Add HA secrets

memgraph · Dec 9, 2024 · b9ef787 · b9ef787
1 parent 3c77fe6
commit b9ef787
Show file tree

Hide file tree

Showing 3 changed files with 38 additions and 8 deletions.
diff --git a/charts/memgraph-high-availability/templates/coordinators.yaml b/charts/memgraph-high-availability/templates/coordinators.yaml
@@ -117,10 +117,22 @@ spec:
         - "{{ $arg }}"
         {{- end }}
         env:
-        - name: MEMGRAPH_ENTERPRISE_LICENSE
-          value: "{{ $.Values.memgraph.env.MEMGRAPH_ENTERPRISE_LICENSE }}"
-        - name: MEMGRAPH_ORGANIZATION_NAME
-          value: "{{ $.Values.memgraph.env.MEMGRAPH_ORGANIZATION_NAME }}"
+          {{- if .Values.secrets.enabled }}
+          - name: MEMGRAPH_USER
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.secrets.name }}
+                key: {{ .Values.secrets.userKey }}
+          - name: MEMGRAPH_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.secrets.name }}
+                key: {{ .Values.secrets.passwordKey }}
+          {{- end }}
+          - name: MEMGRAPH_ENTERPRISE_LICENSE
+            value: "{{ $.Values.memgraph.env.MEMGRAPH_ENTERPRISE_LICENSE }}"
+          - name: MEMGRAPH_ORGANIZATION_NAME
+            value: "{{ $.Values.memgraph.env.MEMGRAPH_ORGANIZATION_NAME }}"
         volumeMounts:
         {{- if $.Values.memgraph.coordinators.volumeClaim.storagePVC }}
           - name: memgraph-coordinator-{{ $coordinator.id }}-lib-storage

diff --git a/charts/memgraph-high-availability/templates/data.yaml b/charts/memgraph-high-availability/templates/data.yaml
@@ -127,10 +127,22 @@ spec:
         - "{{ $arg }}"
         {{- end }}
         env:
-        - name: MEMGRAPH_ENTERPRISE_LICENSE
-          value: "{{ $.Values.memgraph.env.MEMGRAPH_ENTERPRISE_LICENSE }}"
-        - name: MEMGRAPH_ORGANIZATION_NAME
-          value: "{{ $.Values.memgraph.env.MEMGRAPH_ORGANIZATION_NAME }}"
+          {{- if .Values.secrets.enabled }}
+          - name: MEMGRAPH_USER
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.secrets.name }}
+                key: {{ .Values.secrets.userKey }}
+          - name: MEMGRAPH_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.secrets.name }}
+                key: {{ .Values.secrets.passwordKey }}
+          {{- end }}
+          - name: MEMGRAPH_ENTERPRISE_LICENSE
+            value: "{{ $.Values.memgraph.env.MEMGRAPH_ENTERPRISE_LICENSE }}"
+          - name: MEMGRAPH_ORGANIZATION_NAME
+            value: "{{ $.Values.memgraph.env.MEMGRAPH_ORGANIZATION_NAME }}"
         volumeMounts:
         {{- if $.Values.memgraph.data.volumeClaim.storagePVC }}
           - name: memgraph-data-{{ $data.id }}-lib-storage

diff --git a/charts/memgraph-high-availability/values.yaml b/charts/memgraph-high-availability/values.yaml
@@ -62,6 +62,12 @@ sysctlInitContainer:
   enabled: true
   maxMapCount: 262144
 
+secrets:
+  enabled: false
+  name: memgraph-secrets
+  userKey: USER
+  passwordKey: PASSWORD
+
 data:
 - id: "0"
   args: