Skip to content

Commit bf07325

Browse files
dwdoughertydwdougherty
authored
INT: improve K8s secret setting page (#1004)
* INT: improve K8s secret setting page * Apply review comments
1 parent b816ce7 commit bf07325

File tree

1 file changed

+70
-62
lines changed
  • content/integrate/redis-data-integration/data-pipelines

1 file changed

+70
-62
lines changed

‎content/integrate/redis-data-integration/data-pipelines/deploy.md

Lines changed: 70 additions & 62 deletions
Original file line numberDiff line numberDiff line change
@@ -77,73 +77,81 @@ Where `<DB>` is either `source-db` for source secrets or `target-db` for target
7777
The specific command lines for source secrets are as follows:
7878

7979
```bash
80-
# Source username
81-
kubectl create secret generic source-db \
82-
--namespace=rdi \
83-
--from-literal=SOURCE_DB_USERNAME=yourUsername
84-
85-
# Source password
86-
kubectl create secret generic source-db \
87-
--namespace=rdi \
88-
--from-literal=SOURCE_DB_PASSWORD=yourPassword
89-
90-
# Source trust certificate (both commands are required)
91-
kubectl create secret generic source-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
92-
93-
kubectl create secret generic source-db \
94-
--namespace=rdi \
95-
--from-literal=SOURCE_DB_CACERT=/etc/certificates/source_db/ca.crt
96-
97-
# Source public key (both commands are required)
98-
kubectl create secret generic source-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
99-
100-
kubectl create secret generic source-db \
101-
--namespace=rdi \
102-
--from-literal=SOURCE_DB_CERT=/etc/certificates/source_db/client.crt
103-
104-
105-
# Source private key (both commands are required)
106-
kubectl create secret generic source-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
107-
108-
kubectl create secret generic source-db \
109-
--namespace=rdi \
110-
--from-literal=SOURCE_DB_KEY=/etc/certificates/source_db/client.key
80+
# Without source TLS
81+
# Create or update source-db secret
82+
kubectl create secret generic source-db --namespace=rdi \
83+
--from-literal=SOURCE_DB_USERNAME=yourUsername \
84+
--from-literal=SOURCE_DB_PASSWORD=yourPassword \
85+
--save-config --dry-run=client -o yaml | kubectl apply -f -
86+
87+
# With source TLS
88+
# Create of update source-db secret
89+
kubectl create secret generic source-db --namespace=rdi \
90+
--from-literal=SOURCE_DB_USERNAME=yourUsername \
91+
--from-literal=SOURCE_DB_PASSWORD=yourPassword \
92+
--from-literal=SOURCE_DB_CACERT=/etc/certificates/source_db/ca.crt \
93+
--save-config --dry-run=client -o yaml | kubectl apply -f -
94+
# Create or update source-db-ssl secret
95+
kubectl create secret generic source-db-ssl --namespace=rdi \
96+
--from-file=ca.crt=/path/to/myca.crt \
97+
--save-config --dry-run=client -o yaml | kubectl apply -f -
98+
99+
# With source mTLS
100+
# Create or update source-db secret
101+
kubectl create secret generic source-db --namespace=rdi \
102+
--from-literal=SOURCE_DB_USERNAME=yourUsername \
103+
--from-literal=SOURCE_DB_PASSWORD=yourPassword \
104+
--from-literal=SOURCE_DB_CACERT=/etc/certificates/source_db/ca.crt \
105+
--from-literal=SOURCE_DB_CERT=/etc/certificates/source_db/client.crt \
106+
--from-literal=SOURCE_DB_KEY=/etc/certificates/source_db/client.key \
107+
--from-literal=SOURCE_DB_KEY_PASSWORD=yourKeyPassword \ # add this only if SOURCE_DB_KEY is password-protected
108+
--save-config --dry-run=client -o yaml | kubectl apply -f -
109+
# Create or update source-db-ssl secret
110+
kubectl create secret generic source-db-ssl --namespace=rdi \
111+
--from-file=ca.crt=/path/to/myca.crt \
112+
--from-file=client.crt=/path/to/myclient.crt \
113+
--from-file=client.key=/path/to/myclient.key \
114+
--save-config --dry-run=client -o yaml | kubectl apply -f -
111115
```
112116

