Use configmap instead of secrets

.gitignore

@@ -1,3 +1,4 @@
+.DS_Store
 *~
 *.swp
 *.pyc

concourse/prepare-deployment-resources.yaml

@@ -18,4 +18,6 @@ run:
     - -exc
     - |
       VERSION=$( cat commit.sha )
+      cat k8s/configmap.yaml >> deploy-confs/prod.yaml
+      echo "---"
       sed "s/IMAGE_TAG/$VERSION/g" k8s/deployments.yaml >> deploy-confs/prod.yaml

k8s/configmap.yaml

@@ -0,0 +1,25 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: astrojs-nginx-ctmpls
+  namespace: default
+data:
+  default.conf.template: |
+    server {
+        listen       80;
+        listen  [::]:80;
+        server_name  localhost;
+
+        expires 10d;
+        add_header Cache-Control "public";
+
+        location / {
+            root   /usr/share/nginx/html;
+            index  index.html index.htm;
+        }
+
+        error_page   500 502 503 504  /50x.html;
+        location = /50x.html {
+            root   /usr/share/nginx/html;
+        }
+    }

k8s/deployments.yaml

@@ -71,8 +71,8 @@ spec:
           persistentVolumeClaim:
             claimName: astrojs-cache
         - name: nginx-conf-templates
-          secret:
+          configMap:
-            secretName: nginx-conf-templates
+            name: astrojs-nginx-ctmpls
 
 ---