commit 7e3447f3ff5518c10f4c3a6b987889e13a33ef3d
author informatic <informatic@hackerspace.pl> Sat Oct 10 18:40:37 2020 +0000
committer Gerrit Code Review <gerrit@hackerspace.pl> Sat Oct 10 18:40:37 2020 +0000
tree ac715ff4477c681ae62bf7859872bcfe8d139f03
parent d9e32f19f655b85feeeb2e50877c4ba9b423d31a
parent 89a1ee90cd6d2e6450dd1ffdf38a214720be6a8a

Merge "kube/redis: implement optional cfg.password option"

kube/redis.libsonnet

diff --git a/kube/redis.libsonnet b/kube/redis.libsonnet
index d272227..e596ac2 100644
--- a/kube/redis.libsonnet
+++ b/kube/redis.libsonnet
@@ -12,6 +12,7 @@
         appName: error "app name must be set",
         storageClassName: "waw-hdd-redundant-1",
         prefix: "", # if set, should be 'foo-'
+        password: null,
 
         image: "redis:5.0.4-alpine",
         resources: {
@@ -65,13 +66,16 @@
                             args: [
                                 "redis-server",
                                 "--appendonly", "yes",
-                            ],
+                            ] + (if cfg.password != null then ["--requirepass", "$(REDIS_PASSWORD)"] else []),
                             ports_: {
                                 client: { containerPort: 6379 },
                             },
                             volumeMounts_: {
                                 data: { mountPath: "/data" },
                             },
+                            env_: {
+                                [if cfg.password != null then "REDIS_PASSWORD"]: cfg.password,
+                            },
                             resources: cfg.resources,
                         },
                     },