From 417adf112e033338351ee69077a94d9f69a376ae Mon Sep 17 00:00:00 2001
From: Spencer Koch <sp3nx0r@gmail.com>
Date: Thu, 13 Jun 2024 19:38:49 -0500
Subject: [PATCH] add existingSecret check for SMTP password

---
 .../helm/syft/templates/backend/backend-statefulset.yaml   | 7 +++++++
 packages/grid/helm/syft/values.yaml                        | 4 +++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/packages/grid/helm/syft/templates/backend/backend-statefulset.yaml b/packages/grid/helm/syft/templates/backend/backend-statefulset.yaml
index 106d2fee893..be0a35d6245 100644
--- a/packages/grid/helm/syft/templates/backend/backend-statefulset.yaml
+++ b/packages/grid/helm/syft/templates/backend/backend-statefulset.yaml
@@ -109,7 +109,14 @@ spec:
             - name: SMTP_USERNAME
               value: {{ .Values.node.smtp.username | quote }}
             - name: SMTP_PASSWORD
+              {{- if .Values.node.smtp.existingSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.node.smtp.existingSecret }}
+                  key: smtpPassword
+              {{ else }}
               value: {{ .Values.node.smtp.password | quote }}
+              {{ end }}
             - name: EMAIL_SENDER
               value: {{ .Values.node.smtp.from | quote}}
             # SeaweedFS
diff --git a/packages/grid/helm/syft/values.yaml b/packages/grid/helm/syft/values.yaml
index 2644eac26e4..631475b2462 100644
--- a/packages/grid/helm/syft/values.yaml
+++ b/packages/grid/helm/syft/values.yaml
@@ -175,6 +175,8 @@ node:
 
   # SMTP Settings
   smtp:
+    # Existing secret for SMTP with key 'smtpPassword'
+    existingSecret: null
     host: smtp.sendgrid.net
     port: 587
     from: noreply@openmined.org
@@ -195,7 +197,7 @@ node:
   resourcesPreset: xlarge
   resources: null
 
-  # Seaweed secret name. Override this if you want to use a self-managed secret.
+  # Backend secret name. Override this if you want to use a self-managed secret.
   # Secret must contain the following keys:
   # - defaultRootPassword
   secretKeyName: backend-secret