feat(volumes): support for secrets mounted from volumes

neverendingsupport · May 23, 2024 · ac1c72d · ac1c72d
1 parent b44387d
commit ac1c72d
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 4 deletions.
diff --git a/charts/nes-node-web/Chart.yaml b/charts/nes-node-web/Chart.yaml
@@ -3,4 +3,4 @@ name: nes-node-web
 description: A Helm chart for NES Node apps on Kubernetes
 
 type: application
-version: 0.1.6
+version: 0.1.7
diff --git a/charts/nes-node-web/templates/deployment.yaml b/charts/nes-node-web/templates/deployment.yaml
@@ -26,6 +26,12 @@ spec:
         - name: {{ include "nes-node-web.fullname" . }}
           image: "{{ .Values.image.repository }}:{{ required "A valid App Version must be provided to .Values.version" .Values.version }}"
           imagePullPolicy: Always
+          {{- if .Values.volumes }}
+          volumeMounts:
+          {{- range $key, $value := .Values.volumes.mounts }}
+          - {{ $value | toYaml | indent 12 | trim }}
+          {{- end }}  
+          {{- end }}  
           resources:
             limits:
               memory: '300Mi'
@@ -62,5 +68,13 @@ spec:
                 fieldPath: metadata.name
           {{- range $key, $value := .Values.env }}
           - {{ $value | toYaml | indent 12 | trim }}
-          {{ end }}  
-
+          {{ end }} 
+
+      volumes:
+        {{- with .Values.volumes }}
+        {{- range .definitions }}
+          - name: {{ .name }}
+            secret:
+              secretName: {{ .secret.secretName }}
+        {{- end }}
+        {{- end }}
diff --git a/charts/nes-node-web/values.yaml b/charts/nes-node-web/values.yaml
@@ -35,4 +35,15 @@ deployment:
 #     valueFrom:
 #       secretKeyRef:
 #         name: some-secret
-#         key: svc-env-value
+#         key: svc-env-value
+
+# volumes:
+#   mounts:
+#     - name: example-volume
+#       mountPath: /home/node/app/example.json
+#       subPath: secret-subprop
+#       readOnly: true
+#   definitions: 
+#     - name: example-volume
+#       secret: 
+#         secretName: secret-name