bcgov / eagle-api

EPIC revision 2019
https://projects.eao.gov.bc.ca/
Apache License 2.0
5 stars 25 forks source link

EE-1199: Remove minio #639

Closed marklise closed 3 years ago

BcGovNeal commented 3 years ago

One thing, since the MINIO_* values are mounted from the nr-object-store-credential secret, you could just update the deploy config to use that instead of using params.

- name: MINIO_HOST
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: endpoint_url
- name: MINIO_ACCESS_KEY
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: user_account
- name: MINIO_SECRET_KEY
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: password
- name: MINIO_BUCKET_NAME
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: bucket_name
marklise commented 3 years ago

MINIO_HOST

That would require re-creating all the nr-object-store-credential secrets in all the environments just to add in something that isn't NR-object store specific. I would argue against this as eventually MINIO should be stripped entirely.

BcGovNeal commented 3 years ago

MINIO_HOST

That would require re-creating all the nr-object-store-credential secrets in all the environments just to add in something that isn't NR-object store specific. I would argue against this as eventually MINIO should be stripped entirely.

You are correct that the nr-object-store-credential secret would be a pre-requisite, however we already have those secrets in all the environments test and prod, and that's how the API is being deployed currently. When we strip away MINIO we should still be using the same secret.

marklise commented 3 years ago

One thing, since the MINIO_* values are mounted from the nr-object-store-credential secret, you could just update the deploy config to use that instead of using params.

- name: MINIO_HOST
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: endpoint_url
- name: MINIO_ACCESS_KEY
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: user_account
- name: MINIO_SECRET_KEY
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: password
- name: MINIO_BUCKET_NAME
  valueFrom:
    secretKeyRef:
      name: nr-object-store-credential
      key: bucket_name

Fixed in a8cf453

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication