Split s3 server certificate out of tasks secrets

cockpit-project / cockpituous

Cockpit Continuous Integration and Delivery

GNU Lesser General Public License v2.1

36 stars 35 forks source link

Split s3 server certificate out of tasks secrets #618

Closed martinpitt closed 6 months ago

martinpitt commented 7 months ago

Tasks containers don't need, and therefore should not have, the local minio S3 server certificate.

Our ci-secrets.git repo already moved the S3 certificate out of tasks/ into the top level s3-server/ directory. Adjust the deployment scripts and integration test accordingly.

martinpitt commented 7 months ago

I deployed this to production, and the image server on rhos-01-1 works fine. The cert is also gone from cockpit-tasks* containers.

martinpitt commented 6 months ago

@allisonkarlitskaya gentle review ping?