Support custom secrets

projectsyn · Aug 9, 2024 · 1f09f6b · 1f09f6b
1 parent d5f42de
commit 1f09f6b
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -66,6 +66,9 @@ parameters:
           K8S-Logging.Parser: "On"
           K8S-Logging.Exclude: "On"
 
+    # Add additional secrets
+    secrets: {}
+
     # Add volumes to the pod spec
     extraVolumes: []
     extraVolumeMounts: []

diff --git a/component/main.jsonnet b/component/main.jsonnet
@@ -162,8 +162,24 @@ local configmap = kube.ConfigMap(params.configMapName) {
   },
 };
 
+local secret = kube.Secret(instanceName) {
+  metadata+: {
+    labels+: {
+      'app.kubernetes.io/name': 'fluent-bit',
+      'app.kubernetes.io/instance': instanceName,
+      'app.kubernetes.io/component': 'fluent-bit',
+      'app.kubernetes.io/managed-by': 'commodore',
+    },
+  },
+  stringData: {
+    [s]: params.secrets[s]
+    for s in std.objectFields(params.secrets)
+  },
+};
+
 {
   [if params.createNamespace then '00_namespace']: kube.Namespace(params.namespace),
+  [if std.length(params.secrets) > 0 then '10_custom_secret']: secret,
   '10_custom_config': configmap,
   [if params.monitoring.enabled then '20_service_monitor']:
     kube._Object('monitoring.coreos.com/v1', 'ServiceMonitor', 'fluent-bit') {