forked from cerc-io/stack-orchestrator
- Add GENERATE_TOKEN_PATTERN to detect $generate:hex:N$ and $generate:base64:N$ tokens
- Add _generate_and_store_secrets() to create K8s Secrets from spec.yml config
- Modify _write_config_file() to separate secrets from regular config
- Add env_from with secretRef to container spec in cluster_info.py
- Secrets are injected directly into containers via K8s native mechanism
This enables declarative secret generation in spec.yml:
config:
SESSION_SECRET: $generate:hex:32$
DB_PASSWORD: $generate:hex:16$
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| compose | ||
| k8s | ||
| webapp | ||
| __init__.py | ||
| deploy_types.py | ||
| deploy_util.py | ||
| deploy.py | ||
| deployer_factory.py | ||
| deployer.py | ||
| deployment_context.py | ||
| deployment_create.py | ||
| deployment.py | ||
| dns_probe.py | ||
| images.py | ||
| spec.py | ||
| stack_state.py | ||
| stack.py | ||