ClearML/clearml-helm-charts
1
0
Fork 0
mirror of https://github.com/clearml/clearml-helm-charts synced 2025-04-17 01:31:13 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Pr2clearml rand sensitive info (#1)

Browse Source 
* adding new secret rand condition + change chare name

* adjusting values.yaml information

* removing hard-coded secrets

* returning name to origin for PR

* also removing secureAuthTokenSecret

* update version + annotation
This commit is contained in:
amir-bialek 2025-04-13 17:28:45 +02:00 committed by GitHub
parent 747c018adb
commit 59dd720d13
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 24 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
charts/clearml/Chart.yaml
View File

@ -2,7 +2,7 @@ apiVersion: v2
name: clearml name: clearml
description: MLOps platform description: MLOps platform
type: application type: application
version: "7.14.4" version: "7.14.5"
appVersion: "2.0" appVersion: "2.0"
kubeVersion: ">= 1.21.0-0 < 1.33.0-0" kubeVersion: ">= 1.21.0-0 < 1.33.0-0"
home: https://clear.ml home: https://clear.ml
@ -32,5 +32,5 @@ dependencies:
condition: elasticsearch.enabled condition: elasticsearch.enabled
annotations: annotations:
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: fixed - kind: added
description: "casted port to string before concatenation" description: "Generate default random secrets for clearml-conf if values are not provided"

14
charts/clearml/templates/clearml-secrets.yaml
View File

@ -3,13 +3,13 @@ kind: Secret
metadata: metadata:
name: clearml-conf name: clearml-conf
data: data:
apiserver_key: {{ .Values.clearml.apiserverKey | b64enc }} apiserver_key: {{ if .Values.clearml.apiserverKey }}{{ .Values.clearml.apiserverKey | b64enc | quote }}{{ else }}{{ randAlpha 20 | upper | b64enc | quote }}{{ end }}
apiserver_secret: {{ .Values.clearml.apiserverSecret | b64enc }} apiserver_secret: {{ if .Values.clearml.apiserverSecret }}{{ .Values.clearml.apiserverSecret | b64enc | quote }}{{ else }}{{ randAlpha 49 | upper | b64enc | quote }}{{ end }}
fileserver_key: {{ .Values.clearml.fileserverKey | b64enc }} fileserver_key: {{ if .Values.clearml.fileserverKey }}{{ .Values.clearml.fileserverKey | b64enc | quote }}{{ else }}{{ randAlpha 20 | upper | b64enc | quote }}{{ end }}
fileserver_secret: {{ .Values.clearml.fileserverSecret | b64enc }} fileserver_secret: {{ if .Values.clearml.fileserverSecret }}{{ .Values.clearml.fileserverSecret | b64enc | quote }}{{ else }}{{ randAlpha 49 | upper | b64enc | quote }}{{ end }}
secure_auth_token_secret: {{ .Values.clearml.secureAuthTokenSecret | b64enc }} secure_auth_token_secret: {{ if .Values.clearml.secureAuthTokenSecret }}{{ .Values.clearml.secureAuthTokenSecret | b64enc | quote }}{{ else }}{{ randAlpha 50 | b64enc | quote }}{{ end }}
test_user_key: {{ .Values.clearml.testUserKey | b64enc }} test_user_key: {{ if .Values.clearml.testUserKey }}{{ .Values.clearml.testUserKey | b64enc | quote }}{{ else }}{{ randAlpha 20 | upper | b64enc | quote }}{{ end }}
test_user_secret: {{ .Values.clearml.testUserSecret | b64enc }} test_user_secret: {{ if .Values.clearml.testUserSecret }}{{ .Values.clearml.testUserSecret | b64enc | quote }}{{ else }}{{ randAlpha 50 | upper | b64enc | quote }}{{ end }}
--- ---
{{- if .Values.imageCredentials.enabled }} {{- if .Values.imageCredentials.enabled }}
{{- if not .Values.imageCredentials.existingSecret }} {{- if not .Values.imageCredentials.existingSecret }}

28
charts/clearml/values.yaml
View File

@ -26,24 +26,24 @@ clearml:
cookieDomain: "" cookieDomain: ""
# -- Company name # -- Company name
defaultCompany: "d1bd92a3b039400cbafc60a7a5b1e52b" defaultCompany: "d1bd92a3b039400cbafc60a7a5b1e52b"
# -- Api Server basic auth key # -- Api Server basic auth key (will be randomly generated if empty)
apiserverKey: GGS9F4M6XB2DXJ5AFT9F apiserverKey: ""
# -- Api Server basic auth secret # -- Api Server basic auth secret (will be randomly generated if empty)
apiserverSecret: 2oGujVFhPfaozhpuz2GzQfA5OyxmMsR3WVJpsCR5hrgHFs20PO apiserverSecret: ""
# -- File Server basic auth key # -- File Server basic auth key (will be randomly generated if empty)
fileserverKey: XXCRJ123CEE2KSQ068WO fileserverKey: ""
# -- File Server basic auth secret # -- File Server basic auth secret (will be randomly generated if empty)
fileserverSecret: YIy8EVAC7QCT4FtgitxAQGyW7xRHDZ4jpYlTE7HKiscpORl1hG fileserverSecret: ""
# -- Readiness probe basic auth key # -- Readiness probe basic auth key
readinessprobeKey: GK4PRTVT3706T25K6BA1 readinessprobeKey: GK4PRTVT3706T25K6BA1
# -- Readiness probe basic auth secret # -- Readiness probe basic auth secret
readinessprobeSecret: ymLh1ok5k5xNUQfS944Xdx9xjf0wueokqKM2dMZfHuH9ayItG2 readinessprobeSecret: ymLh1ok5k5xNUQfS944Xdx9xjf0wueokqKM2dMZfHuH9ayItG2
# -- Secure Auth secret # -- Secure Auth secret (will be randomly generated if empty)
secureAuthTokenSecret: ymLh1ok5k5xNUQfS944Xdx9xjf0wueokqKM2dMZfHuH9ayItG2 secureAuthTokenSecret: ""
# -- Test Server basic auth key # -- Test Server basic auth key (will be randomly generated if empty)
testUserKey: "ENP39EQM4SLACGD5FXB7" testUserKey: ""
# -- Test File Server basic auth secret # -- Test File Server basic auth secret (will be randomly generated if empty)
testUserSecret: "lPcm0imbcBZ8mwgO7tpadutiS3gnJD05x9j7afwXPS35IKbpiQ" testUserSecret: ""
# -- Override the API Urls displayed when showing an example of the SDK's clearml.conf configuration # -- Override the API Urls displayed when showing an example of the SDK's clearml.conf configuration
clientConfigurationApiUrl: "" clientConfigurationApiUrl: ""
# -- Override the Files Urls displayed when showing an example of the SDK's clearml.conf configuration # -- Override the Files Urls displayed when showing an example of the SDK's clearml.conf configuration