Commit fd4bd894 authored by Ruslan Konviser's avatar Ruslan Konviser
Browse files

fix: DB certificates

parent 5fb1a8f3

.deploy/k8s/k8s-manifest.demo.yaml

+6 −6
Original line number Diff line number Diff line
@@ -111,17 +111,17 @@ spec: 
                      - name: SENTRY_DSN

                        value: 'https://7cd381188b6f446ca0e69185227b9031@o51327.ingest.sentry.io/4397292'

                      - name: DB_URI

                        value: $DB_URI

                        value: '$DB_URI'

                      - name: DB_HOST

                        value: $DB_HOST

                        value: '$DB_HOST'

                      - name: DB_SSL_MODE

                        value: $DB_SSL_MODE

                        value: '$DB_SSL_MODE'

                      - name: DB_CA_CERT

                        value: $DB_CA_CERT

                        value: '$DB_CA_CERT'

                      - name: DB_USER

                        value: $DB_USER

                        value: '$DB_USER'

                      - name: DB_PASS

                        value: $DB_PASS

                        value: '$DB_PASS'

                      - name: DB_TYPE

                        value: 'mongodb'

                      - name: DB_NAME

.github/workflows/deploy-do.yml

+11 −5
Original line number Diff line number Diff line
@@ -26,16 +26,22 @@ jobs: 
            - name: Save DigitalOcean kubeconfig with short-lived credentials

              run: doctl kubernetes cluster kubeconfig save --expiry-seconds 600 k8s-ever



            - name: Write MongoDB Certificate file

              run: |

                echo "$DB_CA_CERT" | base64 --decode > ${HOME}/ca-certificate.crt

              env:

                DB_CA_CERT: '${{ secrets.DB_CA_CERT }}'



            - name: Apply k8s manifests changes in DigitalOcean k8s cluster (if any)

              run: |

                  envsubst < $GITHUB_WORKSPACE/.deploy/k8s/k8s-manifest.demo.yaml | kubectl --context do-sfo2-k8s-ever apply -f -

              env:

                DB_URI: ${{ secrets.DB_URI }}

                DB_HOST: ${{ secrets.DB_HOST }}

                DB_USER: ${{ secrets.DB_USER }}

                DB_PASS: ${{ secrets.DB_PASS }}

                DB_URI: '${{ secrets.DB_URI }}'

                DB_HOST: '${{ secrets.DB_HOST }}'

                DB_USER: '${{ secrets.DB_USER }}'

                DB_PASS: '${{ secrets.DB_PASS }}'

                DB_NAME: 'ever_demo'

                DB_CA_CERT: ${{ secrets.DB_CA_CERT }}

                DB_CA_CERT: '${{ secrets.DB_CA_CERT }}'

                DB_SSL_MODE: 'true'



            # we need this step because for now we just use :latest tag