Merge pull request #106 from gimlet2/secrets

Add Secrets support

Author: andresmgot

lib/deploy.js

@@ -41,7 +41,8 @@ function getFunctionDescription(
     eventTrigger,
     eventSchedule,
     timeout,
-    port
+    port,
+    secrets
 ) {
   const funcs = {
     apiVersion: 'k8s.io/v1',
@@ -79,7 +80,7 @@ function getFunctionDescription(
   if (labels) {
     funcs.metadata.labels = labels;
   }
-  if (image || env || memory) {
+  if (image || env || memory || secrets) {
     const container = {
       name: funcName,
     };
@@ -113,6 +114,19 @@ function getFunctionDescription(
     funcs.spec.template = {
       spec: { containers: [container] },
     };
+    if (secrets !== undefined && secrets.length > 0) {
+      if (container.volumeMounts === undefined) {
+        container.volumeMounts = [];
+      }
+      if (funcs.spec.template.spec.volumes === undefined) {
+        funcs.spec.template.spec.volumes = [];
+      }
+      secrets.forEach(secret => {
+        container.volumeMounts.push({ name: `${secret}-vol`, mountPath: `/${secret}` });
+        funcs.spec.template.spec.volumes
+          .push({ name: `${secret}-vol`, secret: { secretName: secret } });
+      });
+    }
   }
   switch (eventType) {
     case 'http':
@@ -337,7 +351,8 @@ function deploy(functions, runtime, options) {
               event.trigger,
               event.schedule,
               description.timeout || opts.timeout,
-              description.port
+              description.port,
+              description.secrets
           );
           let deploymentPromise = null;
           let redeployed = false;

test/kubelessDeploy.test.js

@@ -323,6 +323,40 @@ describe('KubelessDeploy', () => {
         kubelessDeploy.deployFunction()
       ).to.be.fulfilled;
     });
+    it('should deploy a function with Secrets', () => {
+      const serverlessWithSecrets = _.cloneDeep(serverlessWithFunction);
+      serverlessWithSecrets.service.functions.myFunction.secrets = ['secret1'];
+      kubelessDeploy = instantiateKubelessDeploy(
+        pkgFile,
+        depsFile,
+        serverlessWithSecrets
+      );
+      mocks.createDeploymentNocks(config.clusters[0].cluster.server, functionName, {
+        deps: '',
+        function: functionText,
+        handler: serverlessWithFunction.service.functions[functionName].handler,
+        runtime: serverlessWithFunction.service.provider.runtime,
+        type: 'HTTP',
+      }, {
+        deps: '',
+        function: functionText,
+        handler: serverlessWithFunction.service.functions[functionName].handler,
+        runtime: serverlessWithFunction.service.provider.runtime,
+        type: 'HTTP',
+        template: {
+          spec: {
+            containers: [{
+              name: functionName,
+              volumeMounts: [{ name: 'secret1-vol', mountPath: '/secret1' }],
+            }],
+            volumes: [{ name: 'secret1-vol', secret: { secretName: 'secret1' } }],
+          },
+        },
+      });
+      return expect( // eslint-disable-line no-unused-expressions
+        kubelessDeploy.deployFunction()
+      ).to.be.fulfilled;
+    });
 
     it('should wait until a deployment is ready', () => {
       const funcSpec = {