@@ -78,72 +78,44 @@ The specific command lines for source secrets are as follows:
7878
7979``` bash
8080# Source username
81- kubectl create secret generic source-db \
82- --namespace=rdi \
83- --from-literal=SOURCE_DB_USERNAME=yourUsername
84-
85- # Source password
86- kubectl create secret generic source-db \
87- --namespace=rdi \
88- --from-literal=SOURCE_DB_PASSWORD=yourPassword
89-
90- # Source trust certificate (both commands are required)
91- kubectl create secret generic source-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
92-
93- kubectl create secret generic source-db \
94- --namespace=rdi \
95- --from-literal=SOURCE_DB_CACERT=/etc/certificates/source_db/ca.crt
96-
97- # Source public key (both commands are required)
98- kubectl create secret generic source-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
99-
100- kubectl create secret generic source-db \
101- --namespace=rdi \
102- --from-literal=SOURCE_DB_CERT=/etc/certificates/source_db/client.crt
103-
104-
105- # Source private key (both commands are required)
106- kubectl create secret generic source-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
107-
108- kubectl create secret generic source-db \
109- --namespace=rdi \
110- --from-literal=SOURCE_DB_KEY=/etc/certificates/source_db/client.key
81+ kubectl create secret generic source-db --namespace=rdi \
82+ --from-literal=SOURCE_DB_USERNAME=yourUsername \
83+ --from-literal=SOURCE_DB_PASSWORD=yourPassword \
84+ --save-config --dry-run=client -o yaml | kubectl apply -f -
85+
86+ # Source TLS
87+ kubectl create secret generic source-db-ssl --namespace=rdi \
88+ --from-file=ca.crt=/path/to/myca.crt \
89+ --save-config --dry-run=client -o yaml | kubectl apply -f -
90+
91+ # Source mTLS
92+ kubectl create secret generic source-db-ssl --namespace=rdi \
93+ --from-file=ca.crt=/path/to/myca.crt \
94+ --from-file=client.crt=/path/to/myclient.crt \
95+ --from-file=client.key=/path/to/myclient.key \
96+ --save-config --dry-run=client -o yaml | kubectl apply -f -
11197```
11298
11399The corresponding command lines for target secrets are:
114100
115101``` bash
116- # Target username
117- kubectl create secret generic target-db \
118- --namespace=rdi \
119- --from-literal=TARGET_DB_USERNAME=yourUsername
120-
121- # Target password
122- kubectl create secret generic target-db \
123- --namespace=rdi \
124- --from-literal=TARGET_DB_PASSWORD=yourPassword
125-
126- # Target trust certificate (both commands are required)
127- kubectl create secret generic target-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
128-
129- kubectl create secret generic target-db \
130- --namespace=rdi \
131- --from-literal=TARGET_DB_CACERT=/etc/certificates/target-db/ca.crt
132-
133- # Target public key (both commands are required)
134- kubectl create secret generic target-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
135-
136- kubectl create secret generic target-db \
137- --namespace=rdi \
138- --from-literal=SOURCE_DB_CERT=/etc/certificates/target_db/client.crt
139-
140-
141- # Target private key (both commands are required)
142- kubectl create secret generic target-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
143-
144- kubectl create secret generic target-db \
145- --namespace=rdi \
146- --from-literal=SOURCE_DB_KEY=/etc/certificates/target_db/client.key
102+ # Target credentials
103+ kubectl create secret generic target-db --namespace=rdi \
104+ --from-literal=TARGET_DB_USERNAME=yourUsername \
105+ --from-literal=TARGET_DB_PASSWORD=yourPassword \
106+ --save-config --dry-run=client -o yaml | kubectl apply -f -
107+
108+ # Target TLS
109+ kubectl create secret generic target-db-ssl --namespace=rdi \
110+ --from-file=ca.crt=/path/to/myca.crt \
111+ --save-config --dry-run=client -o yaml | kubectl apply -f -
112+
113+ # Target mTLS
114+ kubectl create secret generic target-db-ssl --namespace=rdi \
115+ --from-file=ca.crt=/path/to/myca.crt \
116+ --from-file=client.crt=/path/to/myclient.crt \
117+ --from-file=client.key=/path/to/myclient.key \
118+ --save-config --dry-run=client -o yaml | kubectl apply -f -
147119```
148120
149121## Deploy a pipeline
0 commit comments