Skip to content

Commit 8a05bd8

Browse files
committed
Auto-generated/derived key_ids
Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>
1 parent 3ef7b71 commit 8a05bd8

1 file changed

Lines changed: 4 additions & 6 deletions

File tree

docs/openfaas-pro/builder.md

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,7 @@ faas-cli up --remote-builder http://127.0.0.1:8081/build \
113113

114114
Build secrets let you pass private registry tokens, CA certificates, or other sensitive values into a `RUN --mount=type=secret` instruction during a remote build. Secrets are sealed (encrypted) client-side so they are protected in transit, even without TLS.
115115

116-
> Note: `faas-cli` version 0.18.5+ is required for the `secret keygen`, `secret seal`, and `secret unseal` commands.
116+
> Note: `faas-cli` version 0.18.6+ is required for the `secret keygen`, `secret seal`, and `secret unseal` commands.
117117
118118
#### Setup
119119

@@ -127,7 +127,7 @@ kubectl create secret generic -n openfaas \
127127
--from-file key=./key
128128
```
129129

130-
Then set `buildSecrets.privateKeySecret` and `buildSecrets.keyID` in the [helm chart values](https://github.com/openfaas/faas-netes/tree/master/chart/pro-builder) and upgrade the release.
130+
Then set `buildSecrets.privateKeySecret` in the [helm chart values](https://github.com/openfaas/faas-netes/tree/master/chart/pro-builder) and upgrade the release.
131131

132132
Distribute the `key.pub` file to anyone who needs to build with secrets.
133133

@@ -159,8 +159,7 @@ Then publish using the remote builder:
159159
faas-cli publish \
160160
--remote-builder http://127.0.0.1:8081 \
161161
--payload-secret $HOME/.openfaas/payload.txt \
162-
--builder-public-key ./key.pub \
163-
--builder-key-id builder-key-1
162+
--builder-public-key ./key.pub
164163
```
165164

166165
The secrets are sealed automatically by `faas-cli` before sending to the builder.
@@ -171,7 +170,6 @@ You can also seal secrets ahead of time using `faas-cli secret seal` and include
171170

172171
```bash
173172
faas-cli secret seal key.pub \
174-
--key-id builder-key-1 \
175173
--from-literal pip_token=my-secret-token \
176174
--from-file ca.crt=./certs/ca.crt
177175
```
@@ -222,7 +220,7 @@ curl -s http://127.0.0.1:8081/publickey | jq
222220

223221
```json
224222
{
225-
"key_id": "builder-key-1",
223+
"key_id": "3kS3sOxO",
226224
"algorithm": "nacl/box",
227225
"public_key": "3kS3sOxOE4nHPn7+RqFRzWZ8hG5cJ4FPTm6JlQKJHlg="
228226
}

0 commit comments

Comments
 (0)