diff --git a/zot/helm-values.yaml b/zot/helm-values.yaml index 9134e76..00e79ac 100644 --- a/zot/helm-values.yaml +++ b/zot/helm-values.yaml @@ -100,11 +100,8 @@ persistence: type: secret name: zot-session-keys globalMounts: - - path: /etc/zot/session-hashkey - subPath: hashKey - readOnly: true - - path: /etc/zot/session-blockkey - subPath: blockKey + - path: /etc/zot/session-keys.json + subPath: session-keys.json readOnly: true configMaps: @@ -146,12 +143,11 @@ configMaps: } } }, + "sessionKeysFile": "/etc/zot/session-keys.json", "sessionDriver": { "name": "redis", "url": "redis://authelia-redis-master.authelia.svc.cluster.local:6379", - "keyprefix": "zot", - "hashKeyFile": "/etc/zot/session-hashkey", - "blockKeyFile": "/etc/zot/session-blockkey" + "keyprefix": "zot" } } }, diff --git a/zot/manifests/secret.yaml b/zot/manifests/secret.yaml index dd4549c..e90bab0 100644 --- a/zot/manifests/secret.yaml +++ b/zot/manifests/secret.yaml @@ -61,12 +61,20 @@ spec: target: name: zot-session-keys creationPolicy: Owner + template: + engineVersion: v2 + data: + session-keys.json: | + { + "hashKey": "{{ .hashKey }}", + "encryptKey": "{{ .encryptKey }}" + } data: - secretKey: hashKey remoteRef: key: zot property: SESSION_HASH_KEY - - secretKey: blockKey + - secretKey: encryptKey remoteRef: key: zot property: SESSION_BLOCK_KEY