Skip to content

Commit 71bf8f1

Browse files
author
Rahul Shinde
committed
mounting datastore_crypto_key for schedular pod
1 parent 5575afc commit 71bf8f1

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

templates/deployments.yaml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -729,12 +729,25 @@ spec:
729729
- name: st2-config-vol
730730
mountPath: /etc/st2/st2.user.conf
731731
subPath: st2.user.conf
732+
{{- if .Values.secrets.st2.datastore_crypto_key }}
733+
- name: st2-encryption-key-vol
734+
mountPath: /etc/st2/keys
735+
readOnly: true
736+
{{- end }}
732737
resources:
733738
{{ toYaml .Values.st2scheduler.resources | indent 10 }}
734739
{{- if .Values.st2scheduler.serviceAccount.attach }}
735740
serviceAccountName: {{ template "stackstorm-ha.serviceAccountName" . }}
736741
{{- end }}
737742
volumes:
743+
{{- if .Values.secrets.st2.datastore_crypto_key }}
744+
- name: st2-encryption-key-vol
745+
secret:
746+
secretName: {{ .Release.Name }}-st2-datastore-crypto-key
747+
items:
748+
- key: datastore_crypto_key
749+
path: datastore_key.json
750+
{{- end }}
738751
- name: st2-config-vol
739752
configMap:
740753
name: {{ .Release.Name }}-st2-config

0 commit comments

Comments
 (0)