deploy: Add script to inject imagePullSecrets to serviceaccount

This patch adds a utility script that is called as a part of
`build-helm-installer` to inject `imagePullSecrets` from
`ceph-csi-operator` values to `serviceaccounts`

Signed-off-by: Niraj Yadav <niryadav@redhat.com>

Author: black-dragon74

Makefile

@@ -204,6 +204,7 @@ build-helm-installer: manifests generate kustomize helmify ## Generate helm char
 	cd build && echo "$$BUILD_INSTALLER_OVERLAY" > kustomization.yaml
 	cd build && $(KUSTOMIZE) edit add resource ../config/default/
 	$(KUSTOMIZE) build build | $(HELMIFY) -image-pull-secrets deploy/charts/ceph-csi-operator
+	hack/patch-sa-with-imgpullsecrets.sh deploy/charts/ceph-csi-operator
 	rm -rf build
 
 .PHONY: build-multifile-installer

deploy/charts/ceph-csi-operator/templates/serviceaccount.yaml

@@ -6,6 +6,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.cephfsCtrlpluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -15,6 +19,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.cephfsNodepluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -24,6 +32,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.controllerManager.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -33,6 +45,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.nfsCtrlpluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -42,6 +58,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.nfsNodepluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -51,6 +71,10 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.rbdCtrlpluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -60,3 +84,7 @@ metadata:
   {{- include "ceph-csi-operator.labels" . | nindent 4 }}
   annotations:
     {{- toYaml .Values.rbdNodepluginSa.serviceAccount.annotations | nindent 4 }}
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}

hack/patch-sa-with-imgpullsecrets.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# DO NOT run this script on its own
+# It will append the required template multiple times
+# It is intended to be ran as a part of generating heml charts using helmify
+
+set -e
+
+CHART_DIR=$1
+SA_FILE="${CHART_DIR}/templates/serviceaccount.yaml"
+
+if [ ! -f "$SA_FILE" ]; then
+  echo "No serviceaccount.yaml template in $CHART_DIR, nothing to do!"
+  exit 1
+fi
+
+TEMPLATE_SNIPPET=$(
+  cat <<'EOF'
+{{- with .Values.imagePullSecrets }}
+imagePullSecrets:
+{{ toYaml . | indent 2 }}
+{{- end }}
+EOF
+)
+
+echo "Patching $SA_FILE for imagePullSecrets"
+
+awk -v snippet="$TEMPLATE_SNIPPET" '
+  # Before printing a separator, print the snippet
+  /^---/ { print snippet }
+
+  # Print the current line
+  { print }
+
+  # At the end of the file, print the snippet for the last section
+  END { print snippet }
+' "$SA_FILE" >"${SA_FILE}.tmp"
+
+mv "${SA_FILE}.tmp" "$SA_FILE"
+
+echo "Patched $SA_FILE successfully"
+exit 0