Comments (2)
Hi @ronalcelaya,
Here we're talking about two different "Environment Variables", the GoCD Environment Variables and the Environment Variables specified to the Pod as Pod Yaml Spec.
In Kubernetes Elastic Agent Plugin Pod Yaml Spec, the Environment Variables are the Kubernetes supported Environment Variables, which will be passed on to the Pod and eventually will be consumed by GoCD Elastic Agent. Hence, we can not specify Encrypted Environment Variables as part of Pod Yaml Spec.
There are following two approaches to pass encrypted environment variables to the Kubernetes Elastic Agent Pod:
1. Using GoCD Environment:
GoCD Environment contains pipelines, agents and environment variables. The environment variables from the environment are passed to the agents. You can create an environment for the pipeline(which requires k8s elastic agent) and then specify the secure environment variable, which will be available to the k8s EA pod. You can find more information about GoCD Environments here.
Note, You don't need to specify the GoCD environment to the Kubernetes Elastic Agent. As the pipeline belongs to the environment, all the elastic agents of that pipeline too will be added to the same environment.
2. Using Kubernetes Secrets:
We can use Kubernetes secrets to pass secure values to the pods as environment variables. Know more about it at kubernetes.io.
from kubernetes-elastic-agents.
Hi @GaneshSPatil
Thanks for your answer.
I'm using Kubernetes Secrets and now everything works as expected. Thanks for your help
Best regards
from kubernetes-elastic-agents.
Related Issues (20)
- Cannot add new Cluster Profile HOT 4
- Elastic agents don't get assigned HOT 11
- Wrong size parsing in utils/Size.java HOT 4
- Agents are killed after 10 minutes HOT 8
- Question: Which rule is the plugin using when it choose the k8s node for the agent? HOT 2
- Long delay when creating new agents. HOT 13
- Use other env variable in elastic agent pod name than POD_POSTFIX HOT 3
- Elastic agents should be able to use `http` to server communication HOT 1
- Limit number of Elastic Agents running per cluster profile HOT 6
- Secure Environment variables on elastic agent HOT 1
- getting Could not parse certificate: java.io.IOException: Empty input HOT 2
- Remote Configuration in Bitbucket private repo returns 403 HOT 2
- The pod is interrupted within 100s HOT 5
- If using a non-default namespace, GoCD is unable to render the status report page HOT 1
- After the gocd db data is migrated, the following error message is displayed: HOT 5
- Better document how to get service account tokens on modern Kubernetes HOT 4
- Cluster Status Report unable to render after restarting the GoCD server, cluster profile params returned in plain text HOT 5
- Incorrect credentials being used when creating Kubernetes Client HOT 6
- Need to insatll java on this gocd docker image what is the procedure , please anyone help HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubernetes-elastic-agents.