aibo/BoosAPI
1
0
Fork 0
forked from boos/BoosAPI
Code Pull Requests Activity

[codex] Add digest-safe k3s update-center assets (#326)

Browse Source 
* Add digest-safe k3s update-center assets

* Harden k3s update-center assets

* Trim k3s env secret names safely
This commit is contained in:
Cita
2026-03-30 17:17:24 +08:00
committed by GitHub
parent 7d91823f6c
commit 01481be511
9 changed files with 353 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/k3s/chart/templates/secret.yaml
+23
View File
@@ -0,0 +1,23 @@
apiVersion: v1
kind: Secret
metadata:
name: {{ include "metapi.envSecretName" . }}
labels:
{{- include "metapi.labels" . | nindent 4 }}
type: Opaque
stringData:
AUTH_TOKEN: {{ required "env.authToken is required" .Values.env.authToken | quote }}
PROXY_TOKEN: {{ required "env.proxyToken is required" .Values.env.proxyToken | quote }}
DB_TYPE: {{ .Values.env.dbType | quote }}
{{- if eq (lower (toString .Values.env.dbType)) "sqlite" }}
DB_URL: {{ default "./data/hub.db" .Values.env.dbUrl | quote }}
{{- else }}
DB_URL: {{ required "env.dbUrl is required when env.dbType is mysql/postgres" .Values.env.dbUrl | quote }}
{{- end }}
DB_SSL: {{ .Values.env.dbSsl | quote }}
DATA_DIR: {{ .Values.env.dataDir | quote }}
PORT: {{ .Values.env.port | quote }}
TZ: {{ .Values.env.tz | quote }}
CHECKIN_CRON: {{ .Values.env.checkinCron | quote }}
BALANCE_REFRESH_CRON: {{ .Values.env.balanceRefreshCron | quote }}
DEPLOY_HELPER_TOKEN: {{ .Values.env.deployHelperToken | quote }}