helm: added shared-secret

Author: mzc-eeheg

deploy/helm/templates/deployment-grpc.yaml

@@ -67,6 +67,12 @@ spec:
               mountPath: /opt/spaceone/{{ .Values.name }}/config/application.yaml
               subPath: application.yaml
               readOnly: true
+{{- if .Values.global.shared_secret.enabled }}
+            - name: shared-secret
+              mountPath: /opt/spaceone/{{ .Values.name }}/config/shared-secret.yaml
+              subPath: shared-secret.yaml
+              readOnly: true
+{{- end }}
 {{- if .Values.volumeMounts.application_grpc }}
 {{- toYaml .Values.volumeMounts.application_grpc | nindent 12 }}
 {{- end }}
@@ -99,7 +105,11 @@ spec:
         - name: application-conf
           configMap:
             name: {{ .Values.name }}-application-grpc-conf
-
+{{- if .Values.global.shared_secret.enabled }}
+        - name: shared-secret
+          secret:
+            secretName: shared-secret
+{{- end }}
 {{- if .Values.volumes }}
 {{- toYaml .Values.volumes | nindent 8 }}
 {{- end }}

deploy/helm/templates/deployment-rest.yaml

@@ -67,6 +67,12 @@ spec:
               mountPath: /opt/spaceone/{{ .Values.name }}/config/application.yaml
               subPath: application.yaml
               readOnly: true
+{{- if .Values.global.shared_secret.enabled }}
+            - name: shared-secret
+              mountPath: /opt/spaceone/{{ .Values.name }}/config/shared-secret.yaml
+              subPath: shared-secret.yaml
+              readOnly: true
+{{- end }}
 {{- if .Values.volumeMounts.application_rest }}
 {{- toYaml .Values.volumeMounts.application_rest | nindent 12 }}
 {{- end }}
@@ -137,7 +143,11 @@ spec:
         - name: rest-nginx-proxy-conf
           configMap:
             name: {{ .Values.name }}-rest-nginx-proxy-conf
-
+{{- if .Values.global.shared_secret.enabled }}
+        - name: shared-secret
+          secret:
+            secretName: shared-secret
+{{- end }}
 {{- if .Values.volumes }}
 {{- toYaml .Values.volumes | nindent 8 }}
 {{- end }}

deploy/helm/templates/deployment-scheduler.yaml

@@ -65,6 +65,12 @@ spec:
               mountPath: /opt/spaceone/{{ .Values.name }}/config/application.yaml
               subPath: application.yaml
               readOnly: true
+{{- if .Values.global.shared_secret.enabled }}
+            - name: shared-secret
+              mountPath: /opt/spaceone/{{ .Values.name }}/config/shared-secret.yaml
+              subPath: shared-secret.yaml
+              readOnly: true
+{{- end }}
 {{- if .Values.volumeMounts.application_scheduler }}
 {{- toYaml .Values.volumeMounts.application_scheduler | nindent 12 }}
 {{- end }}
@@ -97,7 +103,11 @@ spec:
         - name: application-conf
           configMap:
             name: {{ .Values.name }}-application-scheduler-conf
-
+{{- if .Values.global.shared_secret.enabled }}
+        - name: shared-secret
+          secret:
+            secretName: shared-secret
+{{- end }}
 {{- if .Values.volumes }}
 {{- toYaml .Values.volumes | nindent 8 }}
 {{- end }}

deploy/helm/templates/deployment-worker.yaml

@@ -65,6 +65,12 @@ spec:
               mountPath: /opt/spaceone/{{ .Values.name }}/config/application.yaml
               subPath: application.yaml
               readOnly: true
+{{- if .Values.global.shared_secret.enabled }}
+            - name: shared-secret
+              mountPath: /opt/spaceone/{{ .Values.name }}/config/shared-secret.yaml
+              subPath: shared-secret.yaml
+              readOnly: true
+{{- end }}
 {{- if .Values.volumeMounts.application_worker }}
 {{- toYaml .Values.volumeMounts.application_worker | nindent 12 }}
 {{- end }}
@@ -97,7 +103,11 @@ spec:
         - name: application-conf
           configMap:
             name: {{ .Values.name }}-application-worker-conf
-
+{{- if .Values.global.shared_secret.enabled }}
+        - name: shared-secret
+          secret:
+            secretName: shared-secret
+{{- end }}
 {{- if .Values.volumes }}
 {{- toYaml .Values.volumes | nindent 8 }}
 {{- end }}

deploy/helm/templates/shared-secret.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.global.shared_secret.create }}
+{{ if not (lookup "v1" "Secret" .Release.Namespace "shared-secret" ) }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: shared-secret
+  namespace: {{ .Values.global.namespace | default .Release.Namespace }}
+type: Opaque
+stringData:
+  shared_secret.yaml: |-
+{{- toYaml .Values.global.shared_secret | nindent 4 }}
+{{- end }}
+{{- end }}