added support for security realm

Author: Barkha Choithani

README.md

@@ -96,6 +96,7 @@ Following table lists all the parameters supported by the latest MarkLogic Helm
 | `auth.adminUsername`                 | Username for default MarkLogic Administrator                                                                   | `admin`                              |
 | `auth.adminPassword`                 | Password for default MarkLogic Administrator                                                                   | ``     
 | `auth.walletPassword`                 | Password for wallet                                                                    | `` 
+| `auth.realm`                 | Realm of the security database                                                                  | `` 
 | `auth.secretName`                    | Kubernetes Secret name for MarkLogic Admin credentials                                                                  | ``  
 | `bootstrapHostName`                 | Host name of MarkLogic bootstrap host                                                                | `""`   
 | `group.name`               | group name for joining MarkLogic cluster                                                                    | `Default`                              |

charts/templates/statefulset.yaml

@@ -119,6 +119,8 @@ spec:
               value: {{ .Values.license.key | quote }}
             - name: LICENSEE
               value: {{ .Values.license.licensee | quote }}
+            - name: REALM
+              value: {{ .Values.auth.realm  | quote }}
           envFrom:
             - configMapRef:
                 name: {{ include "marklogic.fullname" . }}

charts/values.yaml

@@ -68,6 +68,7 @@ auth:
 #  adminUsername: "admin"
 #  adminPassword: ""
 #  walletPassword: ""
+  realm: ""
 
 # Optionally install converters package on MarkLogic
 enableConverters: false

test/template/env_param_templ_test.go

@@ -132,3 +132,41 @@ func TestChartTemplateLicenseValues(t *testing.T) {
 	require.Equal(t, actualLicenseKey, expectedLicenseKey)
 	require.Equal(t, actualLicensee, expectedLicensee)
 }
+
+func TestChartTemplateAuthRealmValue(t *testing.T) {
+
+	// Path to the helm chart we will test
+	helmChartPath, err := filepath.Abs("../../charts")
+	releaseName := "marklogic-container-env-test"
+	t.Log(helmChartPath, releaseName)
+	require.NoError(t, err)
+
+	// Set up the namespace; confirm that the template renders the expected value for the namespace.
+	namespaceName := "marklogic-" + strings.ToLower(random.UniqueId())
+	t.Logf("Namespace: %s\n", namespaceName)
+
+	// Setup the args for helm install
+	options := &helm.Options{
+		SetValues: map[string]string{
+			"image.repository":    "marklogicdb/marklogic-db",
+			"image.tag":           "latest",
+			"persistence.enabled": "false",
+			"auth.realm":          "public",
+		},
+		KubectlOptions: k8s.NewKubectlOptions("", "", namespaceName),
+	}
+
+	// render the tempate
+	output := helm.RenderTemplate(t, options, helmChartPath, releaseName, []string{"templates/statefulset.yaml"})
+
+	var statefulset appsv1.StatefulSet
+	helm.UnmarshalK8SYaml(t, output, &statefulset)
+
+	// Verify the name and namespace matches
+	require.Equal(t, namespaceName, statefulset.Namespace)
+
+	// Verify the value of security realm
+	expectedRealm := "public"
+	actualRealm := statefulset.Spec.Template.Spec.Containers[0].Env[6].Value
+	require.Equal(t, actualRealm, expectedRealm)
+}