DB_ENGINE=cloud_spanner

Inject GOOGLE_APPLICATION_CREDENTIALS

Author: gdbelvin

deploy/kubernetes/base/log-server-deployment.yaml

@@ -13,6 +13,7 @@ spec:
       labels:
         io.kompose.service: log-server
     spec:
+      volumes: []
       containers:
       - name: trillian-logserver
         args: [
@@ -37,5 +38,6 @@ spec:
         - containerPort: 8090
         - containerPort: 8091
         resources: {}
+        volumeMounts: []
       restartPolicy: Always
 status: {}

deploy/kubernetes/base/log-signer-deployment.yaml

@@ -13,6 +13,7 @@ spec:
       labels:
         io.kompose.service: log-signer
     spec:
+      volumes: []
       containers:
       - name: trillian-logsigner
         args: [
@@ -40,5 +41,6 @@ spec:
         ports:
         - containerPort: 8091
         resources: {}
+        volumeMounts: []
       restartPolicy: Always
 status: {}

deploy/kubernetes/base/map-server-deployment.yaml

@@ -13,6 +13,7 @@ spec:
       labels:
         io.kompose.service: map-server
     spec:
+      volumes: []
       containers:
       - name: trillian-mapserver
         args: [
@@ -38,5 +39,6 @@ spec:
         - containerPort: 8090
         - containerPort: 8091
         resources: {}
+        volumeMounts: []
       restartPolicy: Always
 status: {}

deploy/kubernetes/overlays/gke/cloudspanner-creds.yaml

@@ -0,0 +1,14 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: secrets-cloudspanner
+    secret:
+      secretName: cloudspanner
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: secrets-cloudspanner
+    mountPath: /secrets/cloudspanner
+    readOnly: true
+

deploy/kubernetes/overlays/gke/configmap.yaml

@@ -3,4 +3,7 @@ apiVersion: v1
 metadata:
   name: configmap 
 data:
-  DB_NAME: test:zaphod@tcp(127.0.0.1:3306)/test
+  DB_NAME: projects/key-transparency/instances/keytransparency-dev/databases/sandbox
+  DB_ENGINE: cloud_spanner
+  GOOGLE_APPLICATION_CREDENTIALS: /secrets/cloudspanner/credentials.json
+

deploy/kubernetes/overlays/gke/kustomization.yaml

@@ -3,6 +3,9 @@ bases:
 resources:
 - managed-cert.yaml
 patches:
+- path: cloudspanner-creds.yaml
+  target:
+    kind: Deployment
 - path: cloudsql-sidecar.yaml
   target:
     kind: Deployment