Merge pull request #78 from mikaeld/feat/add-custom-fides-secrets

feat(fides): Add custom secrets for all fides containers.
ethyca · Aug 9, 2024 · a2965d4 · a2965d4
2 parents d019a30 + 3141059
commit a2965d4
Show file tree

Hide file tree

Showing 5 changed files with 21 additions and 1 deletion.
diff --git a/fides/Chart.yaml b/fides/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: fides
-version: 0.15.1
+version: 0.16.0-dev
 appVersion: "2.36.0"
 description: Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code.
 type: application

diff --git a/fides/templates/_helpers.tpl b/fides/templates/_helpers.tpl
@@ -242,3 +242,15 @@ The set of environment variables for Fides and workers
 {{- end }}
 {{- end }}
 {{- end }}
+
+{{/* User defined Fides secrets */}}
+{{- define "custom_fides_secrets" }}
+  # Dynamically created secret envs
+  {{- range $i, $config := .Values.secret }}
+  - name: {{ $config.envName }}
+    valueFrom:
+      secretKeyRef:
+        name: {{ $config.secretName }}
+        key: {{ default "value" $config.secretKey }}
+  {{- end }}
+{{- end }}
diff --git a/fides/templates/fides/fides-deployment.yaml b/fides/templates/fides/fides-deployment.yaml
@@ -38,6 +38,7 @@ spec:
             - name: FIDES__CONFIG_PATH
               value: {{ printf "%s/fides.toml" $configPath }}
             {{- include "fides.env" . | nindent 12 }}
+            {{- include "custom_fides_secrets" . | indent 10 }}
           envFrom:
             - secretRef: 
                 name: {{ include "fides.fidesSecuritySecretName" . }}

diff --git a/fides/templates/fides/worker-deployment.yaml b/fides/templates/fides/worker-deployment.yaml
@@ -43,6 +43,7 @@ spec:
             - name: FIDES__CONFIG_PATH
               value: {{ printf "%s/fides.toml" $configPath }}
             {{- include "fides.env" . | nindent 12 }}
+            {{- include "custom_fides_secrets" . | indent 10 }}
           envFrom:
             - secretRef: 
                 name: {{ include "fides.fidesSecuritySecretName" . }}

diff --git a/fides/values.yaml b/fides/values.yaml
@@ -133,6 +133,12 @@ s3:
   # s3.region sets the location constraint and may be set to any valid AWS region.
   region: us-east-1
 
+# Secrets for all fides containers
+secret: []
+# - envName: ""
+#   secretName: ""
+#   secretKey: ""
+
 nameOverride: ""
 imagePullSecrets: []