Add additional secret mounts (#63)

Author: abhiyerra

README.md

@@ -39,6 +39,9 @@ jobs:
 name: yieldpayroll
 defaultImage: nginx:latest
 
+secretsAdditionalMounts:
+  "/1password": 1password # path, secret name
+
 # Override with: https://artifacthub.io/packages/helm/bitnami/redis
 redis:
   enabled: true # Enable Redis

charts/tiphys/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: tiphys
 description: A High Level Helm Chart
 type: application
-version: 0.9.29
+version: 0.9.30
 appVersion: 1.16.3
 
 dependencies:

charts/tiphys/templates/app.yaml

@@ -56,6 +56,13 @@ spec:
               mountPath: "/app-secrets"
               readOnly: true
             {{- end }}
+            {{- if $.Values.secretsAdditionalMounts }}
+            {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+            - name: {{ $name }}
+              mountPath: {{ $path | quote }}
+              readOnly: true
+            {{- end }}
+            {{- end }}
       volumes:
         - name: secrets
           secret:
@@ -65,6 +72,13 @@ spec:
           secret:
             secretName: {{ template "opszero.fullname" $ }}-{{ $app.name }}
         {{- end }}
+        {{- if $.Values.secretsAdditionalMounts }}
+        {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+        - name: {{ $name }}
+          secret:
+            secretName: {{ $name }}
+        {{- end }}
+        {{- end }}
 {{- end }}
 {{- end }}
 
@@ -206,6 +220,13 @@ spec:
               mountPath: "/app-secrets"
               readOnly: true
             {{- end }}
+            {{- if $.Values.secretsAdditionalMounts }}
+            {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+            - name: {{ $name }}
+              mountPath: {{ $path | quote }}
+              readOnly: true
+            {{- end }}
+            {{- end }}
         {{- with $app.service.volumeMounts }}
            {{- toYaml . | nindent 12 }}
         {{- end }}
@@ -218,6 +239,13 @@ spec:
           secret:
             secretName: {{ template "opszero.fullname" $ }}-{{ $app.name }}
         {{- end }}
+        {{- if $.Values.secretsAdditionalMounts }}
+        {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+        - name: {{ $name }}
+          secret:
+            secretName: {{ $name }}
+        {{- end }}
+        {{- end }}
         {{- with $app.service.volumes }}
           {{- toYaml . | nindent 8 }}
         {{- end }}
@@ -377,6 +405,13 @@ spec:
                   mountPath: "/app-secrets"
                   readOnly: true
                 {{- end }}
+                {{- if $.Values.secretsAdditionalMounts }}
+                {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+                - name: {{ $name }}
+                  mountPath: {{ $path | quote }}
+                  readOnly: true
+                {{- end }}
+                {{- end }}
                 {{- with $cronjob.volumeMounts }}
                   {{- toYaml . | nindent 16 }}
                 {{- end }}
@@ -389,6 +424,13 @@ spec:
               secret:
                 secretName: {{ template "opszero.fullname" $ }}-{{ $app.name }}
             {{- end }}
+            {{- if $.Values.secretsAdditionalMounts }}
+            {{- range $name, $path := $.Values.secretsAdditionalMounts }}
+            - name: {{ $name }}
+              secret:
+                secretName: {{ $name }}
+            {{- end }}
+            {{- end }}
             {{- with $cronjob.volumes }}
               {{- toYaml . | nindent 12 }}
             {{- end }}