Merge pull request #523 from helgi/minio-from-api

ref(scheduler): fetch object storage credentials from API instead of local secret

Author: helgi

rootfs/scheduler/__init__.py

@@ -968,14 +968,11 @@ def _healthcheck(self, controller, path='/', port=8080, delay=30, timeout=1):
     # http://kubernetes.io/v1.1/docs/api-reference/v1/definitions.html#_v1_secret
 
     def _create_minio_secret(self, namespace):
-        with open("/var/run/secrets/deis/minio/user/access-key-id", "rb") as the_file:
-            secretId = the_file.read()
-        with open("/var/run/secrets/deis/minio/user/access-secret-key", "rb") as the_file:
-            secretKey = the_file.read()
+        secret = self._get_secret('deis', 'minio-user').json()  # fetch from deis namespace
 
         data = {
-            'access-key-id': secretId,
-            'access-secret-key': secretKey
+            'access-key-id': base64.b64decode(secret['data']['access-key-id']),
+            'access-secret-key': base64.b64decode(secret['data']['access-secret-key'])
         }
         self._create_secret(namespace, 'minio-user', data)