Merge pull request #29 from philipclaesson/secrets

Environment variables from Kubernetes Secrets
permitio · Mar 16, 2023 · c262efa · c262efa
2 parents 7e9d427 + a69052f
commit c262efa
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 1 deletion.
diff --git a/templates/deployment-client.yaml b/templates/deployment-client.yaml
@@ -51,6 +51,13 @@ spec:
               value: {{ $value | quote }}
           {{- end }}
           {{- end }}
+          {{- if .Values.client.secrets }}
+          envFrom:
+          {{- range $name := .Values.client.secrets }}
+            - secretRef:
+                name: {{ $name }}
+          {{- end }}
+          {{- end }}
           {{- if .Values.client.opaStartupData }}
           volumeMounts:
             - mountPath: /opt/opa/startup-data

diff --git a/templates/deployment-server.yaml b/templates/deployment-server.yaml
@@ -109,6 +109,13 @@ spec:
               value: {{ $value | quote }}
             {{- end }}
             {{- end }}
+          {{- if .Values.server.secrets }}
+          envFrom:
+          {{- range $name := .Values.server.secrets }}
+            - secretRef:
+                name: {{ $name }}
+          {{- end }}
+          {{- end }}
           readinessProbe:
             httpGet:
               path: /healthcheck

diff --git a/values.schema.json b/values.schema.json
@@ -69,8 +69,13 @@
         },
         "extraEnv": {
           "type": "object", "title": "extra environment variables list", "default": null
+        },
+        "secrets": {
+          "type": "array",
+          "title": "name of a kubernetes secret from where to fetch secret environment variables.",
+          "default": null,
+          "items": { "type": "string" }
         }
-
       }
     },
     "client": {
@@ -91,6 +96,12 @@
         },
         "opaStartupData": {
           "type": "object", "title": "client startup data for embedded opa", "default": null
+        },
+        "secrets": {
+          "type": "array",
+          "title": "name of a kubernetes secret from where to fetch secret environment variables.",
+          "default": null,
+          "items": { "type": "string" }
         }
       }
     }