health: escape wger env vars and fix nginx temp paths

This commit is contained in:
Brad Stein 2026-01-14 22:03:40 -03:00
parent 22e3004b0a
commit 9652d9d3cf
3 changed files with 23 additions and 23 deletions

View File

@ -21,19 +21,19 @@ spec:
vault.hashicorp.com/agent-inject-secret-wger-env: "kv/data/atlas/health/wger-db"
vault.hashicorp.com/agent-inject-template-wger-env: |
{{- with secret "kv/data/atlas/health/wger-db" -}}
export DJANGO_DB_HOST="{{ .Data.data.DJANGO_DB_HOST }}"
export DJANGO_DB_PORT="{{ .Data.data.DJANGO_DB_PORT }}"
export DJANGO_DB_DATABASE="{{ .Data.data.DJANGO_DB_DATABASE }}"
export DJANGO_DB_USER="{{ .Data.data.DJANGO_DB_USER }}"
export DJANGO_DB_PASSWORD="{{ .Data.data.DJANGO_DB_PASSWORD }}"
export DJANGO_DB_HOST='{{ .Data.data.DJANGO_DB_HOST | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PORT='{{ .Data.data.DJANGO_DB_PORT | replace "'" "'\"'\"'" }}'
export DJANGO_DB_DATABASE='{{ .Data.data.DJANGO_DB_DATABASE | replace "'" "'\"'\"'" }}'
export DJANGO_DB_USER='{{ .Data.data.DJANGO_DB_USER | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PASSWORD='{{ .Data.data.DJANGO_DB_PASSWORD | replace "'" "'\"'\"'" }}'
{{- end }}
{{- with secret "kv/data/atlas/health/wger-secrets" -}}
export SECRET_KEY="{{ .Data.data.SECRET_KEY }}"
export SIGNING_KEY="{{ .Data.data.SIGNING_KEY }}"
export SECRET_KEY='{{ .Data.data.SECRET_KEY | replace "'" "'\"'\"'" }}'
export SIGNING_KEY='{{ .Data.data.SIGNING_KEY | replace "'" "'\"'\"'" }}'
{{- end }}
{{- with secret "kv/data/atlas/health/wger-admin" -}}
export WGER_ADMIN_USERNAME="{{ .Data.data.username }}"
export WGER_ADMIN_PASSWORD="{{ .Data.data.password }}"
export WGER_ADMIN_USERNAME='{{ .Data.data.username | replace "'" "'\"'\"'" }}'
export WGER_ADMIN_PASSWORD='{{ .Data.data.password | replace "'" "'\"'\"'" }}'
{{- end -}}
spec:
serviceAccountName: health-vault-sync

View File

@ -20,15 +20,15 @@ spec:
vault.hashicorp.com/agent-inject-secret-wger-env: "kv/data/atlas/health/wger-db"
vault.hashicorp.com/agent-inject-template-wger-env: |
{{- with secret "kv/data/atlas/health/wger-db" -}}
export DJANGO_DB_HOST="{{ .Data.data.DJANGO_DB_HOST }}"
export DJANGO_DB_PORT="{{ .Data.data.DJANGO_DB_PORT }}"
export DJANGO_DB_DATABASE="{{ .Data.data.DJANGO_DB_DATABASE }}"
export DJANGO_DB_USER="{{ .Data.data.DJANGO_DB_USER }}"
export DJANGO_DB_PASSWORD="{{ .Data.data.DJANGO_DB_PASSWORD }}"
export DJANGO_DB_HOST='{{ .Data.data.DJANGO_DB_HOST | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PORT='{{ .Data.data.DJANGO_DB_PORT | replace "'" "'\"'\"'" }}'
export DJANGO_DB_DATABASE='{{ .Data.data.DJANGO_DB_DATABASE | replace "'" "'\"'\"'" }}'
export DJANGO_DB_USER='{{ .Data.data.DJANGO_DB_USER | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PASSWORD='{{ .Data.data.DJANGO_DB_PASSWORD | replace "'" "'\"'\"'" }}'
{{- end }}
{{- with secret "kv/data/atlas/health/wger-secrets" -}}
export SECRET_KEY="{{ .Data.data.SECRET_KEY }}"
export SIGNING_KEY="{{ .Data.data.SIGNING_KEY }}"
export SECRET_KEY='{{ .Data.data.SECRET_KEY | replace "'" "'\"'\"'" }}'
export SIGNING_KEY='{{ .Data.data.SIGNING_KEY | replace "'" "'\"'\"'" }}'
{{- end -}}
spec:
affinity:

View File

@ -22,15 +22,15 @@ spec:
vault.hashicorp.com/agent-inject-secret-wger-env: "kv/data/atlas/health/wger-db"
vault.hashicorp.com/agent-inject-template-wger-env: |
{{- with secret "kv/data/atlas/health/wger-db" -}}
export DJANGO_DB_HOST="{{ .Data.data.DJANGO_DB_HOST }}"
export DJANGO_DB_PORT="{{ .Data.data.DJANGO_DB_PORT }}"
export DJANGO_DB_DATABASE="{{ .Data.data.DJANGO_DB_DATABASE }}"
export DJANGO_DB_USER="{{ .Data.data.DJANGO_DB_USER }}"
export DJANGO_DB_PASSWORD="{{ .Data.data.DJANGO_DB_PASSWORD }}"
export DJANGO_DB_HOST='{{ .Data.data.DJANGO_DB_HOST | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PORT='{{ .Data.data.DJANGO_DB_PORT | replace "'" "'\"'\"'" }}'
export DJANGO_DB_DATABASE='{{ .Data.data.DJANGO_DB_DATABASE | replace "'" "'\"'\"'" }}'
export DJANGO_DB_USER='{{ .Data.data.DJANGO_DB_USER | replace "'" "'\"'\"'" }}'
export DJANGO_DB_PASSWORD='{{ .Data.data.DJANGO_DB_PASSWORD | replace "'" "'\"'\"'" }}'
{{- end }}
{{- with secret "kv/data/atlas/health/wger-secrets" -}}
export SECRET_KEY="{{ .Data.data.SECRET_KEY }}"
export SIGNING_KEY="{{ .Data.data.SIGNING_KEY }}"
export SECRET_KEY='{{ .Data.data.SECRET_KEY | replace "'" "'\"'\"'" }}'
export SIGNING_KEY='{{ .Data.data.SIGNING_KEY | replace "'" "'\"'\"'" }}'
{{- end -}}
spec:
serviceAccountName: health-vault-sync