Will Anderson
b70fef611a
- Dockerfile for Go DHARMA server (registry.neuralplatform.ai/neuron-technologies/dharma) - k8s manifests: deployment, service, ExternalSecret (Vault), IngressRoute - Argo CD app: deploys to neuron-prod namespace - Cloudflare tunnel rule for dharma.neurontechnologies.ai - DNS CNAME record for dharma.neurontechnologies.ai → legion tunnel - Vault secrets already populated (api_key, encryption_key, jwt_secret, engram_key, engram_url) - Connects to neuron-daemon (engram) at neuron-daemon.neuron-prod.svc.cluster.local:7749
44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
# Populate Vault before first deploy:
|
|
#
|
|
# vault kv put secret/neuron-technologies/dharma \
|
|
# api_key="..." \
|
|
# encryption_key="..." \
|
|
# jwt_secret="..." \
|
|
# engram_key="..." \
|
|
# engram_url="http://neuron-daemon.neuron-prod.svc.cluster.local:7749"
|
|
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: dharma-secrets
|
|
namespace: neuron-prod
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: dharma-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: DHARMA_API_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/dharma
|
|
property: api_key
|
|
- secretKey: DHARMA_ENCRYPTION_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/dharma
|
|
property: encryption_key
|
|
- secretKey: DHARMA_JWT_SECRET
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/dharma
|
|
property: jwt_secret
|
|
- secretKey: ENGRAM_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/dharma
|
|
property: engram_key
|
|
- secretKey: ENGRAM_URL
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/dharma
|
|
property: engram_url
|