deploy(irc): inject hashed RPC password
This commit is contained in:
@@ -668,7 +668,7 @@ data:
|
|||||||
|
|
||||||
rpc-user flowercorereadonly {
|
rpc-user flowercorereadonly {
|
||||||
match { ip 10.*; }
|
match { ip 10.*; }
|
||||||
password "__RPC_PASSWORD__";
|
password "__RPC_PASSWORD_HASH__";
|
||||||
rpc-class readonly;
|
rpc-class readonly;
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -1021,7 +1021,7 @@ spec:
|
|||||||
labels:
|
labels:
|
||||||
app: unrealircd
|
app: unrealircd
|
||||||
annotations:
|
annotations:
|
||||||
flowercore.io/config-revision: "irc-r1-rpc-simple-user-20260619"
|
flowercore.io/config-revision: "irc-r1-rpc-hashed-password-20260619"
|
||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: inject-credentials
|
- name: inject-credentials
|
||||||
@@ -1030,13 +1030,13 @@ spec:
|
|||||||
args:
|
args:
|
||||||
- |
|
- |
|
||||||
OPER_PW=$(cat /secrets/password)
|
OPER_PW=$(cat /secrets/password)
|
||||||
RPC_PW=$(cat /rpc-secrets/password)
|
RPC_PW_HASH=$(cat /rpc-secrets/passwordHash)
|
||||||
LINK_PW=$(cat /secrets/Link-Password)
|
LINK_PW=$(cat /secrets/Link-Password)
|
||||||
CLOAK_KEY_1=$(cat /cloak-secrets/cloak-key-1)
|
CLOAK_KEY_1=$(cat /cloak-secrets/cloak-key-1)
|
||||||
CLOAK_KEY_2=$(cat /cloak-secrets/cloak-key-2)
|
CLOAK_KEY_2=$(cat /cloak-secrets/cloak-key-2)
|
||||||
CLOAK_KEY_3=$(cat /cloak-secrets/cloak-key-3)
|
CLOAK_KEY_3=$(cat /cloak-secrets/cloak-key-3)
|
||||||
sed -e "s|__OPER_PASSWORD__|${OPER_PW}|g" \
|
sed -e "s|__OPER_PASSWORD__|${OPER_PW}|g" \
|
||||||
-e "s|__RPC_PASSWORD__|${RPC_PW}|g" \
|
-e "s|__RPC_PASSWORD_HASH__|${RPC_PW_HASH}|g" \
|
||||||
-e "s|__LINK_PASSWORD__|${LINK_PW}|g" \
|
-e "s|__LINK_PASSWORD__|${LINK_PW}|g" \
|
||||||
-e "s|__CLOAK_KEY_1__|${CLOAK_KEY_1}|g" \
|
-e "s|__CLOAK_KEY_1__|${CLOAK_KEY_1}|g" \
|
||||||
-e "s|__CLOAK_KEY_2__|${CLOAK_KEY_2}|g" \
|
-e "s|__CLOAK_KEY_2__|${CLOAK_KEY_2}|g" \
|
||||||
|
|||||||
Reference in New Issue
Block a user