fix(chart): mount the secrets-store volume

The volume needs to be mounted in order for secrets-store.csi.k8s.io to work and environment vars with secrets to be created.
italia · May 25, 2024 · 2200c48 · 2200c48
1 parent a94f099
commit 2200c48
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/charts/publiccode-crawler/templates/cronjob.yaml b/charts/publiccode-crawler/templates/cronjob.yaml
@@ -29,6 +29,10 @@ spec:
             args:
               - crawl
 
+            volumeMounts:
+            - mountPath: /secrets-store
+              name: secrets-store
+
             resources:
               {{- toYaml .Values.resources | indent 14 }}
             env:
@@ -50,3 +54,11 @@ spec:
                     key: github-token
 
           restartPolicy: Never
+
+          volumes:
+          - name: secrets-store
+            csi:
+              driver: secrets-store.csi.k8s.io
+              readOnly: true
+              volumeAttributes:
+                secretProviderClass: {{ template "publiccode-crawler.fullname" . }}