allow creation of pg-stac secrets from azure secret vault, refs #186 #187
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… key in the vault
…S secrets provider
…ovider configuration
…guration for Azure AKS
…ovider configuration
…ity annotation in deployment template
…figuration in deployment template
…re workload identity and secrets management
…ditional secret inclusion
…ironment variable configuration
…tgreSQL connection string format
…figmap.yaml for PGADMIN_URI initialization and PostgreSQL environment variables
…o ensure PGADMIN_URI is initialized correctly
…ialization in configmap.yaml
…figmap.yaml for PGADMIN_URI initialization and PostgreSQL environment variables
… and raster pod containers for improved debugging
…nction for consistency
… pod logs for improved debugging
emmanuelmathot
approved these changes
Apr 8, 2025
sunu
reviewed
Apr 8, 2025
pantierra
reviewed
Apr 8, 2025
…ication versioning
…ication versioning
… and environment settings
pantierra
reviewed
Apr 8, 2025
| @@ -9,7 +9,7 @@ on: | |||
|
|
|||
| env: | |||
| HELM_VERSION: v3.15.2 | |||
| PGO_VERSION: 5.5.2 | |||
| PGO_VERSION: 5.7.0 | |||
There was a problem hiding this comment.
I would suggest to align with 5.7.4 which we are using currently. This will also make it easier not to miss when we upgrade again.
…ts and environment variables for LOAD_FIXTURES and KEEP_ALIVE
…and update values.yaml to use a map for extraEnvVars
…cBootstrap settings and clean up values.yaml by removing unused envVars for raster and vector
…traEnvVars for environment variable management in job.yaml and values.yaml
…meMounts, and extraVolumes for improved secret management and volume handling
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Refs #186
Creates the
pgstac-secret-object reading from an Azure Secrets Vault.We may or may not want to include this in a main
eoapi-k8srelease, but it would definitely be helpful to have a helm chart with this to test our deploy.cc @geohacker @emmanuelmathot
[EDIT] Emmanuel 08/04/2025
postgrescluster.enabledis false