refactor(config): secret等敏感数据外移

kustomization/base/deployment.yaml

@@ -53,10 +53,40 @@ spec:
                 configMapKeyRef:
                   name: ims-map
                   key: SW_AGENT_NAME
-      volumes:
-        - name: log-of-app
-          hostPath:
-            path: /var/log/app
-        - name: localtime
-          hostPath:
-            path: /etc/localtime
\ No newline at end of file
+            - name: MYSQL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: MYSQL_PASSWORD
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: REDIS_PASSWORD
+            - name: OSS_ACCESS_KEY_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: OSS_ACCESS_KEY_SECRET
+            - name: WECHAT_SUB_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: WECHAT_SUB_SECRET
+            - name: WECHAT_APPLET_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: WECHAT_APPLET_SECRET
+            - name: RABBITMQ_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: iuav-secret
+                  key: RABBITMQ_PASSWORD
+  volumes:
+    - name: log-of-app
+      hostPath:
+        path: /var/log/app
+    - name: localtime
+      hostPath:
+        path: /etc/localtime
\ No newline at end of file

release-service/src/main/resources/application-dev.yml

@@ -11,8 +11,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://mysql.default:3306/iuav_ims_dev?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav_dev
+    password: ${MYSQL_PASSWORD}
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
   #    druid:
@@ -53,7 +53,7 @@ spring:
   redis:
     database: 1
     host: redis.default
-    password: MMC@2022&REDIS
+    password: ${REDIS_PASSWORD}
     port: 6379
     #连接池
     lettuce:
@@ -73,7 +73,7 @@ spring:
     host: amqp-cn-zvp2ozhnj001.cn-shenzhen.amqp-0.net.mq.amqp.aliyuncs.com
     port: 5672
     username: MjphbXFwLWNuLXp2cDJvemhuajAwMTpMVEFJNEZ6Q3B5ckEzM1BlZ254V1M2WFY=
-    password: RTg3OUMxQzk4NzU0NDQ4RkQ1RDg4MkEzQjY4M0M3MkQxOTM2QkEyNDoxNjUyNDA4NDk0NDg4
+    password: ${RABBITMQ_PASSWORD}
     virtual-host: dev
 
 #eureka   eureka.client.register-with-eureka=true

release-service/src/main/resources/application-local.yml

@@ -11,8 +11,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://rm-wz9dd796t4j1giz6t2o.mysql.rds.aliyuncs.com:3306/iuav_ims_dev?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav_dev
+    password: IUAV_DEV@2023&MYSQL
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
     druid:
@@ -73,7 +73,7 @@ spring:
     host: amqp-cn-zvp2ozhnj001.cn-shenzhen.amqp-0.net.mq.amqp.aliyuncs.com
     port: 5672
     username: MjphbXFwLWNuLXp2cDJvemhuajAwMTpMVEFJNEZ6Q3B5ckEzM1BlZ254V1M2WFY=
-    password: RTg3OUMxQzk4NzU0NDQ4RkQ1RDg4MkEzQjY4M0M3MkQxOTM2QkEyNDoxNjUyNDA4NDk0NDg4
+    password: ${RABBITMQ_PASSWORD}
     virtual-host: /
 
 #eureka   eureka.client.register-with-eureka=true

release-service/src/main/resources/application-prod.yml

@@ -11,8 +11,8 @@ spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
     url: jdbc:mysql://mysql.default:3306/iuav_ims?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8&useSSL=false&serverTimezone=GMT%2B8
-    username: tmj
-    password: MMC@2022&MYSQL
+    username: iuav
+    password: ${MYSQL_PASSWORD}
     #   Druid数据源配置
     type: com.alibaba.druid.pool.DruidDataSource
   #    druid:
@@ -53,7 +53,7 @@ spring:
   redis:
     database: 5
     host: redis.default
-    password: MMC@2022&REDIS
+    password: ${REDIS_PASSWORD}
     port: 6379
     #连接池
     lettuce:
@@ -72,7 +72,7 @@ spring:
     host: amqp-cn-zvp2ozhnj001.cn-shenzhen.amqp-0.net.mq.amqp.aliyuncs.com
     port: 5672
     username: MjphbXFwLWNuLXp2cDJvemhuajAwMTpMVEFJNEZ6Q3B5ckEzM1BlZ254V1M2WFY=
-    password: RTg3OUMxQzk4NzU0NDQ4RkQ1RDg4MkEzQjY4M0M3MkQxOTM2QkEyNDoxNjUyNDA4NDk0NDg4
+    password: ${RABBITMQ_PASSWORD}
     virtual-host: prod
 
 #eureka   eureka.client.register-with-eureka=true