Skip to content

Commit 237a68f

Browse files
docs: how to create the shared secret
1 parent 59f8566 commit 237a68f

1 file changed

Lines changed: 13 additions & 3 deletions

File tree

README.md

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ provider:
7777
webhook:
7878
image:
7979
repository: ghcr.io/theoutdoorprogrammer/external-dns-firewalla-webhook
80-
tag: 1.0.0
80+
tag: 1.1.0
8181
env:
8282
- name: FIREWALLA_HOST
8383
value: "192.168.229.1"
@@ -89,8 +89,13 @@ provider:
8989
value: "8888"
9090
- name: METRICS_PORT
9191
value: "8080"
92-
- name: SHARED_SECRET
93-
value: "your-secure-shared-secret-here" # Must match Firewalla shared secret
92+
- name: SHARED_SECRET # You can use a secret reference, must match Firewalla shared secret (recommended)
93+
valueFrom:
94+
secretKeyRef:
95+
name: firewalla-webhook-secret
96+
key: shared-secret
97+
# - name: SHARED_SECRET # Or manually set the shared secret (not recommended)
98+
# value: "your-secure-shared-secret-here"
9499
livenessProbe:
95100
httpGet:
96101
path: /health
@@ -147,6 +152,11 @@ rbac:
147152
create: true
148153
```
149154

155+
Heres a quick way to create the above secret if you use the recommended approach:
156+
```bash
157+
kubectl create secret generic firewalla-webhook-secret --from-literal=shared-secret="{your-secure-shared-secret-here}"
158+
```
159+
150160
## Configuration
151161

152162
### Webhook Provider (Firewalla)

0 commit comments

Comments
 (0)