Merge pull request #53 from alercebroker/prv_candidates/kafka-authent…

…ication feat: add option to use kafka authentication on prv_candidates
alercebroker · Mar 10, 2023 · b79c9f3 · b79c9f3
2 parents a39994a + 50e8401
commit b79c9f3
Show file tree

Hide file tree

Showing 4 changed files with 30 additions and 2 deletions.
diff --git a/charts/prv_candidates/Chart.yaml b/charts/prv_candidates/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: "rc-2db2507"
 description: A Helm chart for Kubernetes
 name: prv-candidates
 type: application
-version: 0.2.0
+version: 0.3.0
diff --git a/charts/prv_candidates/templates/deployment.yaml b/charts/prv_candidates/templates/deployment.yaml
@@ -83,6 +83,18 @@ spec:
                 configMapKeyRef:
                   name: {{ include "prv-candidates.fullname" . }}
                   key: metrics-topic
+            {{- if .Values.secrets.kafkaAuth.enabled }}
+            - name: KAFKA_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: kafka-auth
+                  key: username
+            - name: KAFKA_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: kafka-auth
+                  key: password
+            {{- end}}
       {{- with .Values.affinity }}
       affinity:
         {{- toYaml . | nindent 8 }}

diff --git a/charts/prv_candidates/templates/secret.yaml b/charts/prv_candidates/templates/secret.yaml
@@ -1,8 +1,18 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:
   name: image-pull-access
   namespace: {{ .Values.namespace }}
 type: kubernetes.io/dockerconfigjson
 data:
-  .dockerconfigjson: {{ template "imagePullSecret" . }}
+  .dockerconfigjson: {{ template "imagePullSecret" . }}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: kafka-auth
+  namespace: {{ .Values.namespace }}
+stringData:
+  username: {{ .Values.secrets.kafkaAuth.username }}
+  password: {{ .Values.secrets.kafkaAuth.password }}
diff --git a/charts/prv_candidates/values.yaml b/charts/prv_candidates/values.yaml
@@ -55,3 +55,9 @@ imageCredentials:
   username: ""
   password: ""
   email: ""
+
+secrets:
+  kafkaAuth:
+    enabled: false
+    username: ""
+    password: ""