add SECRET_KEY_LOAD_AND_STORE=False to many deployments

Signed-off-by: Olivier Léobal <[email protected]>
Substra · Aug 14, 2023 · 45ff35f · 45ff35f
1 parent 330cba3
commit 45ff35f
Show file tree

Hide file tree

Showing 7 changed files with 22 additions and 0 deletions.
diff --git a/charts/substra-backend/templates/deployment-api-events.yaml b/charts/substra-backend/templates/deployment-api-events.yaml
@@ -68,6 +68,8 @@ spec:
             initialDelaySeconds: 5
             periodSeconds: 20
           env:
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
             - name: NAMESPACE
               valueFrom:
                   fieldRef:
@@ -129,6 +131,8 @@ spec:
             - secretRef:
                 name: {{ include "substra-backend.database.secret-name" . }}
           env:
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
             - name: DJANGO_SETTINGS_MODULE
               value: backend.settings.{{ .Values.settings }}
       volumes:

diff --git a/charts/substra-backend/templates/deployment-scheduler-worker.yaml b/charts/substra-backend/templates/deployment-scheduler-worker.yaml
@@ -72,6 +72,8 @@ spec:
                   fieldPath: spec.nodeName
             - name: DJANGO_SETTINGS_MODULE
               value: backend.settings.celery.{{ .Values.settings }}
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
           volumeMounts:
             {{- if .Values.privateCa.enabled }}
             - mountPath: /etc/ssl/certs

diff --git a/charts/substra-backend/templates/deployment-scheduler.yaml b/charts/substra-backend/templates/deployment-scheduler.yaml
@@ -69,6 +69,8 @@ spec:
                   fieldPath: spec.nodeName
             - name: DJANGO_SETTINGS_MODULE
               value: backend.settings.celery.{{ .Values.settings }}
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
           volumeMounts:
             - name: runtime-db
               mountPath: /var/substra/runtime-db

diff --git a/charts/substra-backend/templates/deployment-server.yaml b/charts/substra-backend/templates/deployment-server.yaml
@@ -158,6 +158,8 @@ spec:
             value: {{ $metricsPath }}
           - name: CELERY_MONITORING_ENABLED
             value: "True"
+          - name: SECRET_KEY_LOAD_AND_STORE
+            value: "False" # This container doesn't generate secure data such as tokens
         ports:
           - name: metrics
             containerPort: 8001
@@ -211,6 +213,8 @@ spec:
         env:
         - name: DJANGO_SETTINGS_MODULE
           value: backend.settings.{{ .Values.settings }}
+        - name: SECRET_KEY_LOAD_AND_STORE
+          value: "False" # This container doesn't generate secure data such as tokens
       - name: init-collectstatic
         image: {{ include "substra-backend.images.name" (dict "img" .Values.server.image "defaultTag" $.Chart.AppVersion) }}
         command: ['python', 'manage.py', 'collectstatic', '--noinput']
@@ -222,6 +226,8 @@ spec:
         env:
           - name: DJANGO_SETTINGS_MODULE
             value: backend.settings.{{ .Values.settings }}
+          - name: SECRET_KEY_LOAD_AND_STORE
+            value: "False" # This container doesn't generate secure data such as tokens
         volumeMounts:
           - name: statics
             mountPath: /usr/src/app/backend/statics

diff --git a/charts/substra-backend/templates/deployment-worker-events.yaml b/charts/substra-backend/templates/deployment-worker-events.yaml
@@ -68,6 +68,8 @@ spec:
             initialDelaySeconds: 5
             periodSeconds: 20
           env:
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
             - name: NAMESPACE
               valueFrom:
                   fieldRef:
@@ -129,6 +131,8 @@ spec:
             - secretRef:
                 name: {{ include "substra-backend.database.secret-name" . }}
           env:
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
             - name: DJANGO_SETTINGS_MODULE
               value: backend.settings.{{ .Values.settings }}
       volumes:

diff --git a/charts/substra-backend/templates/job-migrations.yaml b/charts/substra-backend/templates/job-migrations.yaml
@@ -60,6 +60,8 @@ spec:
           - secretRef:
               name: {{ include "substra-backend.database.secret-name" . }}
         env:
+          - name: SECRET_KEY_LOAD_AND_STORE
+            value: "False" # This container doesn't generate secure data such as tokens
           - name: DJANGO_SETTINGS_MODULE
             value: backend.settings.{{ .Values.settings }}
         volumeMounts:

diff --git a/charts/substra-backend/templates/statefulset-worker.yaml b/charts/substra-backend/templates/statefulset-worker.yaml
@@ -131,6 +131,8 @@ spec:
             - secretRef:
                 name: {{ include "substra-backend.database.secret-name" . }}
           env:
+            - name: SECRET_KEY_LOAD_AND_STORE
+              value: "False" # This container doesn't generate secure data such as tokens
             - name: DJANGO_SETTINGS_MODULE
               value: backend.settings.celery.{{ .Values.settings }}
             - name: DEFAULT_DOMAIN