[stable/sealed-secrets] Have optional command args passed to controller (#17557)

* [stable/sealed-secrets] Have optional command args

This enables us to set command line arguments, like
  commandArgs:
    - "--key-renew-period"
    - "0"
or:
  $ helm ... --set commandArgs={--key-renew-period,0}

Signed-off-by: Tino Reinhardt <t@freeshell.org>

* [stable/sealed-secrets] Bump chart version (1.4.2)

Signed-off-by: Tino Reinhardt <t@freeshell.org>

* [stable/sealed-secrets] Bump app version (0.9.1)

Signed-off-by: Tino Reinhardt <t@freeshell.org>

stable/sealed-secrets/Chart.yaml

@@ -1,7 +1,7 @@
 name: sealed-secrets
 description: A Helm chart for Sealed Secrets
-version: 1.4.1
-appVersion: 0.8.2
+version: 1.4.2
+appVersion: 0.9.1
 kubeVersion: ">=1.9.0-0"
 home: https://github.com/bitnami-labs/sealed-secrets
 apiVersion: v1

stable/sealed-secrets/README.md

@@ -58,6 +58,7 @@ Read about kubeseal usage on [sealed-secrets docs](https://github.com/bitnami-la
 | **crd.keep** | `true` if the sealed secret CRD should be kept when the chart is deleted | `true` |
 |**networkPolicy** | Whether to create a network policy that allows access to the service | `false`|
 |**securityContext.runAsUser** | Defines under which user the operator Pod and its containers/processes run | `1001`|
+|**commandArgs** | Set optional command line arguments passed to the controller process | |
 
 - In the case that **serviceAccount.create** is `false` and **rbac.create** is `true` it is expected for a service account with the name **serviceAccount.name** to exist _in the same namespace as this chart_ before installation.
 - If **serviceAccount.create** is `true` there cannot be an existing service account with the name **serviceAccount.name**.

stable/sealed-secrets/templates/deployment.yaml

@@ -27,6 +27,9 @@ spec:
           args:
             - "--key-prefix"
             - "{{ .Values.secretName }}"
+            {{- range $value := .Values.commandArgs }}
+            - {{ $value | quote }}
+            {{- end }}
           image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           ports:

stable/sealed-secrets/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: quay.io/bitnami/sealed-secrets-controller
-  tag: v0.8.2
+  tag: v0.9.1
   pullPolicy: IfNotPresent
 
 resources: {}