(charts)breaking: support and defaults to external secrets (#30)

* breaking: support and defaults to external secrets

* fixup! breaking: support and defaults to external secrets

* fixup! fixup! breaking: support and defaults to external secrets

* fixup! fixup! fixup! breaking: support and defaults to external secrets

Author: davidcheung

charts/zero-notifcation-service/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.10
+version: 0.1.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/zero-notifcation-service/templates/external-secret.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.externalSecret.enabled -}}
+{{- $fullName := include "zero-notification-service.fullname" . -}}
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: {{ $fullName }}
+spec:
+  backendType: {{ .Values.externalSecret.backendType }}
+  {{- if .Values.externalSecret.dataFrom }}
+  dataFrom:
+    {{- .Values.externalSecret.dataFrom | toYaml | nindent 4 }}
+  {{- end }}
+{{- end }}

charts/zero-notifcation-service/templates/secret.yaml

@@ -1,3 +1,4 @@
+{{- if not .Values.externalSecret.enabled -}}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -9,3 +10,4 @@ data:
   SLACK_API_KEY: {{ .Values.application.slackApiKey | b64enc | quote }}
   TWILIO_ACCOUNT_ID: {{ .Values.application.twilioAccountID | b64enc | quote }}
   TWILIO_AUTH_TOKEN: {{ .Values.application.twilioAuthToken | b64enc | quote }} 
+{{- end }}

charts/zero-notifcation-service/values.yaml

@@ -10,6 +10,12 @@ imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
 
+externalSecret:
+  enabled: true
+  backendType: secretsManager
+  # This is a list of secret names to fetch from AWS secret manager https://github.com/external-secrets/kubernetes-external-secrets
+  dataFrom: []
+
 serviceAccount:
   # Specifies whether a service account should be created
   create: true
@@ -79,11 +85,11 @@ affinity: {}
 # See project readme for more information about config options
 
 application:
-  sendgridApiKey:
-  slackApiKey:
-  twilioAccountID:
-  twilioAuthToken:
-  twilioPhoneNumber:
+  sendgridApiKey: ""
+  slackApiKey: ""
+  twilioAccountID: ""
+  twilioAuthToken: ""
+  twilioPhoneNumber: ""
   gracefulShutdownTimeout: 10
   structuredLogging: true
-  allowEmailToDomains:
+  allowEmailToDomains: []