Supporting secretName without secretEnabled

charts/onechart/templates/deployment.yaml

@@ -61,7 +61,7 @@ spec:
             - -c
             - {{ .Values.command | quote }}
           {{- end }}
-          {{- if or (or (.Values.vars) (.Values.secretEnabled)) .Values.sealedSecrets }}
+          {{- if or (or (or (.Values.vars) (.Values.secretEnabled)) .Values.sealedSecrets) .Values.secretName }}
           envFrom: &envFrom
             {{- if .Values.vars }}
             - configMapRef:
@@ -69,7 +69,11 @@ spec:
             {{- end }}
             {{- if .Values.secretEnabled }}
             - secretRef:
-                name: {{ .Values.secretName | default (include "robustName" $.Release.Name) }}
+                name: {{ include "robustName" $.Release.Name }}
+            {{- end }}
+            {{- if .Values.secretName }}
+            - secretRef:
+                name: {{ .Values.secretName }}
             {{- end }}
             {{- if .Values.sealedSecrets }}
             - secretRef:

charts/onechart/tests/deployment_secret_test.yaml

@@ -12,15 +12,8 @@ tests:
           content:
             secretRef:
               name: release-name
-  - it: Should not reference secret if secret is disabled
+  - it: Should reference secret by name
     set:
-      secretEnabled: false
-    asserts:
-      - isNull:
-          path: spec.template.spec.containers[0].envFrom
-  - it: Should not reference secret if secret is disabled
-    set:
-      secretEnabled: true
       secretName: my-custom-secret
     asserts:
       - contains: