mirror of
https://github.com/immich-app/yucca.git
synced 2026-09-30 13:33:00 +08:00
Antoine Lecompte
070e22a7bb
* impl. local kube * add support for op injected oidc secrets * ci: set least-privilege workflow token permissions
17 lines
1.3 KiB
YAML
17 lines
1.3 KiB
YAML
{{- $_ := set .Values "env" (concat .Values.env (list
|
|
(dict "name" "OIDC_ISSUER" "value" .Values.oidcIssuer)
|
|
(dict "name" "OIDC_REDIRECT_URI" "value" .Values.oidcRedirectUri)
|
|
(dict "name" "OIDC_LOGOUT_REDIRECT_URI" "value" .Values.oidcLogoutRedirectUri)
|
|
(dict "name" "POSTGRES_HOST" "valueFrom" (dict "secretKeyRef" (dict "name" (printf "%s-app" .Values.postgresClusterName) "key" "host")))
|
|
(dict "name" "POSTGRES_PORT" "valueFrom" (dict "secretKeyRef" (dict "name" (printf "%s-app" .Values.postgresClusterName) "key" "port")))
|
|
(dict "name" "POSTGRES_DATABASE" "valueFrom" (dict "secretKeyRef" (dict "name" (printf "%s-app" .Values.postgresClusterName) "key" "dbname")))
|
|
(dict "name" "POSTGRES_USERNAME" "valueFrom" (dict "secretKeyRef" (dict "name" (printf "%s-app" .Values.postgresClusterName) "key" "username")))
|
|
(dict "name" "POSTGRES_PASSWORD" "valueFrom" (dict "secretKeyRef" (dict "name" (printf "%s-app" .Values.postgresClusterName) "key" "password")))
|
|
)) }}
|
|
{{- /* extraEnvFrom comes after the chart secret: for duplicate keys Kubernetes
|
|
takes the LAST envFrom source, so these act as overrides. */}}
|
|
{{- $_ := set .Values "envFrom" (concat
|
|
(list (dict "secretRef" (dict "name" (include "yucca-common.fullname" .))))
|
|
(.Values.extraEnvFrom | default (list))) }}
|
|
{{- include "yucca-common.deployment" . }}
|