[MOSIP-29204] Updated scripts & helm charts to mount keystore.p12 fil…

…e from secret (#121) Co-authored-by: syed-salman-technoforte <[email protected]>
mosip · Sep 28, 2023 · d1fbb5a · d1fbb5a
1 parent 342dd74
commit d1fbb5a
Show file tree

Hide file tree

Showing 4 changed files with 26 additions and 1 deletion.
diff --git a/helm/mimoto/.gitignore b/helm/mimoto/.gitignore
@@ -1 +1,2 @@
 charts/
+Chart.lock
diff --git a/helm/mimoto/install.sh b/helm/mimoto/install.sh
@@ -49,6 +49,9 @@ function installing_mimoto() {
   kubectl -n config-server set env --keys=mimoto-oidc-partner-clientid --from secret/mimoto-oidc-partner-clientid deployment/config-server --prefix=SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_
   kubectl -n config-server get deploy -o name |  xargs -n1 -t  kubectl -n config-server rollout status
 
+
+  kubectl -n $NS create secret generic mimoto --from-literal=keystore.p12=''
+
   echo Installing mimoto
   helm -n $NS install mimoto mosip/mimoto --version $MIMOTO_CHART_VERSION $ENABLE_INSECURE
 

diff --git a/helm/mimoto/templates/deployment.yaml b/helm/mimoto/templates/deployment.yaml
@@ -93,6 +93,8 @@ spec:
               value: {{ .Values.containerSecurityContext.runAsUser }}
             - name: JDK_JAVA_OPTIONS
               value: {{ .Values.additionalResources.javaOpts }}
+            - name: KEYSTORE_P12_PATH
+              value: {{ .Values.volumes.secrets.mimoto.path }}
             {{- if .Values.extraEnvVars }}
             {{- include "common.tplvalues.render" (dict "value" .Values.extraEnvVars "context" $) | nindent 12 }}
             {{- end }}
@@ -112,6 +114,12 @@ spec:
           volumeMounts:
             - name: landing-folder
               mountPath: {{ .Values.persistence.mountDir }}
+            {{- if .Values.volumes.secrets }}
+            {{- range $secretName, $value := .Values.volumes.secrets }}
+            - name: {{ $secretName }}
+              mountPath: {{ $value.path }}
+            {{- end }}
+            {{- end }}
             {{- if .Values.enable_insecure }}
             - mountPath: /usr/local/openjdk-11/lib/security/cacerts
               name: cacerts
@@ -146,7 +154,14 @@ spec:
             claimName: {{ .Values.persistence.existingClaim | default (include "common.names.fullname" .) }}
           {{- else }}
           emptyDir: {}
-          {{ end }}
+          {{- end }}
+        {{- if .Values.volumes.secrets }}
+        {{- range $secretName, $value := .Values.volumes.secrets }}
+        - name: {{ $secretName }}
+          secret:
+            secretName: {{ $secretName }}
+        {{- end }}
+        {{- end }}
         {{- if .Values.enable_insecure }}
         - name: cacerts
           emptyDir: {}

diff --git a/helm/mimoto/values.yaml b/helm/mimoto/values.yaml
@@ -461,3 +461,9 @@ istio:
   rewrite: /v1/mimoto
 
 enable_insecure: false
+
+volumes:
+  secrets:
+    mimoto:
+      key: keystorep12
+      path: /home/mosip/certs