From 51bf1fa11091aa6fea2af2cb9ce576b662933338 Mon Sep 17 00:00:00 2001
From: davidfrickert <david.frickert@protonmail.com>
Date: Fri, 16 May 2025 22:07:14 +0200
Subject: [PATCH] add very simplistic charts to easily deploy sm and vss

---
 charts/service-monitor/Chart.yaml              |  7 +++++++
 .../templates/servicemonitor.yaml              | 18 ++++++++++++++++++
 charts/service-monitor/values.yaml             |  3 +++
 charts/vault-static-secret/Chart.yaml          |  7 +++++++
 charts/vault-static-secret/templates/vss.yaml  | 15 +++++++++++++++
 charts/vault-static-secret/values.yaml         |  6 ++++++
 6 files changed, 56 insertions(+)
 create mode 100644 charts/service-monitor/Chart.yaml
 create mode 100644 charts/service-monitor/templates/servicemonitor.yaml
 create mode 100644 charts/service-monitor/values.yaml
 create mode 100644 charts/vault-static-secret/Chart.yaml
 create mode 100644 charts/vault-static-secret/templates/vss.yaml
 create mode 100644 charts/vault-static-secret/values.yaml

diff --git a/charts/service-monitor/Chart.yaml b/charts/service-monitor/Chart.yaml
new file mode 100644
index 0000000..6575053
--- /dev/null
+++ b/charts/service-monitor/Chart.yaml
@@ -0,0 +1,7 @@
+apiVersion: v2
+name: service-monitor
+description: Supports deploying ServiceMonitor resources
+
+type: application
+version: 0.2.0
+appVersion: "1.0"
\ No newline at end of file
diff --git a/charts/service-monitor/templates/servicemonitor.yaml b/charts/service-monitor/templates/servicemonitor.yaml
new file mode 100644
index 0000000..7f66bc9
--- /dev/null
+++ b/charts/service-monitor/templates/servicemonitor.yaml
@@ -0,0 +1,18 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    name: {{ .Release.Name }}-servicemonitor
+    release: {{ .Release.Namespace }}
+  name: {{ .Release.Name }}-servicemonitor
+spec:
+  endpoints:
+  - port: {{ .Values.port }}
+    interval: {{ .Values.interval }}
+  namespaceSelector:
+    matchNames:
+    - {{ .Release.Namespace }}
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: {{ .Values.instanceLabel }}
diff --git a/charts/service-monitor/values.yaml b/charts/service-monitor/values.yaml
new file mode 100644
index 0000000..d2b20f7
--- /dev/null
+++ b/charts/service-monitor/values.yaml
@@ -0,0 +1,3 @@
+port:
+instanceLabel:
+interval: 30s
\ No newline at end of file
diff --git a/charts/vault-static-secret/Chart.yaml b/charts/vault-static-secret/Chart.yaml
new file mode 100644
index 0000000..be582e9
--- /dev/null
+++ b/charts/vault-static-secret/Chart.yaml
@@ -0,0 +1,7 @@
+apiVersion: v2
+name: vault-static-secret
+description: Supports deploying VaultStaticSecret resources
+
+type: application
+version: 0.1.0
+appVersion: "1.0"
\ No newline at end of file
diff --git a/charts/vault-static-secret/templates/vss.yaml b/charts/vault-static-secret/templates/vss.yaml
new file mode 100644
index 0000000..cc7b0cc
--- /dev/null
+++ b/charts/vault-static-secret/templates/vss.yaml
@@ -0,0 +1,15 @@
+{{- range .Values.secrets }}
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: {{ .name }}
+spec:
+  type: kv-v2
+  mount: {{ $.Values.mount }}
+  path: {{ .path }}
+  destination:
+    name: {{ .name }}
+    create: true
+  refreshAfter: {{ .refreshAfter | default "30s" }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/vault-static-secret/values.yaml b/charts/vault-static-secret/values.yaml
new file mode 100644
index 0000000..1332b2c
--- /dev/null
+++ b/charts/vault-static-secret/values.yaml
@@ -0,0 +1,6 @@
+mount: kubernetes
+secrets: []
+# - name: a-test-secret
+#   path: tools/a-test-secret
+# (optional, default is 30s)
+#   refreshAfter: 30s
\ No newline at end of file