Moved var and secret support to common

2021-08-05 11:48:05 +02:00
parent 164bfec8b3
commit 4352af0abc
18 changed files with 45 additions and 38 deletions
@@ -0,0 +1,21 @@
+{{- define "common.envFromRef.tpl" -}}
+{{- if or (or (or (.Values.vars) (.Values.secretEnabled)) .Values.sealedSecrets) .Values.secretName }}
+envFrom: &envFrom
+{{- if .Values.vars }}
+  - configMapRef:
+      name: {{ template "common.robustName" .Release.Name }}
+{{- end }}
+{{- if .Values.secretEnabled }}
+  - secretRef:
+      name: {{ include "common.robustName" $.Release.Name }}
+{{- end }}
+{{- if .Values.secretName }}
+  - secretRef:
+      name: {{ .Values.secretName }}
+{{- end }}
+{{- if .Values.sealedSecrets }}
+  - secretRef:
+      name: {{ template "common.robustName" .Release.Name }}
+{{- end }}
+{{- end }}
+{{- end }}
@@ -0,0 +1,15 @@
+{{- define "common.fileSecret.tpl" -}}
+{{- range .Values.fileSecrets }}
+---
+kind: Secret
+apiVersion: v1
+type: Opaque
+metadata:
+  name: {{ printf "%s-%s" $.Release.Name .name }}
+  namespace: {{ $.Release.Namespace }}
+data:
+{{- range $key, $val := .secrets }}
+  {{ $key }}: {{ $val | b64enc }}
+{{- end }}
+{{- end }}
+{{- end -}}
@@ -0,0 +1,26 @@
+{{- define "common.sealedFileSecret.tpl" -}}
+{{- range .Values.sealedFileSecrets }}
+{{- $robustName := include "robustName" $.Release.Name }}
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: {{ printf "%s-%s" $robustName .name }}
+  namespace: {{ $.Release.Namespace }}
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+spec:
+  encryptedData:
+  {{- range $f := .filesToMount }}
+    {{ $f.name }}: |-
+      {{- $f.source | nindent 6 }}
+      {{- /*
+      {{- $.Files.Get $f.sourcePath | nindent 6 }}
+      */}}
+  {{- end }}
+  template:
+    metadata:
+      name: {{ printf "%s-%s" $.Release.Name .name }}
+      namespace: {{ $.Release.Namespace }}
+{{- end }}
+{{- end -}}
@@ -0,0 +1,22 @@
+{{- define "common.sealedSecret.tpl" -}}
+  {{- if .Values.sealedSecrets }}
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: {{ template "robustName" .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "helm-chart.labels" . | nindent 4 }}
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+spec:
+  encryptedData:
+  {{- range $key, $val := .Values.sealedSecrets }}
+    {{ $key }}: {{ $val | quote }}
+  {{- end }}
+  template:
+    metadata:
+      name: {{ template "robustName" .Release.Name }}
+      namespace: {{ .Release.Namespace }}
+{{- end }}
+{{- end -}}