Keep Mongo operations online across Vault credential rotation
This commit is contained in:
1 parent
80d6917aa7
commit
23f7b78c3b
30 files changed
+1290
-202
No files matched your search
@@ -14,10 +14,6 @@ def config(service):
|
||||
if service == 'nats':
|
||||
env['NATS_TOKEN'] = kv('nats', 'token')
|
||||
else:
|
||||
database = 'sxchnge' if service == 'bff' else 'sxchnge_notifications'
|
||||
env['SXCHNGE_MONGO_URI'] = ('{{ with secret "database/creds/' + service + '" }}'
|
||||
'mongodb://{{ .Data.username | urlquery }}:{{ .Data.password | urlquery }}'
|
||||
'@mongo:27017/' + database + '?authSource=admin&replicaSet=rs0{{ end }}')
|
||||
env['TLS_CA'] = kv('tls', 'ca')
|
||||
if service == 'bff':
|
||||
env['SXCHNGE_JWT_SECRET'] = kv('bff', 'jwt')
|
||||
|
||||
Reference in new issue
Block a user