feat: 添加ConfigMap管理配置，密码使用Secret

k8s/configmap.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: todo-backend-config
+  namespace: drone
+data:
+  SPRING_DATASOURCE_HOST: "postgres.drone.svc.cluster.local"
+  SPRING_DATASOURCE_PORT: "5432"
+  SPRING_DATASOURCE_DB: "building_materials"
+  SPRING_DATASOURCE_USERNAME: "postgres"
+  SPRING_REDIS_HOST: "redis.drone.svc.cluster.local"
+  SPRING_REDIS_PORT: "6379"
+  SPRING_REDIS_PASSWORD: ""
+  JWT_SECRET: "building-materials-secret-key-2024"
+  JWT_EXPIRATION: "7200000"
+  JWT_REFRESH_EXPIRATION: "604800000"

k8s/deployment.yaml

@@ -23,6 +23,15 @@ spec:
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
+        envFrom:
+        - configMapRef:
+            name: todo-backend-config
+        env:
+        - name: SPRING_DATASOURCE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: todo-backend-secret
+              key: SPRING_DATASOURCE_PASSWORD
 ---
 apiVersion: v1
 kind: Service

k8s/secret.yaml

@@ -1,5 +1,15 @@
 apiVersion: v1
 kind: Secret
+metadata:
+  name: todo-backend-secret
+  namespace: drone
+type: Opaque
+data:
+  # 密码需要base64编码，例如 echo -n 'your_password' | base64
+  SPRING_DATASOURCE_PASSWORD: cG9zdGdyZXM=  # postgres
+---
+apiVersion: v1
+kind: Secret
 metadata:
   name: tencentyun-secret
   namespace: drone