refactor(config): secret等敏感数据外移

csm-service/cms-service-user/src/main/resources/application-dev.yml

@@ -4,8 +4,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://mysql.default:3306/iuav_cms_dev?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav_dev
+    password: ${MYSQL_PASSWORD}
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
 #    druid:
@@ -39,23 +39,25 @@ spring:
   redis:
     database: 1
     host: redis.default
-    password: MMC@2022&REDIS
+    password: ${REDIS_PASSWORD}
     port: 6379
   #rabbitMQ
   rabbitmq:
     host: amqp-cn-zvp2ozhnj001.cn-shenzhen.amqp-0.net.mq.amqp.aliyuncs.com
     port: 5672
     username: MjphbXFwLWNuLXp2cDJvemhuajAwMTpMVEFJNEZ6Q3B5ckEzM1BlZ254V1M2WFY=
-    password: RTg3OUMxQzk4NzU0NDQ4RkQ1RDg4MkEzQjY4M0M3MkQxOTM2QkEyNDoxNjUyNDA4NDk0NDg4
+    password: ${RABBITMQ_PASSWORD}
     virtual-host: dev
 
 wx:
+  #公众号
   sub:
     appid: wx5c6a105a0ddca4c5
-    secret: 96c75255dd26f82f8d55e15b59e101c7
+    secret: ${WECHAT_SUB_SECRET}
+  #小程序
   app:
     id: wx18b7883acd204278
-    secret: 28afe74ba373830237a8133a7431ee82
+    secret: ${WECHAT_APPLET_SECRET}
     miniprogram-state: trial
     env-version: trial
     token-path: /userservlet/wechat/getAppletUserAccessToken

csm-service/cms-service-user/src/main/resources/application-local.yml

@@ -4,8 +4,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://rm-wz9dd796t4j1giz6t2o.mysql.rds.aliyuncs.com:3306/iuav_cms_dev?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav_dev
+    password: IUAV_DEV@2023&MYSQL
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
   redis:

csm-service/cms-service-user/src/main/resources/application-prod.yml

@@ -4,8 +4,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://mysql.default:3306/iuav_cms?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav
+    password: ${MYSQL_PASSWORD}
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
 #    druid:
@@ -39,23 +39,23 @@ spring:
   redis:
     database: 5
     host: redis.default
-    password: MMC@2022&REDIS
+    password: ${REDIS_PASSWORD}
     port: 6379
   #rabbitMQ
   rabbitmq:
     host: amqp-cn-zvp2ozhnj001.cn-shenzhen.amqp-0.net.mq.amqp.aliyuncs.com
     port: 5672
     username: MjphbXFwLWNuLXp2cDJvemhuajAwMTpMVEFJNEZ6Q3B5ckEzM1BlZ254V1M2WFY=
-    password: RTg3OUMxQzk4NzU0NDQ4RkQ1RDg4MkEzQjY4M0M3MkQxOTM2QkEyNDoxNjUyNDA4NDk0NDg4
+    password: ${RABBITMQ_PASSWORD}
     virtual-host: prod
 
 wx:
   sub:
     appid: wx5c6a105a0ddca4c5
-    secret: 96c75255dd26f82f8d55e15b59e101c7
+    secret: ${WECHAT_SUB_SECRET}
   app:
     id: wx18b7883acd204278
-    secret: 28afe74ba373830237a8133a7431ee82
+    secret: ${WECHAT_APPLET_SECRET}
     miniprogram-state: formal
     env-version: release
     token-path: /userservlet/wechat/getAppletUserAccessToken

kustomization/base/deployment.yaml

@@ -57,6 +57,36 @@ spec:
                 configMapKeyRef:
                   name: cms-map
                   key: SW_AGENT_NAME
+            - name: MYSQL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: MYSQL_PASSWORD
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: REDIS_PASSWORD
+            - name: OSS_ACCESS_KEY_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: OSS_ACCESS_KEY_SECRET
+            - name: WECHAT_SUB_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: WECHAT_SUB_SECRET
+            - name: WECHAT_APPLET_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: WECHAT_APPLET_SECRET
+            - name: RABBITMQ_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: RABBITMQ_PASSWORD
       volumes:
         - name: log-of-app
           hostPath: