+ credential_keys, fernet_keys = self._get_keys()
+ credential_files, fernet_files = self._build_files(
+ config, credential_keys, fernet_keys
+ )
+
+ # Add pod secrets
+ fernet_keys_secret_name = f"{self.app.name}-fernet-keys-secret"
+ pod_spec_builder.add_secret(
+ fernet_keys_secret_name,
+ {str(key_id): value for (key_id, value) in enumerate(fernet_keys)},
+ )
+ credential_keys_secret_name = f"{self.app.name}-credential-keys-secret"
+ pod_spec_builder.add_secret(
+ credential_keys_secret_name,
+ {str(key_id): value for (key_id, value) in enumerate(credential_keys)},
+ )
+ mysql_secret_name = f"{self.app.name}-mysql-secret"
+
+ pod_spec_builder.add_secret(
+ mysql_secret_name,
+ {
+ "host": mysql_config.host,
+ "port": str(mysql_config.port),
+ "user": mysql_config.username,
+ "password": mysql_config.password,
+ }
+ if mysql_config.mysql_uri
+ else {
+ "host": self.mysql_client.host,
+ "port": str(self.mysql_client.port),
+ "user": "root",
+ "password": self.mysql_client.root_password,
+ },
+ )
+ keystone_secret_name = f"{self.app.name}-keystone-secret"
+ pod_spec_builder.add_secret(
+ keystone_secret_name,
+ {
+ "db_password": config.keystone_db_password,
+ "admin_username": config.admin_username,
+ "admin_password": config.admin_password,
+ "admin_project": config.admin_project,
+ "service_username": config.service_username,
+ "service_password": config.service_password,
+ "service_project": config.service_project,
+ },
+ )
+ # Build Container