shared-secrets will overwrite global.railsSecret object
The _generate_secrets.sh
script of the shard-secrets chart will overwrite the existing secret present at global.railsSecret.secret
. This creation of this was done when we needed to ensure additional items were added to the content of secrets.yml
. Unfortunately, the way in which we developed this did not include the possibility of having "one big secret" which contained everything, say, for the sake of migrating platforms, or easy of managing manual secrets.
This is currently makes use of HEREDOC
and kubectl apply -f
. I'm strongly recommending we move this to be a kubectl patch
if possible.
Until this is addressed, in you can have "one secret" that has everything except the secrets.yml
content.