app: allow secrets as volume mounts (#91)

Author: domdepasquale

charts/application-core/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 4.2.6
+version: 4.3.0
 
 
 maintainers:

charts/application-core/templates/deployment.yaml

@@ -182,6 +182,18 @@ spec:
               subPath: "{{ .subPath }}"
               {{- end }}
           {{- end }}
+          {{- range $volume := .Values.extraSecretVolumes }}
+            - mountPath: "{{ .mountPath }}"
+              name: "{{ .name }}"
+              {{- if eq .readOnly false }}
+              readOnly: false
+              {{- else }}
+              readOnly: true
+              {{- end }}
+              {{- if .subPath }}
+              subPath: "{{ .subPath }}"
+              {{- end }}
+          {{- end }}
           {{- if .Values.emptyDir }}
             - mountPath: {{ .Values.emptyDir.mountPath }}
               name: emptydir-volume
@@ -223,6 +235,11 @@ spec:
         configMap:
           name: {{ .name }}
       {{- end }}
+      {{- range $volume := .Values.extraSecretVolumes }}
+      - name: {{ .name }}
+        secret:
+          secretName: {{ .name }}
+      {{- end }}
       {{- if .Values.emptyDir }}
       - name: emptydir-volume
         emptyDir:

charts/application-core/values.yaml

@@ -120,6 +120,7 @@ extraSecrets: []
 # - name: ca-cert-configmap
 #   mountPath: /etc/ssl/certs/
 extraConfigMapVolumes: []
+extraSecretVolumes: []
 
 externalSecret:
   enabled: false