From 443fcc3daed4afc90da9746a083ab52fb12e9312 Mon Sep 17 00:00:00 2001 From: Scott Lougheed Date: Thu, 15 Sep 2022 16:01:43 -0700 Subject: [PATCH] changing mount path and adding .json signed Co-Authored-By: Adam Pike --- kubernetes/README.md | 4 ++-- kubernetes/op-scim-config.yaml | 6 +++--- kubernetes/op-scim-deployment.yaml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/kubernetes/README.md b/kubernetes/README.md index 2f69505..50cc4e1 100644 --- a/kubernetes/README.md +++ b/kubernetes/README.md @@ -58,13 +58,13 @@ This section is only relevant to those enrolled in our Google Workspace provisio First, you’ll need to edit the file located at `scim-examples/beta/workspace-settings.json`, and fill in the values according to those presented in our Google Workspace documentation. ```bash -kubectl create secret generic workspace-settings --from-file=workspace-settings=/path/to/workspace-settings.json +kubectl create secret generic workspace-settings --from-file=workspace-settings=workspace-settings.json=/path/to/workspace-settings.json ``` Then, you will need to provide the Google Service Account key file, also generated according to our documentation. Substitute `` with the filename generated by Google for your Google Service Account. ```bash -kubectl create secret generic workspace-credentials --from-file=workspace-credentials=/path/to/.json +kubectl create secret generic workspace-credentials --from-file=workspace-credentials=workspace-credentials.json=/path/to/.json ``` ## Deploy to the Kubernetes cluster diff --git a/kubernetes/op-scim-config.yaml b/kubernetes/op-scim-config.yaml index 3c104e7..28a8b7b 100644 --- a/kubernetes/op-scim-config.yaml +++ b/kubernetes/op-scim-config.yaml @@ -7,7 +7,7 @@ data: OP_LETSENCRYPT_DOMAIN: "" # (advanced) only change the options below if you need to OP_REDIS_URL: "redis://op-scim-redis:6379" - OP_SESSION: "/secret/scimsession" + OP_SESSION: "/secrets/scimsession" OP_PRETTY_LOGS: "0" OP_DEBUG: "0" OP_PING_SERVER: "0" @@ -15,5 +15,5 @@ data: # default: "1pw@[OP_LETSENCRYPT_DOMAIN]" #OP_LETSENCRYPT_EMAIL: "1pw@example.com" # (Workspace Beta) these settings are specific to those participating in the Google Workspace provisioning beta - OP_WORKSPACE_CREDENTIALS: "/secret/workspace-credentials" - OP_WORKSPACE_SETTINGS: "/secret/workspace-settings" + OP_WORKSPACE_CREDENTIALS: "/secrets/workspace-credentials.json" + OP_WORKSPACE_SETTINGS: "/secrets/workspace-settings.json" diff --git a/kubernetes/op-scim-deployment.yaml b/kubernetes/op-scim-deployment.yaml index 39b1da6..282e816 100644 --- a/kubernetes/op-scim-deployment.yaml +++ b/kubernetes/op-scim-deployment.yaml @@ -24,7 +24,7 @@ spec: containerPort: 3002 volumeMounts: - name: secrets - mountPath: "/secret" + mountPath: "/secrets" readOnly: false resources: requests: