autoapply 0.2.2

Providing SSH keys

To use SSH keys, be sure to specify 600 as default mode when mounting them. For Kubernetes, this would look like this:

containers:
  - name: autoapply-container
    image: pascalgn/autoapply
    env:
      - name: URL
        value: 'git@github.com:pascalgn/hostinfo.git:examples/kubernetes.yaml'
    volumeMounts:
      - name: autoapply-ssh-secret-volume
        mountPath: /home/autoapply/.ssh
volumes:
  - name: autoapply-ssh-secret-volume
    secret:
      secretName: autoapply-ssh-secret-volume
      defaultMode: 600

Encrypted files

You can encrypt the values of Yaml files to protect Kubernetes secrets like SQL database or Docker registry credentials:

$ autoapply crypt -f application-secrets.yaml
Password: my-secret-passphrase

This will delete the original file and create a file application-secrets.yaml.crypt, which can later be decrypted by autoapply when providing the password for the server:

$ mkdir ~/.autoapply
$ echo -n my-secret-passphrase > ~/.autoapply/crypt.key
$ autoapply server https://example.com/repository/application-secrets.yaml