remove secrets from truenas storage provisioners

This commit is contained in:
2023-11-01 09:49:26 -04:00
parent 3410213913
commit 053661c08c
4 changed files with 210 additions and 14 deletions

View File

@@ -292,35 +292,46 @@ sudo ls
sudo zfs list
```
Copy `truenas-iscsi-enc0-stable.yaml` to `secrets/` and populate the secrets. Then
run the following to install it.
Next you'll need an API key. Save it to a file called `secrets/truenas-api-key`:
```bash
echo 'api-key-here' > secrets/truenas-api-key
```
Now we can proceed with the install
```bash
helm repo add democratic-csi https://democratic-csi.github.io/charts/
helm repo update
# enc0 stable storage (iscsi)
# enc0 storage (iscsi)
helm upgrade \
--install \
--values secrets/truenas-iscsi-enc0-stable.yaml \
--values truenas-iscsi-enc0.yaml \
--namespace democratic-csi \
--create-namespace \
--set-file driver.config.sshConnection.privateKey=secrets/democratic_rsa \
--set-file driver.config.httpConnection.apiKey=secrets/truenas-api-key \
zfs-iscsi-enc0 democratic-csi/democratic-csi
# enc1 stable storage (iscsi)
# enc1 storage (iscsi)
helm upgrade \
--install \
--values secrets/truenas-iscsi-enc1-stable.yaml \
--values truenas-iscsi-enc1.yaml \
--namespace democratic-csi \
--create-namespace \
--set-file driver.config.sshConnection.privateKey=secrets/democratic_rsa \
--set-file driver.config.httpConnection.apiKey=secrets/truenas-api-key \
zfs-iscsi-enc1 democratic-csi/democratic-csi
# enc1 stable storage (nfs)
# enc1 storage (nfs)
helm upgrade \
--install \
--values secrets/truenas-nfs-enc1.yaml \
--values truenas-nfs-enc1.yaml \
--namespace democratic-csi \
--create-namespace \
--set-file driver.config.sshConnection.privateKey=secrets/democratic_rsa \
--set-file driver.config.httpConnection.apiKey=secrets/truenas-api-key \
zfs-nfs-enc1 democratic-csi/democratic-csi
```