feat(helmfile): Add template support for external secrets for opendesk-services

Signed-off-by: Axel Lender <lender@b1-systems.de>
2025-12-07 07:51:38 +01:00 · 2025-07-08 13:02:42 +02:00
2 changed files with 14 additions and 0 deletions
--- a/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl
+++ b/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl
@@ -68,6 +68,9 @@ selfSigned:
      enabled: true
      password:
        value: {{ .Values.secrets.certificates.password | quote }}
+        secret:
+          name: {{ .Values.externalSecrets.certificates.password.name | quote }}
+          key: {{ .Values.externalSecrets.certificates.password.key | quote }}

 wildcard: {{ .Values.certificate.wildcard }}
 ...
--- a/helmfile/environments/default/external_secrets.yaml.gotmpl
+++ b/helmfile/environments/default/external_secrets.yaml.gotmpl
@@ -0,0 +1,11 @@
+{{/*
+SPDX-FileCopyrightText: 2025 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
+SPDX-License-Identifier: Apache-2.0
+*/}}
+---
+externalSecrets:
+  certificates:
+    password :
+      name: ~
+      key: ~
+...