Skip to content

Commit 8bf8e9c

Browse files
committed
INT: improve K8s secret setting page
1 parent 0d9092f commit 8bf8e9c

File tree

1 file changed

+33
-61
lines changed
  • content/integrate/redis-data-integration/data-pipelines

1 file changed

+33
-61
lines changed

content/integrate/redis-data-integration/data-pipelines/deploy.md

Lines changed: 33 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -78,72 +78,44 @@ The specific command lines for source secrets are as follows:
7878

7979
```bash
8080
# Source username
81-
kubectl create secret generic source-db \
82-
--namespace=rdi \
83-
--from-literal=SOURCE_DB_USERNAME=yourUsername
84-
85-
# Source password
86-
kubectl create secret generic source-db \
87-
--namespace=rdi \
88-
--from-literal=SOURCE_DB_PASSWORD=yourPassword
89-
90-
# Source trust certificate (both commands are required)
91-
kubectl create secret generic source-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
92-
93-
kubectl create secret generic source-db \
94-
--namespace=rdi \
95-
--from-literal=SOURCE_DB_CACERT=/etc/certificates/source_db/ca.crt
96-
97-
# Source public key (both commands are required)
98-
kubectl create secret generic source-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
99-
100-
kubectl create secret generic source-db \
101-
--namespace=rdi \
102-
--from-literal=SOURCE_DB_CERT=/etc/certificates/source_db/client.crt
103-
104-
105-
# Source private key (both commands are required)
106-
kubectl create secret generic source-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
107-
108-
kubectl create secret generic source-db \
109-
--namespace=rdi \
110-
--from-literal=SOURCE_DB_KEY=/etc/certificates/source_db/client.key
81+
kubectl create secret generic source-db --namespace=rdi \
82+
--from-literal=SOURCE_DB_USERNAME=yourUsername \
83+
--from-literal=SOURCE_DB_PASSWORD=yourPassword \
84+
--save-config --dry-run=client -o yaml | kubectl apply -f -
85+
86+
# Source TLS
87+
kubectl create secret generic source-db-ssl --namespace=rdi \
88+
--from-file=ca.crt=/path/to/myca.crt \
89+
--save-config --dry-run=client -o yaml | kubectl apply -f -
90+
91+
# Source mTLS
92+
kubectl create secret generic source-db-ssl --namespace=rdi \
93+
--from-file=ca.crt=/path/to/myca.crt \
94+
--from-file=client.crt=/path/to/myclient.crt \
95+
--from-file=client.key=/path/to/myclient.key \
96+
--save-config --dry-run=client -o yaml | kubectl apply -f -
11197
```
11298

11399
The corresponding command lines for target secrets are:
114100

115101
```bash
116-
# Target username
117-
kubectl create secret generic target-db \
118-
--namespace=rdi \
119-
--from-literal=TARGET_DB_USERNAME=yourUsername
120-
121-
# Target password
122-
kubectl create secret generic target-db \
123-
--namespace=rdi \
124-
--from-literal=TARGET_DB_PASSWORD=yourPassword
125-
126-
# Target trust certificate (both commands are required)
127-
kubectl create secret generic target-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
128-
129-
kubectl create secret generic target-db \
130-
--namespace=rdi \
131-
--from-literal=TARGET_DB_CACERT=/etc/certificates/target-db/ca.crt
132-
133-
# Target public key (both commands are required)
134-
kubectl create secret generic target-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
135-
136-
kubectl create secret generic target-db \
137-
--namespace=rdi \
138-
--from-literal=SOURCE_DB_CERT=/etc/certificates/target_db/client.crt
139-
140-
141-
# Target private key (both commands are required)
142-
kubectl create secret generic target-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
143-
144-
kubectl create secret generic target-db \
145-
--namespace=rdi \
146-
--from-literal=SOURCE_DB_KEY=/etc/certificates/target_db/client.key
102+
# Target credentials
103+
kubectl create secret generic target-db --namespace=rdi \
104+
--from-literal=TARGET_DB_USERNAME=yourUsername \
105+
--from-literal=TARGET_DB_PASSWORD=yourPassword \
106+
--save-config --dry-run=client -o yaml | kubectl apply -f -
107+
108+
# Target TLS
109+
kubectl create secret generic target-db-ssl --namespace=rdi \
110+
--from-file=ca.crt=/path/to/myca.crt \
111+
--save-config --dry-run=client -o yaml | kubectl apply -f -
112+
113+
# Target mTLS
114+
kubectl create secret generic target-db-ssl --namespace=rdi \
115+
--from-file=ca.crt=/path/to/myca.crt \
116+
--from-file=client.crt=/path/to/myclient.crt \
117+
--from-file=client.key=/path/to/myclient.key \
118+
--save-config --dry-run=client -o yaml | kubectl apply -f -
147119
```
148120

149121
## Deploy a pipeline

0 commit comments

Comments
 (0)