Page History

...

1. Setup postgresql user password. 

   Expand
   title Create k8s secret survey-postgres
   apiVersion: v1 kind: Secret metadata: name: survey-postgres namespace: <release-namespace> annotations: "helm.sh/resource-policy": keep type: Opaque data: postgresql-password: <random-str-in-base64> postgresql-postgres-password: <random-str-in-base64>

   kubectl -n $NS create secret generic survey-postgres --from-literal=postgresql-password=$PSQL_PSWD --from-literal=postgresql-postgres-password=$PSQL_PSWD

   • root password is postgresql-postgres-password secret key
   • service user password postgresql-password secret key; username survey
2. Generate django secret-key. 

   Expand
   title Create k8s secret survey-secrets key secret-key
   apiVersion: v1 kind: Secret metadata: name: survey-secrets namespace: <release-namespace> annotations: "helm.sh/resource-policy": keep type: Opaque data: cookie-salt: <random-str-in-base64> secret-key: <random-str-in-base64>

   • python3 -c "import secrets; print(secrets.token_urlsafe())" | base64 OR
   • pip install django && python -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())' | base64
   • copy output and set as secret
3. Generate survey cookie salt: secret survey-secrets key cookie-salt
   • python3 -c "import secrets; print(secrets.token_urlsafe()[0:10])" | base64 OR
   • python -c 'import uuid; print(uuid.uuid4().hex[0:10])' | base64
   • copy output and set as secret

4. Expand
   title Create default configmap prozorro-<env>-auction-survey-id-config
   kind: ConfigMap apiVersion: v1 metadata: name: prozorro-<env>-auction-survey-id-config namespace: prozorro-<env> labels: app.kubernetes.io/component: survey-id-config annotations: app: auction-survey-id-config data: survey_id: dummy-id

After survey app deployed

...