret-s3 + credential: null provider: aws diff --git a/velero/src/values.yaml b/velero/src/values.yaml index dd47653..6f1b083 100644 --- a/velero/src/values.yaml +++ b/velero/src/values.yaml @@ -337,9 +337,9 @@ configuration: accessMode: ReadWrite credential: # name of the secret used by this backupStorageLocation. - name: secret-s3 + name: # name of key that contains the secret data to be used. - key: nas-s3 + key: # Additional provider-specific configuration. See link above # for details of required/optional fields for your provider. config: @@ -371,9 +371,9 @@ configuration: provider: aws credential: # name of the secret used by this volumeSnapshotLocation. - name: secret-s3 + name: # name of key that contains the secret data to be used. - key: nas-s3 + key: # Additional provider-specific configuration. See link above # for details of required/optional fields for your provider. config: @@ -508,7 +508,7 @@ credentials: name: # Name of a pre-existing secret (if any) in the Velero namespace # that should be used to get IAM account credentials. Optional. - existingSecret: + existingSecret: secret-s3 # Data to be stored in the Velero secret, if `useSecret` is true and `existingSecret` is empty. # As of the current Velero release, Velero only uses one secret key/value at a time. # The key must be named `cloud`, and the value corresponds to the entire content of your IAM credentials file.