From 7b760f794b25bc5532be85ab386c18dfffc2b9ea Mon Sep 17 00:00:00 2001
From: Agent <agent@openclaw.ai>
Date: Tue, 24 Mar 2026 13:45:14 +0000
Subject: [PATCH] =?UTF-8?q?feat:=20=E6=B7=BB=E5=8A=A0ConfigMap=E7=AE=A1?=
 =?UTF-8?q?=E7=90=86=E9=85=8D=E7=BD=AE=EF=BC=8C=E5=AF=86=E7=A0=81=E4=BD=BF?=
 =?UTF-8?q?=E7=94=A8Secret?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 k8s/configmap.yaml  | 16 ++++++++++++++++
 k8s/deployment.yaml |  9 +++++++++
 k8s/secret.yaml     | 10 ++++++++++
 3 files changed, 35 insertions(+)
 create mode 100644 k8s/configmap.yaml

diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml
new file mode 100644
index 0000000..f8969ed
--- /dev/null
+++ b/k8s/configmap.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: todo-backend-config
+  namespace: drone
+data:
+  SPRING_DATASOURCE_HOST: "postgres.drone.svc.cluster.local"
+  SPRING_DATASOURCE_PORT: "5432"
+  SPRING_DATASOURCE_DB: "building_materials"
+  SPRING_DATASOURCE_USERNAME: "postgres"
+  SPRING_REDIS_HOST: "redis.drone.svc.cluster.local"
+  SPRING_REDIS_PORT: "6379"
+  SPRING_REDIS_PASSWORD: ""
+  JWT_SECRET: "building-materials-secret-key-2024"
+  JWT_EXPIRATION: "7200000"
+  JWT_REFRESH_EXPIRATION: "604800000"
diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index 6812628..03357c6 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -23,6 +23,15 @@ spec:
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
+        envFrom:
+        - configMapRef:
+            name: todo-backend-config
+        env:
+        - name: SPRING_DATASOURCE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: todo-backend-secret
+              key: SPRING_DATASOURCE_PASSWORD
 ---
 apiVersion: v1
 kind: Service
diff --git a/k8s/secret.yaml b/k8s/secret.yaml
index 2566fba..d1128ab 100644
--- a/k8s/secret.yaml
+++ b/k8s/secret.yaml
@@ -1,5 +1,15 @@
 apiVersion: v1
 kind: Secret
+metadata:
+  name: todo-backend-secret
+  namespace: drone
+type: Opaque
+data:
+  # 密码需要base64编码，例如 echo -n 'your_password' | base64
+  SPRING_DATASOURCE_PASSWORD: cG9zdGdyZXM=  # postgres
+---
+apiVersion: v1
+kind: Secret
 metadata:
   name: tencentyun-secret
   namespace: drone