coroot-ee: license key from a Secret

Author: apetruhin

api/v1/coroot_types.go

@@ -21,8 +21,10 @@ type CommunityEditionSpec struct {
 type EnterpriseEditionSpec struct {
 	// License key for Coroot Enterprise Edition.
 	// You can get the Coroot Enterprise license and start a free trial anytime through the Coroot Customer Portal: https://coroot.com/account.
-	LicenseKey string    `json:"licenseKey,omitempty"`
-	Image      ImageSpec `json:"image,omitempty"`
+	LicenseKey string `json:"licenseKey,omitempty"`
+	// Secret containing the license key.
+	LicenseKeySecret *corev1.SecretKeySelector `json:"licenseKeySecret,omitempty"`
+	Image            ImageSpec                 `json:"image,omitempty"`
 }
 
 type AgentsOnlySpec struct {

api/v1/zz_generated.deepcopy.go

@@ -4531,6 +4531,30 @@ spec:
                       License key for Coroot Enterprise Edition.
                       You can get the Coroot Enterprise license and start a free trial anytime through the Coroot Customer Portal: https://coroot.com/account.
                     type: string
+                  licenseKeySecret:
+                    description: Secret containing the license key.
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        default: ""
+                        description: |-
+                          Name of the referent.
+                          This field is effectively required, but due to backwards compatibility is
+                          allowed to be empty. Instances of this type with an empty value here are
+                          almost certainly wrong.
+                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
                 type: object
               env:
                 description: Environment variables for Coroot.

config/crd/coroot.com_coroots.yaml

@@ -196,9 +196,15 @@ func (r *CorootReconciler) corootStatefulSet(cr *corootv1.Coroot) *appsv1.Statef
 	}
 
 	image := r.getAppImage(cr, AppCorootCE)
-	if cr.Spec.EnterpriseEdition != nil {
+	if ee := cr.Spec.EnterpriseEdition; ee != nil {
 		image = r.getAppImage(cr, AppCorootEE)
-		env = append(env, corev1.EnvVar{Name: "LICENSE_KEY", Value: cr.Spec.EnterpriseEdition.LicenseKey})
+		licenseKey := corev1.EnvVar{Name: "LICENSE_KEY"}
+		if ee.LicenseKeySecret != nil {
+			licenseKey.ValueFrom = &corev1.EnvVarSource{SecretKeyRef: ee.LicenseKeySecret}
+		} else {
+			licenseKey.Value = ee.LicenseKey
+		}
+		env = append(env, licenseKey)
 	}
 
 	if ep := cr.Spec.ExternalPrometheus; ep != nil {