feat: allow env substitution in the config file through secrets

ethpandaops · Oct 30, 2024 · f5a8051 · f5a8051
1 parent 2dbec96
commit f5a8051
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 4 deletions.
diff --git a/charts/erpc/templates/deployment.yaml b/charts/erpc/templates/deployment.yaml
@@ -55,6 +55,9 @@ spec:
           {{- end }}
           securityContext:
             {{- toYaml .Values.containerSecurityContext | nindent 12 }}
+          envFrom:
+          - secretRef:
+              name: {{ include "erpc.fullname" . }}-envs
           volumeMounts:
             - name: config
               mountPath: /erpc.yaml

diff --git a/charts/erpc/templates/secret.yaml b/charts/erpc/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "erpc.fullname" . }}-envs
+  labels:
+    {{- include "erpc.labels" . | nindent 4 }}
+data:
+{{- range $key, $value := .Values.secretEnv }}
+  {{ $key }}: {{ $value | b64enc }}
+{{- end }}
diff --git a/charts/erpc/values.yaml b/charts/erpc/values.yaml
@@ -39,7 +39,12 @@ config: |
     projects:
       - id: main
         upstreams:
-          - endpoint: alchemy://XXXXXXXXXXX
+          - endpoint: alchemy://${ALCHEMY_API_KEY}
+
+# -- Secret env variables injected via a created secret
+# These env variables can be used to populate the erpc config file with sensitive data such as RPC API keys
+secretEnv:
+  ALCHEMY_API_KEY: XXXXXXXXXX
 
 # - HTTP port for erpc
 httpPort: 4000
@@ -193,9 +198,6 @@ extraPorts: []
 # -- Additional env variables
 extraEnv: []
 
-# -- Additional env variables injected via a created secret
-secretEnv: {}
-
 persistence:
   # -- Uses an EmptyDir when not enabled
   enabled: false