From 0158b0f0201ef30a7ef33a10923927678a0b94f2 Mon Sep 17 00:00:00 2001 From: Tino Reinhardt Date: Tue, 1 Oct 2019 13:01:32 +0200 Subject: [PATCH] [stable/sealed-secrets] Have optional command args passed to controller (#17557) * [stable/sealed-secrets] Have optional command args This enables us to set command line arguments, like commandArgs: - "--key-renew-period" - "0" or: $ helm ... --set commandArgs={--key-renew-period,0} Signed-off-by: Tino Reinhardt * [stable/sealed-secrets] Bump chart version (1.4.2) Signed-off-by: Tino Reinhardt * [stable/sealed-secrets] Bump app version (0.9.1) Signed-off-by: Tino Reinhardt --- stable/sealed-secrets/Chart.yaml | 4 ++-- stable/sealed-secrets/README.md | 1 + stable/sealed-secrets/templates/deployment.yaml | 3 +++ stable/sealed-secrets/values.yaml | 2 +- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/stable/sealed-secrets/Chart.yaml b/stable/sealed-secrets/Chart.yaml index b70a7e754c..ce507ab2a8 100644 --- a/stable/sealed-secrets/Chart.yaml +++ b/stable/sealed-secrets/Chart.yaml @@ -1,7 +1,7 @@ name: sealed-secrets description: A Helm chart for Sealed Secrets -version: 1.4.1 -appVersion: 0.8.2 +version: 1.4.2 +appVersion: 0.9.1 kubeVersion: ">=1.9.0-0" home: https://github.com/bitnami-labs/sealed-secrets apiVersion: v1 diff --git a/stable/sealed-secrets/README.md b/stable/sealed-secrets/README.md index 3efc53dbbd..fab8bada6b 100644 --- a/stable/sealed-secrets/README.md +++ b/stable/sealed-secrets/README.md @@ -58,6 +58,7 @@ Read about kubeseal usage on [sealed-secrets docs](https://github.com/bitnami-la | **crd.keep** | `true` if the sealed secret CRD should be kept when the chart is deleted | `true` | |**networkPolicy** | Whether to create a network policy that allows access to the service | `false`| |**securityContext.runAsUser** | Defines under which user the operator Pod and its containers/processes run | `1001`| +|**commandArgs** | Set optional command line arguments passed to the controller process | | - In the case that **serviceAccount.create** is `false` and **rbac.create** is `true` it is expected for a service account with the name **serviceAccount.name** to exist _in the same namespace as this chart_ before installation. - If **serviceAccount.create** is `true` there cannot be an existing service account with the name **serviceAccount.name**. diff --git a/stable/sealed-secrets/templates/deployment.yaml b/stable/sealed-secrets/templates/deployment.yaml index e447250663..cb5e7b7bba 100644 --- a/stable/sealed-secrets/templates/deployment.yaml +++ b/stable/sealed-secrets/templates/deployment.yaml @@ -27,6 +27,9 @@ spec: args: - "--key-prefix" - "{{ .Values.secretName }}" + {{- range $value := .Values.commandArgs }} + - {{ $value | quote }} + {{- end }} image: {{ .Values.image.repository }}:{{ .Values.image.tag }} imagePullPolicy: {{ .Values.image.pullPolicy }} ports: diff --git a/stable/sealed-secrets/values.yaml b/stable/sealed-secrets/values.yaml index 35dd4dd8ae..6a867686df 100644 --- a/stable/sealed-secrets/values.yaml +++ b/stable/sealed-secrets/values.yaml @@ -1,6 +1,6 @@ image: repository: quay.io/bitnami/sealed-secrets-controller - tag: v0.8.2 + tag: v0.9.1 pullPolicy: IfNotPresent resources: {}