cd
/
k8s-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Don't leak cookie secret.

This commit is contained in:
James Pace 2023-01-29 17:26:08 -05:00
parent 3a278ba0c0
commit 738acb5d33
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
deployments/kanboard-deployment.yaml
View File

@ -31,7 +31,7 @@ spec:
- name: oauth-proxy - name: oauth-proxy
image: quay.io/oauth2-proxy/oauth2-proxy:v7.4.0 image: quay.io/oauth2-proxy/oauth2-proxy:v7.4.0
args: args:
- --cookie-secret=RWqAKjoAp1-kDc2QRtITP8xx6WsXQzDGl33ExDh8mcs= - --cookie-secret=`$COOKIE_SECRET`
- --cookie-secure=false - --cookie-secure=false
- --email-domain=* - --email-domain=*
- --provider=keycloak-oidc - --provider=keycloak-oidc
@ -44,6 +44,12 @@ spec:
- --http-address=0.0.0.0:8080 - --http-address=0.0.0.0:8080
ports: ports:
- containerPort: 8080 - containerPort: 8080
env:
- name: COOKIE_SECRET
valueFrom:
secretKeyRef:
name: kanboard-cookie
key: cookie-secret
- name: kanboard-app - name: kanboard-app
image: 192.168.1.128:8443/kanboard:latest image: 192.168.1.128:8443/kanboard:latest
ports: ports: