obfuscate metrics secret values (#2187)

Signed-off-by: Ben Luzarraga <[email protected]>
IBM · Sep 12, 2024 · 3c5431f · 3c5431f
1 parent aeac026
commit 3c5431f
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/preload_data.sh b/preload_data.sh
@@ -1426,6 +1426,8 @@ data:
 type: Opaque
 EOF
     #icp-mongodb-metrics-secret.yaml
+    metrics_pass=$(${OC} get secret icp-mongodb-metrics -n $FROM_NAMESPACE -o=jsonpath='{.data.password}')
+    metrics_user=$(${OC} get secret icp-mongodb-metrics -n $FROM_NAMESPACE -o=jsonpath='{.data.user}')
     cat << EOF | ${OC} apply -f -
 kind: Secret
 apiVersion: v1
@@ -1438,8 +1440,8 @@ metadata:
     app.kubernetes.io/name: icp-mongodb
     release: mongodb
 data:
-  password: aWNwbWV0cmljcw==
-  user: bWV0cmljcw==
+  password: $metrics_pass
+  user: $metrics_user
 type: Opaque
 EOF
     #mongo-rbac.yaml