Skip to content
This repository has been archived by the owner on Mar 1, 2023. It is now read-only.

Commit

Permalink
updated version
Browse files Browse the repository at this point in the history
Signed-off-by: Dustin Scott <sdustin@vmware.com>
  • Loading branch information
Dustin Scott committed Sep 3, 2021
1 parent 673fc26 commit 9cb9397
Showing 1 changed file with 11 additions and 11 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ metadata:
app.kubernetes.io/instance: hashicorp
data:
site.yaml: |
{% raw %}
{% raw %}
---
- hosts: "localhost"
connection: "local"
Expand Down Expand Up @@ -180,38 +180,38 @@ data:
hashicorp_vault_root_token: "{{ hashicorp_vault_root_token | b64encode }}"
hashicorp_vault_unseal_keys: "{{ hashicorp_vault_unseal_keys | b64encode }}"
no_log: "{{ secure_logging | bool }}"
{% endraw %}
{% endraw %}
---
apiVersion: batch/v1
kind: Job
metadata:
name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
namespace: {{ tanzu_secrets.namespace }}
name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
namespace: "{{ tanzu_secrets.namespace }}"
labels:
app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
spec:
activeDeadlineSeconds: 600
backoffLimit: 0
template:
metadata:
labels:
app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
spec:
restartPolicy: Never
securityContext:
runAsUser: 1000
fsGroup: 1000
runAsNonRoot: true
serviceAccountName: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
serviceAccountName: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
containers:
- image: projects.registry.vmware.com/rpk/rpk-job-runner:v1.0.11
name: rpk-job-runner
envFrom:
- secretRef:
name: {{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}
name: "{{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}"
volumeMounts:
- mountPath: /ansible/site.yaml
name: {{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}
name: "{{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}"
readOnly: true
subPath: site.yaml
resources:
Expand All @@ -222,6 +222,6 @@ spec:
cpu: "1000m"
memory: "128Mi"
volumes:
- name: {{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}
- name: "{{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}"
configMap:
name: {{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}
name: "{{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}"

0 comments on commit 9cb9397

Please sign in to comment.