Also pass db-password secret to spring backend
Signed-off-by: Friedrich Greiner <greinerfriedrich@gmail.com>
This commit is contained in:
parent
decd790f19
commit
0fa30766c2
@ -0,0 +1,30 @@
|
|||||||
|
package com.company.project.configuration;
|
||||||
|
|
||||||
|
import java.io.IOException;
|
||||||
|
import java.nio.charset.Charset;
|
||||||
|
|
||||||
|
import org.springframework.boot.SpringApplication;
|
||||||
|
import org.springframework.boot.env.EnvironmentPostProcessor;
|
||||||
|
import org.springframework.core.env.ConfigurableEnvironment;
|
||||||
|
import org.springframework.core.io.FileSystemResource;
|
||||||
|
import org.springframework.core.io.Resource;
|
||||||
|
import org.springframework.util.StreamUtils;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Read property from docker secret file.
|
||||||
|
*/
|
||||||
|
public class DockerSecretsProcessor implements EnvironmentPostProcessor {
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public void postProcessEnvironment(ConfigurableEnvironment environment, SpringApplication application) {
|
||||||
|
Resource resource = new FileSystemResource("/run/secrets/db-password");
|
||||||
|
if (resource.exists() && System.getProperty("MYSQL_PASSWORD") == null) {
|
||||||
|
try {
|
||||||
|
String dbPassword = StreamUtils.copyToString(resource.getInputStream(), Charset.defaultCharset());
|
||||||
|
System.setProperty("MYSQL_PASSWORD", dbPassword);
|
||||||
|
} catch (IOException e) {
|
||||||
|
throw new RuntimeException(e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
@ -0,0 +1 @@
|
|||||||
|
org.springframework.boot.env.EnvironmentPostProcessor=com.company.project.configuration.DockerSecretsProcessor
|
@ -3,6 +3,8 @@ services:
|
|||||||
backend:
|
backend:
|
||||||
build: backend
|
build: backend
|
||||||
restart: always
|
restart: always
|
||||||
|
secrets:
|
||||||
|
- db-password
|
||||||
environment:
|
environment:
|
||||||
MYSQL_HOST: db
|
MYSQL_HOST: db
|
||||||
networks:
|
networks:
|
||||||
|
Loading…
Reference in New Issue
Block a user