chart: add configurable Secret name and keys for mongodb tls client

Author: poblin-orange

chart/mongodb-probe/templates/configmap.yaml

@@ -8,8 +8,8 @@ data:
     spring.profiles.active=k8s
     
     spring.ssl.bundle.pem.mongodb-ssl-bundle.reload-on-update=true
-    spring.ssl.bundle.pem.mongodb-ssl-bundle.keystore.certificate=file:/workspace/config/tls.crt
-    spring.ssl.bundle.pem.mongodb-ssl-bundle.keystore.private-key=file:/workspace/config/tls.key    
+    spring.ssl.bundle.pem.mongodb-ssl-bundle.truststore.certificate=file:/workspace/config/{{ .Values.mongodb.tlsSecretCaKey }}
+    spring.ssl.bundle.pem.mongodb-ssl-bundle.keystore.private-key=file:/workspace/config/{{ .Values.mongodb.tlsCertKey }}    
     
     spring.data.mongodb.uri={{ .Values.mongodb.uri }}
     spring.data.mongodb.ssl.enabled=true
@@ -21,4 +21,3 @@ data:
     otel.exporter.otlp.endpoint={{ .Values.otlp.tracing.endpoint }}
     otel.service.name={{ .Values.otlp.serviceName }}
     spring.application.name={{ .Values.otlp.serviceName }}
-

chart/mongodb-probe/values.yaml

@@ -83,15 +83,20 @@ volumes:
 - name: config
   configMap:
     name: mongodb-probe-config
-# - name: foo
-#   secret:
-#     secretName: mysecret
-#     optional: false
+    
+- name: tls
+  secret:
+    secretName: {{ .Values.mongodb.tlsSecretname }}
+    optional: false
 
 # Additional volumeMounts on the output Deployment definition.
 volumeMounts:
 - name: config
   mountPath: /workspace/config
+  
+- name: tls
+  mountPath: /workspace/config/tls
+  readOnly: true
 
 # Additional env vars
 envs: []
@@ -105,9 +110,11 @@ tolerations: []
 
 affinity: {}
 
-
 #probe specific default values
 mongodb:
+  tlsSecretname: mysecret
+  tlsSecretCaKey: ca.crt
+  tlsCertKey: tls.crt
   uri: mongodb://admin:password@localhost:27017/mydb 
 
 otlp: