unkinben
9d4739505d
Wires the GPG signing key the terraform provider registry needs into the api
deployment. The secret is mounted optional so the pod runs before it exists;
artifactapi leaves the registry disabled until a readable key is present.
- mount secret artifactapi-tf-signing at /etc/artifactapi/tf-signing (optional)
- set TF_SIGNING_KEY_PATH, and TF_SIGNING_KEY_PASSPHRASE from the secret's
optional passphrase key
Create the secret out of band with an armored private key:
kubectl -n artifactapi create secret generic artifactapi-tf-signing \
--from-file=private-key.asc=./private-key.asc