update helm chart to make envfrom optional

helm-charts/infisical/Chart.yaml

@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.4
+version: 0.1.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

helm-charts/infisical/templates/backend-deployment.yaml

@@ -20,9 +20,11 @@ spec:
         imagePullPolicy: {{ .Values.backend.image.pullPolicy }}
         ports: 
         - containerPort: 4000
+        {{- if .Values.backend.kubeSecretRef }}
         envFrom:
         - secretRef:
             name: {{ .Values.backend.kubeSecretRef }}
+        {{- end }}
         env:
         {{- range $key, $value := .Values.backendEnvironmentVariables }}
         {{- if $value | quote | eq "MUST_REPLACE" }}

helm-charts/infisical/templates/frontend-deployment.yaml

@@ -18,9 +18,12 @@ spec:
       - name: frontend 
         image: infisical/frontend
         imagePullPolicy: {{ .Values.frontend.image.pullPolicy }}
+        {{- if .Values.frontend.kubeSecretRef }}
         envFrom:
         - secretRef:
             name: {{ .Values.frontend.kubeSecretRef }}
+        {{- end }}
+        {{- if .Values.frontendEnvironmentVariables }}
         env:
         {{- range $key, $value := .Values.frontendEnvironmentVariables }}
         {{- if $value | quote | eq "MUST_REPLACE" }}
@@ -29,6 +32,7 @@ spec:
         - name: {{ $key }}
           value: {{ quote $value }}
         {{- end }}
+        {{- end }}
         ports: 
         - containerPort: 4000
 ---

helm-charts/infisical/values.yaml

@@ -3,14 +3,14 @@
 # PLEASE REPLACE VALUES/EDIT AS REQUIRED 
 #####
 
-namespace: infisical
-
 frontend:
   replicaCount: 1
   image:
     repository: 
     pullPolicy: IfNotPresent
     tag: "latest"
+    # kubeSecretRef: some-kube-secret-name
+
 
 backend:
   replicaCount: 1
@@ -18,6 +18,7 @@ backend:
     repository: 
     pullPolicy: IfNotPresent
     tag: "latest"
+    # kubeSecretRef: some-kube-secret-name
 
 ingress:
   enabled: true
@@ -54,8 +55,6 @@ ingress:
 ### 
 backendEnvironmentVariables:
   # Required keys for platform encryption/decryption ops. Replace with nacl sk keys
-  PRIVATE_KEY: MUST_REPLACE
-  PUBLIC_KEY: MUST_REPLACE
   ENCRYPTION_KEY: MUST_REPLACE
 
   # JWT
@@ -71,9 +70,8 @@ backendEnvironmentVariables:
   SMTP_USERNAME: MUST_REPLACE
   SMTP_PASSWORD: MUST_REPLACE
 
-  # You may replace with Mongo Cloud URI
+  # Recommended to replace with Mongo Cloud URI as the DB instance in the cluster does not have persistence yet
   MONGO_URL: mongodb://root:root@mongodb-service:27017/
 
 # frontendEnvironmentVariables:
-#   INFISICAL_TELEMETRY_ENABLED: true