feat: add ability to use an existing secret

CrowdStrike · Jun 14, 2024 · 7f0c309 · 7f0c309
1 parent 98ee8ea
commit 7f0c309
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 0 deletions.
diff --git a/helm-charts/falcon-integration-gateway/templates/deployment.yaml b/helm-charts/falcon-integration-gateway/templates/deployment.yaml
@@ -42,7 +42,11 @@ spec:
               subPath: config.ini
           envFrom:
           - secretRef:
+              {{- if .Values.falcon.existingSecret }}
+              name: {{ .Values.falcon.existingSecret }}
+              {{- else }}
               name: {{ include "falcon-integration-gateway.fullname" . }}-creds
+              {{- end }}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
           command:

diff --git a/helm-charts/falcon-integration-gateway/templates/secret.yaml b/helm-charts/falcon-integration-gateway/templates/secret.yaml
@@ -1,3 +1,4 @@
+{{- if not .Values.falcon.existingSecret -}}
 apiVersion: v1
 kind: Secret
 type: Opaque
@@ -26,3 +27,4 @@ data:
 {{- if .Values.push.vmware_workspace_one.enabled }}
   WORKSPACEONE_TOKEN: {{ .Values.push.vmware_workspace_one.token | b64enc }}
 {{- end }}
+{{- end }}
diff --git a/helm-charts/falcon-integration-gateway/values.schema.json b/helm-charts/falcon-integration-gateway/values.schema.json
@@ -42,6 +42,9 @@
                         "us-gov-1"
                     ]
                 },
+                "existingSecret": {
+                    "type": "string"
+                },
                 "integration_gateway": {
                     "type": "object",
                     "properties": {

diff --git a/helm-charts/falcon-integration-gateway/values.yaml b/helm-charts/falcon-integration-gateway/values.yaml
@@ -67,6 +67,11 @@ falcon:
   client_secret:
   cloud_region:
 
+  # Use this value if you have an existing secret
+  # defined in your k8s that may contain secrets
+  # for falcon api client id and pw
+  existingSecret: ""
+
   integration_gateway:
     # Configure number of threads that process Falcon Events
     worker_threads: 4