Use Secret for private git repository

[keigohtr]

Motivation

For GitHub Enterprise.

Goal

• Use Secret to store SSH key

Implementation

• Add useSecret field to models/application table.
• Allow 1 secret per 1 application.
  • Register the followings.
    • SSH key (id_rsa)
    • private git hostname (config)
    • private git username (config)
    • private git port number (config)
  • Mount Secret to /root/.ssh/.
  • Store id_rsa and config files with mode=600
• testing

config

Host {{ hostname }}
  User {{ username }}
  Port {{ port number }}
  HostName {{ hostname }}
  IdentityFile /root/.ssh/id_rsa
  StrictHostKeyChecking no

id_rsa

-----BEGIN RSA PRIVATE KEY-----
{{ SSH key }}
-----END RSA PRIVATE KEY-----

Reference

• https://kubernetes.io/docs/concepts/configuration/secret/