add env env variable to finance app to know if prod or not [ci skip]
This commit is contained in:
parent
05944f716e
commit
e42802ec5e
3 changed files with 16 additions and 0 deletions
|
|
@ -95,6 +95,10 @@ resource "kubernetes_deployment" "finance_app" {
|
|||
name = "finance-app"
|
||||
image_pull_policy = "Always"
|
||||
|
||||
env {
|
||||
name = "ENVIRONMENT"
|
||||
value = "prod"
|
||||
}
|
||||
env {
|
||||
name = "DB_CONNECTION_STRING"
|
||||
value = var.db_connection_string
|
||||
|
|
|
|||
|
|
@ -134,6 +134,8 @@ resource "kubernetes_deployment" "oauth2-proxy" {
|
|||
image = "quay.io/pusher/oauth2_proxy:latest"
|
||||
name = "oauth2-proxy"
|
||||
args = ["--provider=google", "--upstream=file:///dev/null", "--upstream=http://localhost/redirect/", "--http-address=0.0.0.0:4180", "--cookie-domain=.viktorbarzin.me", "--footer=-", "--authenticated-emails-file=/etc/authorized_emails/authorized_emails.txt"]
|
||||
# args = ["--provider=google", "--upstream=file:///dev/null", "--upstream=http://localhost/redirect/", "--http-address=0.0.0.0:4180", "--cookie-domain=.viktorbarzin.me", "--footer=-", "--email-domain=*", "--google-group=barzini-lab-admins@googlegroups.com", "--google-admin-email=vbarzin@gmail.com", "--google-service-account-json=/etc/google_service_account/google_service_account.json"]
|
||||
# args = ["--provider=google", "--upstream=file:///dev/null", "--upstream=http://localhost/redirect/", "--http-address=0.0.0.0:4180", "--cookie-domain=.viktorbarzin.me", "--footer=-", "--email-domain=*", "--google-group=barzini-lab-admins", "--google-admin-email=533122798643-compute@developer.gserviceaccount.com", "--google-service-account-json=/etc/google_service_account/google_service_account.json"]
|
||||
env {
|
||||
name = "OAUTH2_PROXY_CLIENT_ID"
|
||||
value = var.oauth2_proxy_client_id
|
||||
|
|
@ -155,6 +157,10 @@ resource "kubernetes_deployment" "oauth2-proxy" {
|
|||
name = "authorized-emails"
|
||||
mount_path = "/etc/authorized_emails"
|
||||
}
|
||||
# volume_mount {
|
||||
# name = "sa-json"
|
||||
# mount_path = "/etc/google_service_account/"
|
||||
# }
|
||||
}
|
||||
volume {
|
||||
name = "config"
|
||||
|
|
@ -168,6 +174,12 @@ resource "kubernetes_deployment" "oauth2-proxy" {
|
|||
name = "authorized-emails"
|
||||
}
|
||||
}
|
||||
# volume {
|
||||
# name = "sa-json"
|
||||
# config_map {
|
||||
# name = "google-service-account"
|
||||
# }
|
||||
# }
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Binary file not shown.
Loading…
Add table
Add a link
Reference in a new issue