Add paremeter for signing key secret used by dashboard

Allows users to select the secret with the signing keys or leave blank
to have the keys generated automatically by the dashboard.

Signed-off-by: Han Verstraete (OpenFaaS Ltd) <[email protected]>

Author: welteki

chart/openfaas/README.md

@@ -546,6 +546,7 @@ yaml) |
 | `dashboard.publicURL` | URL used to expose the dashboard. Needs to be a fully qualified domain name (FQDN) | `https://dashboard.example.com` |
 | `dashboard.replicas` | Replicas of the dashboard | `1` |
 | `dashboard.resources` | Resource limits and requests for the dashboard pods | See [values.yaml](./values.yaml) |
+| `dashboard.signingKeySecret` | Name of signing key secret for sessions. Can be left blank for development, see https://docs.openfaas.com/openfaas-pro/dashboard/ for production and staging. | `""` |
 
 ### OIDC / SSO (OpenFaaS Pro)
 

chart/openfaas/templates/dashboard-dep.yaml

@@ -32,9 +32,11 @@ spec:
       - name: license
         secret:
           secretName: openfaas-license
+      {{- if .Values.dashboard.signingKeySecret }}
       - name: dashboard-jwt
         secret:
-          secretName: dashboard-jwt
+          secretName: {{ .Values.dashboard.signingKeySecret }}
+      {{- end }}
       containers:
       - name:  dashboard
         resources:
@@ -79,13 +81,14 @@ spec:
           readOnly: true
           mountPath: "/var/secrets/gateway"
         {{- end }}
-
         - name: license
           readOnly: true
           mountPath: "/var/secrets/license"
+        {{- if .Values.dashboard.signingKeySecret }}
         - name: dashboard-jwt
           readOnly: true
           mountPath: "/var/secrets/dashboard-jwt"
+        {{- end }}
 
     {{- with .Values.nodeSelector }}
       nodeSelector:

chart/openfaas/values.yaml

@@ -49,8 +49,11 @@ autoscaler:
 ## To use with port-forwarding, set publicURL to 
 ## http://127.0.0.1
 dashboard:
-  image: ghcr.io/openfaasltd/openfaas-dashboard:0.1.1
+  image: ghcr.io/openfaasltd/openfaas-dashboard:0.2.0
   publicURL: https://dashboard.example.com
+  # Name of signing key secret for sessions.
+  # Leave blank for development, see https://docs.openfaas.com/openfaas-pro/dashboard/ for production and staging.
+  signingKeySecret: ""
   replicas: 1
   enabled: false
   resources: