- op: replace
  path: /spec/template/spec/containers/0/env
  value:
    - name: QL3_PROFILE
      value: cluster-admin
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_ENABLED
      value: 'true'
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_COMMAND_FILE
      value: /var/run/qinglong3/worker-credential-command/command.json
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_PEPPER_FILE
      value: /var/run/secrets/qinglong3/worker-credential-executor/pepper
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_CLUSTER_IDENTITY
      valueFrom:
        configMapKeyRef:
          name: ql3-worker-credential-executor-config
          key: cluster-identity
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_STAGE_NAMESPACE
      value: qinglong3-worker-credential-staging
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_NAMESPACE
      valueFrom:
        configMapKeyRef:
          name: ql3-worker-credential-executor-config
          key: target-namespace
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-worker-credential-executor-config
          key: target-secret
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_DEPLOYMENT
      valueFrom:
        configMapKeyRef:
          name: ql3-worker-credential-executor-config
          key: target-deployment
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_DATA_KEY
      value: credential-token
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_DELIVERY_SERVICE_ACCOUNT
      value: ql3-worker-credential-admin
    - name: QL3_WORKER_CREDENTIAL_EXECUTOR_IDENTITY_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-worker-credential-executor-config
          key: identity-secret
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-worker-credential-executor/ca.crt
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_APPLICATION_NAME
      value: qinglong3-worker-credential-executor
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_MAX_CONNECTIONS
      value: '1'
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_PORT
      value: '5432'
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-worker-credential-executor-auth
          key: username
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-worker-credential-executor-auth
          key: password
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/template/spec/volumes/4/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/template/spec/volumes/4/secret/items/0/key
  value: ca.crt