Skip to content

Commit 8ecb3b9

Browse files
committed
fix: use proper secret for RADAS
Pass the `RADAS_CONFIG_PATH` as env secret Signed-off-by: Jonathan Gangi <jgangi@redhat.com>
1 parent 5a78817 commit 8ecb3b9

1 file changed

Lines changed: 6 additions & 8 deletions

File tree

pipelines/managed/slan-cuan-release/slan-cuan-release.yaml

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -99,12 +99,6 @@ spec:
9999
default: "false"
100100

101101
# Sign parameters
102-
- name: radas-config-secret
103-
description: |
104-
Kubernetes Secret name containing RADAS configuration JSON.
105-
The secret must have a `config.json` key with RADAS API URL and credentials
106-
type: string
107-
default: "radas-config"
108102
- name: requester-id
109103
description: |
110104
Requester identity for signing operations.
@@ -359,6 +353,12 @@ spec:
359353
value: $(params.taskGitRevision)
360354
- name: pathInRepo
361355
value: tekton/tasks/slan-cuan-sign.yaml
356+
env:
357+
- name: RADAS_CONFIG_PATH
358+
valueFrom:
359+
secretKeyRef:
360+
name: radas-cfg
361+
key: radas_cfg.json
362362
runAfter:
363363
- extract
364364
- collect-task-params
@@ -367,8 +367,6 @@ spec:
367367
value: $(tasks.collect-snapshot-params.results.extractedValues[0])
368368
- name: SIGNING_KEY
369369
value: $(tasks.collect-task-params.results.extractedValues[2])
370-
- name: RADAS_CONFIG_SECRET
371-
value: $(params.radas-config-secret)
372370
- name: REQUESTER_ID
373371
value: $(params.requester-id)
374372
- name: ZIP_ROOT_PATH

0 commit comments

Comments
 (0)