From 8aef460cf9005423553692e7ac5389cbc7ec4c40 Mon Sep 17 00:00:00 2001
From: Marcus Aurelius <marcus_aurelius_0x@protonmail.com>
Date: Tue, 7 Nov 2023 20:26:20 +0700
Subject: [PATCH] Fix kustomize secrets

---
 .github/workflows/deploy.yaml  |  2 ++
 k8s/secret.properties          | 27 ---------------------------
 k8s/secret.properties.template | 27 +++++++++++++++++++++++++++
 3 files changed, 29 insertions(+), 27 deletions(-)
 delete mode 100644 k8s/secret.properties
 create mode 100644 k8s/secret.properties.template

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index f676352..ac471c5 100755
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -80,6 +80,8 @@ jobs:
           kustomize-version: "4.5.4"
       - name: Update deployment file with image
         run: sed -i 's|<IMAGE>|'${DOCKER_IMAGE}'|' $GITHUB_WORKSPACE/k8s/base/deployment.yaml
+      - name: Update secret properties with injected secrets
+        run: envsubst $GITHUB_WORKSPACE/k8s/secret.properties.template $GITHUB_WORKSPACE/k8s/secret.properties
       - name: Save DigitalOcean kubeconfig with short-lived credentials
         run: doctl kubernetes cluster kubeconfig save --expiry-seconds 600 ${{ secrets.DIGITALOCEAN_CLUSTER_NAME }}
       - name: Deploy to DigitalOcean Kubernetes
diff --git a/k8s/secret.properties b/k8s/secret.properties
deleted file mode 100644
index 9bb4d71..0000000
--- a/k8s/secret.properties
+++ /dev/null
@@ -1,27 +0,0 @@
-AIRTABLE_API_KEY
-
-DISCORD_BOT_TOKEN_BCT_PRICE
-DISCORD_BOT_TOKEN_KLIMA_BOND_ALERTS
-DISCORD_BOT_TOKEN_C3_PRICE
-DISCORD_BOT_TOKEN_KLIMA_PRICE
-DISCORD_BOT_TOKEN_MCO2_PRICE
-DISCORD_BOT_TOKEN_MOSS_PRICE
-DISCORD_BOT_TOKEN_NBO_PRICE
-DISCORD_BOT_TOKEN_NCT_PRICE
-DISCORD_BOT_TOKEN_REBASE
-DISCORD_BOT_TOKEN_STAKING_REWARDS
-DISCORD_BOT_TOKEN_SUPPLY_CC
-DISCORD_BOT_TOKEN_INDEX
-DISCORD_BOT_TOKEN_TREASURY_CARBON
-DISCORD_BOT_TOKEN_TREASURY_MARKET
-DISCORD_BOT_TOKEN_UBO_PRICE
-DISCORD_BOT_TOKEN_RUNWAY
-DISCORD_BOT_TOKEN_RETIREMENT_FEE_INFO
-DISCORD_BOT_TOKEN_DAO_FEE
-DISCORD_BOT_TOKEN_DAO_BALANCE
-DISCORD_BOT_WEBHOOK_REBASE
-DISCORD_WEBHOOK_BROKEN_BOND_ALERT
-
-POLYGONSCAN_API_KEY
-WEB3_PROVIDER_ETH_URL
-WEB3_PROVIDER_POLYGON_URL
diff --git a/k8s/secret.properties.template b/k8s/secret.properties.template
new file mode 100644
index 0000000..cd2ce4e
--- /dev/null
+++ b/k8s/secret.properties.template
@@ -0,0 +1,27 @@
+$AIRTABLE_API_KEY
+
+$DISCORD_BOT_TOKEN_BCT_PRICE
+$DISCORD_BOT_TOKEN_KLIMA_BOND_ALERTS
+$DISCORD_BOT_TOKEN_C3_PRICE
+$DISCORD_BOT_TOKEN_KLIMA_PRICE
+$DISCORD_BOT_TOKEN_MCO2_PRICE
+$DISCORD_BOT_TOKEN_MOSS_PRICE
+$DISCORD_BOT_TOKEN_NBO_PRICE
+$DISCORD_BOT_TOKEN_NCT_PRICE
+$DISCORD_BOT_TOKEN_REBASE
+$DISCORD_BOT_TOKEN_STAKING_REWARDS
+$DISCORD_BOT_TOKEN_SUPPLY_CC
+$DISCORD_BOT_TOKEN_INDEX
+$DISCORD_BOT_TOKEN_TREASURY_CARBON
+$DISCORD_BOT_TOKEN_TREASURY_MARKET
+$DISCORD_BOT_TOKEN_UBO_PRICE
+$DISCORD_BOT_TOKEN_RUNWAY
+$DISCORD_BOT_TOKEN_RETIREMENT_FEE_INFO
+$DISCORD_BOT_TOKEN_DAO_FEE
+$DISCORD_BOT_TOKEN_DAO_BALANCE
+$DISCORD_BOT_WEBHOOK_REBASE
+$DISCORD_WEBHOOK_BROKEN_BOND_ALERT
+
+$POLYGONSCAN_API_KEY
+$WEB3_PROVIDER_ETH_URL
+$WEB3_PROVIDER_POLYGON_URL