fix: Generate secret key in initContainer instead of python code

cvat-ai · Jun 7, 2024 · eff69e4 · eff69e4
1 parent b08c1a2
commit eff69e4
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/helm-chart/templates/cvat_backend/server/deployment.yml b/helm-chart/templates/cvat_backend/server/deployment.yml
@@ -116,6 +116,21 @@ spec:
           {{- toYaml . | nindent 10 }}
           {{- end }}
         {{- end }}
+        {{- if .Values.cvat.backend.initSecretKey.enabled }}
+        - name: generate-secret-key
+          image: busybox
+          command: ["bin/sh", "-c", "SECRET_KEY=$(tr -dc A-Za-z0-9 </dev/urandom | head -c 50) && echo \"SECRET_KEY = \'$SECRET_KEY\' \"  > /home/django/keys/secret_key.py"]
+          {{- with merge $localValues.resources .Values.cvat.backend.resources }}
+          resources:
+          {{- toYaml . | nindent 12 }}
+          {{- end }}
+          volumeMounts:
+          {{- if .Values.cvat.backend.defaultStorage.enabled }}
+          - mountPath: /home/django/keys
+            name: cvat-backend-data
+            subPath: keys
+          {{- end }}
+        {{- end }}
       {{- with merge $localValues.affinity .Values.cvat.backend.affinity }}
       affinity:
       {{- toYaml . | nindent 8 }}

diff --git a/helm-chart/values.yaml b/helm-chart/values.yaml
@@ -119,6 +119,8 @@ cvat:
     imagePullPolicy: Always
     permissionFix:
       enabled: true
+    initSecretKey:
+      enabled: false
     service:
       annotations:
         traefik.ingress.kubernetes.io/service.sticky.cookie: "true"