113117
The corresponding command lines for target secrets are:
114118

115119
```bash
116-
# Target username
117-
kubectl create secret generic target-db \
118-
--namespace=rdi \
119-
--from-literal=TARGET_DB_USERNAME=yourUsername
120-
121-
# Target password
122-
kubectl create secret generic target-db \
123-
--namespace=rdi \
124-
--from-literal=TARGET_DB_PASSWORD=yourPassword
125-
126-
# Target trust certificate (both commands are required)
127-
kubectl create secret generic target-db-ssl --from-file=ca.crt=/path/to/myca.crt -n rdi
128-
129-
kubectl create secret generic target-db \
130-
--namespace=rdi \
131-
--from-literal=TARGET_DB_CACERT=/etc/certificates/target-db/ca.crt
132-
133-
# Target public key (both commands are required)
134-
kubectl create secret generic target-db-ssl --from-file=client.crt=/path/to/myclient.crt -n rdi
135-
136-
kubectl create secret generic target-db \
137-
--namespace=rdi \
138-
--from-literal=SOURCE_DB_CERT=/etc/certificates/target_db/client.crt
139-
140-
141-
# Target private key (both commands are required)
142-
kubectl create secret generic target-db-ssl --from-file=client.key=/path/to/myclient.key -n rdi
143-
144-
kubectl create secret generic target-db \
145-
--namespace=rdi \
146-
--from-literal=SOURCE_DB_KEY=/etc/certificates/target_db/client.key
120+
# Without target TLS
121+
# Create or update target-db secret
122+
kubectl create secret generic target-db --namespace=rdi \
123+
--from-literal=TARGET_DB_USERNAME=yourUsername \
124+
--from-literal=TARGET_DB_PASSWORD=yourPassword \
125+
--save-config --dry-run=client -o yaml | kubectl apply -f -
126+
127+
# With target TLS
128+
# Create of update target-db secret
129+
kubectl create secret generic target-db --namespace=rdi \
130+
--from-literal=TARGET_DB_USERNAME=yourUsername \
131+
--from-literal=TARGET_DB_PASSWORD=yourPassword \
132+
--from-literal=TARGET_DB_CACERT=/etc/certificates/target_db/ca.crt \
133+
--save-config --dry-run=client -o yaml | kubectl apply -f -
134+
# Create or update target-db-ssl secret
135+
kubectl create secret generic target-db-ssl --namespace=rdi \
136+
--from-file=ca.crt=/path/to/myca.crt \
137+
--save-config --dry-run=client -o yaml | kubectl apply -f -
138+
139+
# With target mTLS
140+
# Create or update target-db secret
141+
kubectl create secret generic target-db --namespace=rdi \
142+
--from-literal=TARGET_DB_USERNAME=yourUsername \
143+
--from-literal=TARGET_DB_PASSWORD=yourPassword \
144+
--from-literal=TARGET_DB_CACERT=/etc/certificates/target_db/ca.crt \
145+
--from-literal=TARGET_DB_CERT=/etc/certificates/target_db/client.crt \
146+
--from-literal=TARGET_DB_KEY=/etc/certificates/target_db/client.key \
147+
--from-literal=TARGET_DB_KEY_PASSWORD=yourKeyPassword \ # add this only if TARGET_DB_KEY is password-protected
148+
--save-config --dry-run=client -o yaml | kubectl apply -f -
149+
# Create or update target-db-ssl secret
150+
kubectl create secret generic target-db-ssl --namespace=rdi \
151+
--from-file=ca.crt=/path/to/myca.crt \
152+
--from-file=client.crt=/path/to/myclient.crt \
153+
--from-file=client.key=/path/to/myclient.key \
154+
--save-config --dry-run=client -o yaml | kubectl apply -f -
147155
```
148156

149157
## Deploy a pipeline

0 commit comments

Comments
 (0)