feat: add support for setting different secrets for environment varia…

…bles. (#108) * add support for setting different secrets for environment variables. add support of setting specific environment variables * Fix issue with multiple items into single * Update only set files in envFrom
AzBuilder · Aug 2, 2024 · b7623ab · b7623ab
1 parent 16e3557
commit b7623ab
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 6 deletions.
diff --git a/charts/terrakube/templates/deployment-api.yaml b/charts/terrakube/templates/deployment-api.yaml
@@ -41,8 +41,10 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
         envFrom:
-        - secretRef:
-            name: terrakube-api-secrets
+        {{- range .Values.api.secrets }}
+            - secretRef:
+                name: {{ .name }}
+        {{- end }}
         startupProbe:
           httpGet:
             path: /actuator/health

diff --git a/charts/terrakube/templates/deployment-executor.yaml b/charts/terrakube/templates/deployment-executor.yaml
@@ -41,8 +41,10 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
         envFrom:
-        - secretRef:
-            name: terrakube-executor-secrets
+        {{- range .Values.executor.secrets }}
+            - secretRef:
+                name: {{ .name }}
+        {{- end }}
         startupProbe:
           httpGet:
             path: /actuator/health

diff --git a/charts/terrakube/templates/deployment-registry.yaml b/charts/terrakube/templates/deployment-registry.yaml
@@ -41,8 +41,10 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
         envFrom:
-        - secretRef:
-            name: terrakube-registry-secrets
+        {{- range .Values.registry.secrets }}
+            - secretRef:
+                name: {{ .name }}
+        {{- end }}
         startupProbe:
           httpGet:
             path: /actuator/health

diff --git a/charts/terrakube/values.yaml b/charts/terrakube/values.yaml
@@ -177,6 +177,8 @@ api:
   replicaCount: "1"
   serviceType: "ClusterIP"
   serviceAccountName: ""
+  secrets:
+   - terrakube-api-secrets
   resources: {}
   podLabels: {}
   defaultDatabase: true
@@ -219,6 +221,8 @@ executor:
   replicaCount: "1"
   serviceType: "ClusterIP"
   serviceAccountName: ""
+  secrets:
+   - terrakube-executor-secrets
   resources: {}
   podLabels: {}
   apiServiceUrl: "http://terrakube-api-service:8080"
@@ -237,6 +241,8 @@ registry:
   replicaCount: "1"
   serviceType: "ClusterIP"
   serviceAccountName: ""
+  secrets:
+   - terrakube-registry-secrets
   resources: {}
   podLabels: {}
   securityContext: {}