add secret helper function (#79)

* add secret helper function * adding usage, updating Chart version --------- Co-authored-by: Jon Charette <[email protected]>
harness · Jan 18, 2024 · a77a32a · a77a32a
1 parent 679bad8
commit a77a32a
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 1 deletion.
diff --git a/src/common/Chart.yaml b/src/common/Chart.yaml
@@ -15,7 +15,7 @@ type: library
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.3.5
+version: 1.3.6
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

diff --git a/src/common/templates/_secrets-helper.tpl b/src/common/templates/_secrets-helper.tpl
@@ -103,3 +103,36 @@ USAGE:
 {{- $localESOSecretCtxIdentifier := (include "harnesscommon.secrets.localESOSecretCtxIdentifier" (dict "ctx" $ )) }}
 {{- include "harnesscommon.secrets.manageEnv" (dict "ctx" $ "variableName" .variableName "overrideEnvName" .overrideEnvName "defaultKubernetesSecretName" .defaultKubernetesSecretName "providedSecretValues" .providedSecretValues "defaultKubernetesSecretKey" .defaultKubernetesSecretKey "extKubernetesSecretCtxs" (list $.Values.secrets.kubernetesSecrets) "esoSecretCtxs" (list (dict "secretCtxIdentifier" $localESOSecretCtxIdentifier "secretCtx" $.Values.secrets.secretManagement.externalSecretsOperator))) }}
 {{- end }}
+
+
+
+
+{{- define "harnesscommon.secrets.generateExternalSecretRefInternal"}}
+{{- $ := .ctx }}
+{{- $secretNamePrefix := .secretNamePrefix }}
+{{- if and .secretsCtx .secretsCtx.secretManagement .secretsCtx.secretManagement.externalSecretsOperator }}
+    {{- with .secretsCtx.secretManagement.externalSecretsOperator }}
+        {{- range $esoSecretIdx, $esoSecret := . }}
+          {{- if eq (include "harnesscommon.secrets.hasValidESOSecret" (dict "esoSecretCtx" .)) "true" }}
+            {{- $esoSecretName := (printf "%s-%d" $secretNamePrefix $esoSecretIdx) }}
+- secretRef:
+    name: {{ $esoSecretName }}
+          {{- end }}
+        {{- end }}
+    {{- end }}
+{{- end }}
+{{- end }}
+
+
+{{/*
+Function and its warpper to add the K8S Secret created by external secret controller to serve as Env Var Ref
+
+USAGE:
+{{- include "harnesscommon.secrets.generateExternalSecretRef" . }}
+*/}}
+{{- define "harnesscommon.secrets.generateExternalSecretRef"}}
+{{- if eq (include "harnesscommon.secrets.hasESOSecrets" (dict "secretsCtx" .Values.secrets)) "true" }}
+{{- $localESOSecretIdentifier := (include "harnesscommon.secrets.localESOSecretCtxIdentifier" (dict "ctx" $ )) }}
+{{- include "harnesscommon.secrets.generateExternalSecretRefInternal" (dict "secretsCtx" .Values.secrets "secretNamePrefix" $localESOSecretIdentifier) }}
+{{- end }}
+{{- end }}