helm: add certs secret mount

ericpaulsen · ericpaulsen · commit e0eb5d20f16b · 2022-10-18T21:23:26.000-05:00
diff --git a/helm/templates/_helpers.tpl b/helm/templates/_helpers.tpl
@@ -98,6 +98,11 @@ volumes:
   secret:
     secretName: {{ .Values.coder.tls.secretName | quote }}
 {{- end }}
+{{- if .Values.certs.secret.name }}
+- name: {{ .Values.certs.secret.name | quote }}
+  secret:
+    secretName: {{ .Values.certs.secret.name | quote }}
+{{- end }}
 {{- else }}
 volumes: {{ if and (not .Values.coder.tls.secretNames) (not .Values.coder.tls.secretName) }}[]{{ end }}
 {{- end }}
@@ -119,6 +124,11 @@ volumeMounts:
   mountPath: "/etc/ssl/certs/coder/{{ .Values.coder.tls.secretName }}"
   readOnly: true
 {{- end }}
+{{- if .Values.certs.secret.name }}
+- name: {{ .Values.coder.certs.secret.name | quote }}
+  mountPath: /etc/ssl/certs/{{ .Values.certs.secret.key }}
+  subPath: {{ .Values.certs.secret.key | quote }}
+	readOnly: true
 {{- else }}
 volumeMounts: []
 {{- end }}
diff --git a/helm/values.yaml b/helm/values.yaml
@@ -33,6 +33,8 @@ coder:
     # It is recommended to keep this on if you are using Kubernetes templates
     # within Coder.
     workspacePerms: true
+    # coder.serviceAccount.annotations -- The Coder service account annotations.
+
 
   # coder.env -- The environment variables to set for Coder. These can be used
   # to configure all aspects of `coder server`. Please see `coder server --help`
@@ -68,6 +70,14 @@ coder:
     #   cpu: 100m
     #   memory: 128Mi
 
+  # coder.certs -- Certificate to mount inside the Coder pod (e.g. CA bundle).
+  certs:
+    secret:
+      # coder.certs.secret.name -- Name of the secret.
+      name: ""
+      # coder.certs.secret.key -- Key pointing to a certificate in the secret.
+      key: ""
+
   # coder.service -- The Service object to expose for Coder.
   service:
     # coder.service.enable -- Whether to create the Service object.
