ecc1f31996
* feat(helm): add existingSecret support Allow users to reference a pre-existing Kubernetes Secret instead of having the chart create one. This enables better secret management through tools like External Secrets Operator or sealed-secrets. Usage: ```yaml existingSecret: "my-pre-created-secret" ``` When existingSecret is set: - The chart skips creating its own Secret resource - Deployments reference the provided secret name - Secret checksum annotation is omitted (no auto-rollout on changes) The existing secret should contain all required keys: - API secrets (e.g., HINDSIGHT_API_LLM_API_KEY) - Control plane secrets - postgres-password (if using external PostgreSQL) * fix(helm): use envFrom for existingSecret and fix env var ordering - Add envFrom to inject all keys from existingSecret as env vars automatically - Fix POSTGRES_PASSWORD ordering (must be before DATABASE_URL for $(VAR) interpolation) - Only use api.secrets/controlPlane.secrets when existingSecret is not set - Update values.yaml documentation for existingSecret usage --------- Co-authored-by: Anatolii Lapytskyi <ala@herobase.com>
123 lines
3.3 KiB
Smarty
123 lines
3.3 KiB
Smarty
{{/*
|
|
Expand the name of the chart.
|
|
*/}}
|
|
{{- define "hindsight.name" -}}
|
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create a default fully qualified app name.
|
|
*/}}
|
|
{{- define "hindsight.fullname" -}}
|
|
{{- if .Values.fullnameOverride }}
|
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
|
{{- else }}
|
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
|
{{- if contains $name .Release.Name }}
|
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
|
{{- else }}
|
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create chart name and version as used by the chart label.
|
|
*/}}
|
|
{{- define "hindsight.chart" -}}
|
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Common labels
|
|
*/}}
|
|
{{- define "hindsight.labels" -}}
|
|
helm.sh/chart: {{ include "hindsight.chart" . }}
|
|
{{ include "hindsight.selectorLabels" . }}
|
|
{{- if .Chart.AppVersion }}
|
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
|
{{- end }}
|
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Selector labels
|
|
*/}}
|
|
{{- define "hindsight.selectorLabels" -}}
|
|
app.kubernetes.io/name: {{ include "hindsight.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
API labels
|
|
*/}}
|
|
{{- define "hindsight.api.labels" -}}
|
|
{{ include "hindsight.labels" . }}
|
|
app.kubernetes.io/component: api
|
|
{{- end }}
|
|
|
|
{{/*
|
|
API selector labels
|
|
*/}}
|
|
{{- define "hindsight.api.selectorLabels" -}}
|
|
{{ include "hindsight.selectorLabels" . }}
|
|
app.kubernetes.io/component: api
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Control plane labels
|
|
*/}}
|
|
{{- define "hindsight.controlPlane.labels" -}}
|
|
{{ include "hindsight.labels" . }}
|
|
app.kubernetes.io/component: control-plane
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Control plane selector labels
|
|
*/}}
|
|
{{- define "hindsight.controlPlane.selectorLabels" -}}
|
|
{{ include "hindsight.selectorLabels" . }}
|
|
app.kubernetes.io/component: control-plane
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create the name of the service account to use
|
|
*/}}
|
|
{{- define "hindsight.serviceAccountName" -}}
|
|
{{- if .Values.serviceAccount.create }}
|
|
{{- default (include "hindsight.fullname" .) .Values.serviceAccount.name }}
|
|
{{- else }}
|
|
{{- default "default" .Values.serviceAccount.name }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Generate database URL
|
|
*/}}
|
|
{{- define "hindsight.databaseUrl" -}}
|
|
{{- if .Values.databaseUrl }}
|
|
{{- .Values.databaseUrl }}
|
|
{{- else if .Values.postgresql.enabled }}
|
|
{{- printf "postgresql://%s:%s@%s-postgresql:%d/%s" .Values.postgresql.auth.username .Values.postgresql.auth.password (include "hindsight.fullname" .) (.Values.postgresql.service.port | int) .Values.postgresql.auth.database }}
|
|
{{- else }}
|
|
{{- printf "postgresql://%s:$(POSTGRES_PASSWORD)@%s:%d/%s" .Values.postgresql.external.username .Values.postgresql.external.host (.Values.postgresql.external.port | int) .Values.postgresql.external.database }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
API URL for control plane
|
|
*/}}
|
|
{{- define "hindsight.apiUrl" -}}
|
|
{{- printf "http://%s-api:%d" (include "hindsight.fullname" .) (.Values.api.service.port | int) }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Get the name of the secret to use
|
|
*/}}
|
|
{{- define "hindsight.secretName" -}}
|
|
{{- if .Values.existingSecret }}
|
|
{{- .Values.existingSecret }}
|
|
{{- else }}
|
|
{{- printf "%s-secret" (include "hindsight.fullname" .) }}
|
|
{{- end }}
|
|
{{- end }}
|