Add 'extraSecrets' into values.yaml for save private keys (#14084)

Signed-off-by: sungwon.choi <sungwon.choi@devsisters.com>
This commit is contained in:
최성원
2019-05-28 23:10:19 -07:00
committed by Kubernetes Prow Robot
parent 56890097c1
commit c049b66562
4 changed files with 29 additions and 1 deletions
+1 -1
View File
@@ -2,7 +2,7 @@ apiVersion: v1
description: A Helm chart to collect Kubernetes logs with metricbeat
icon: https://www.elastic.co/assets/blt47799dcdcf08438d/logo-elastic-beats-lt.svg
name: metricbeat
version: 1.6.1
version: 1.6.2
appVersion: 6.7.0
home: https://www.elastic.co/products/beats/metricbeat
sources:
+1
View File
@@ -43,6 +43,7 @@ The following table lists the configurable parameters of the metricbeat chart an
| `plugins` | List of beat plugins | |
| `extraEnv` | Additional environment | |
| `extraVolumes`, `extraVolumeMounts` | Additional volumes and mounts, for example to provide other configuration files | |
| `extraSecrets` | Additional secrets for save private data | |
| `resources.requests.cpu` | CPU resource requests | |
| `resources.limits.cpu` | CPU resource limits | |
| `resources.requests.memory` | Memory resource requests | |
+17
View File
@@ -65,3 +65,20 @@ data:
{{- end }}
{{- end }}
{{- end }}
{{- range $secret := .Values.extraSecrets }}
---
apiVersion: v1
kind: Secret
metadata:
name: {{ $secret.name }}
labels:
app: {{ template "metricbeat.name" . }}
chart: {{ template "metricbeat.chart" . }}
release: {{ $.Release.Name }}
heritage: {{ $.Release.Service }}
type: Opaque
data:
{{- range $key, $value := $secret.data }}
{{ $key }}: {{ $value | b64enc }}
{{- end }}
{{- end}}
+10
View File
@@ -137,6 +137,16 @@ extraVolumeMounts: []
# - name: varlog
# mountPath: /host/var/log
# readOnly: true
extraSecrets: []
# - name: ca-cert
# data: |-
# -----BEGIN CERTIFICATE-----
# ...
# -----END CERTIFICATE-----
# - name: userdata
# data:
# id: userid
# pw: userpassword
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious