Skip to content

Commit b512b73

Browse files
tamalsahatamalsaha
authored
Add virtual-secrets (#763)
Signed-off-by: Tamal Saha <tamal@appscode.com>
1 parent c2cb8b1 commit b512b73

9 files changed

Lines changed: 246 additions & 115 deletions

File tree

‎charts/opscenter-features/README.md‎

Lines changed: 117 additions & 115 deletions
Large diffs are not rendered by default.

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/secrets-store-csi-driver/csi-secrets-store-provider-aws.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,9 @@ spec:
1919
featureSet: opscenter-secret-management
2020
featureBlock: secrets-store-csi-driver
2121
recommended: false
22+
requirements:
23+
features:
24+
- secrets-store-csi-driver
2225
readinessChecks:
2326
workloads:
2427
- group: apps

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/secrets-store-csi-driver/csi-secrets-store-provider-azure.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,9 @@ spec:
2222
featureSet: opscenter-secret-management
2323
featureBlock: secrets-store-csi-driver
2424
recommended: false
25+
requirements:
26+
features:
27+
- secrets-store-csi-driver
2528
readinessChecks:
2629
workloads:
2730
- group: apps

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/secrets-store-csi-driver/csi-secrets-store-provider-gcp.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,9 @@ spec:
1919
featureSet: opscenter-secret-management
2020
featureBlock: secrets-store-csi-driver
2121
recommended: false
22+
requirements:
23+
features:
24+
- secrets-store-csi-driver
2225
readinessChecks:
2326
workloads:
2427
- group: apps

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/secrets-store-csi-driver/csi-secrets-store-provider-vault.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,9 @@ spec:
4040
featureSet: opscenter-secret-management
4141
featureBlock: secrets-store-csi-driver
4242
recommended: false
43+
requirements:
44+
features:
45+
- secrets-store-csi-driver
4346
readinessChecks:
4447
workloads:
4548
- group: apps

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/virtual-secrets/csi-secrets-store-provider-virtual-secrets.yaml‎

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
{{ $defaults := printf `
2+
image:
3+
repository: ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets
4+
`
5+
(include "image.ghcr" (merge (dict "_repo" "appscode/secrets-store-csi-driver-provider-virtual-secrets") $))
6+
| fromYaml }}
7+
8+
{{ $vals := dig "secrets-store-csi-driver-provider-virtual-secrets" "values" (dict) .Values.helm.releases }}
9+
{{ $vals = mergeOverwrite $defaults $vals }}
10+
11+
apiVersion: ui.k8s.appscode.com/v1alpha1
12+
kind: Feature
13+
metadata:
14+
name: secrets-store-csi-driver-provider-virtual-secrets
15+
labels:
16+
app.kubernetes.io/part-of: opscenter-secret-management
17+
spec:
18+
title: Virtual Secrets provider for the Secrets Store CSI Driver (ALPHA)
19+
description: |
20+
Integrate Virtual Secrets with Kubernetes via a CSI volume
21+
icons:
22+
- src: https://cdn.appscode.com/k8s/icons/menu/cluster.svg
23+
type: image/svg+xml
24+
featureSet: opscenter-secret-management
25+
featureBlock: virtual-secrets-server
26+
recommended: false
27+
requirements:
28+
features:
29+
- virtual-secrets
30+
- secrets-store-csi-driver
31+
readinessChecks:
32+
workloads:
33+
- group: apps
34+
version: v1
35+
kind: DaemonSet
36+
selector:
37+
app.kubernetes.io/instance: secrets-store-csi-driver-provider-virtual-secrets
38+
app.kubernetes.io/name: secrets-store-csi-driver-provider-virtual-secrets
39+
app: secrets-store-csi-driver-provider-virtual-secrets
40+
chart:
41+
name: secrets-store-csi-driver-provider-virtual-secrets
42+
namespace: kube-system
43+
createNamespace: {{ $.Values.helm.createNamespace }}
44+
version: {{ dig "secrets-store-csi-driver-provider-virtual-secrets" "version" "" $.Values.helm.releases }}
45+
sourceRef:
46+
kind: HelmRepository
47+
name: appscode-charts-oci
48+
namespace: {{ .Release.Namespace }}
49+
valuesFrom:
50+
{{- if eq (include "clustermanager.openshift" $) "true" }}
51+
- kind: ConfigMap
52+
name: ace-openshift-scc
53+
valuesKey: secrets-store-csi-driver-provider-virtual-secrets.yaml
54+
{{- end }}
55+
{{- with $vals }}
56+
{{- dict "values" . | toYaml | nindent 2 }}
57+
{{- end }}

‎charts/opscenter-features/templates/featuresets/opscenter-secret-management/virtual-secrets/virtual-secrets.yaml‎

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
{{ $defaults := printf `
2+
global:
3+
registryFQDN: %q
4+
` (include "registry.ghcr" $) | fromYaml }}
5+
6+
{{ $vals := dig "virtual-secrets-server" "values" (dict) .Values.helm.releases }}
7+
{{ $vals = mergeOverwrite $defaults $vals }}
8+
9+
apiVersion: ui.k8s.appscode.com/v1alpha1
10+
kind: Feature
11+
metadata:
12+
name: virtual-secrets-server
13+
labels:
14+
app.kubernetes.io/part-of: opscenter-secret-management
15+
spec:
16+
title: Virtual Secrets (ALPHA)
17+
description: |
18+
Virtual Secrets Server
19+
icons:
20+
- src: https://cdn.appscode.com/k8s/icons/menu/cluster.svg
21+
type: image/svg+xml
22+
featureSet: opscenter-secret-management
23+
featureBlock: virtual-secrets-server
24+
recommended: false
25+
readinessChecks:
26+
workloads:
27+
- group: apps
28+
version: v1
29+
kind: Deployment
30+
selector:
31+
app.kubernetes.io/instance: virtual-secrets-server
32+
app.kubernetes.io/name: virtual-secrets-server
33+
chart:
34+
name: virtual-secrets-server
35+
namespace: kubevault
36+
createNamespace: {{ $.Values.helm.createNamespace }}
37+
version: {{ dig "virtual-secrets-server" "version" "" $.Values.helm.releases }}
38+
sourceRef:
39+
kind: HelmRepository
40+
name: appscode-charts-oci
41+
namespace: {{ .Release.Namespace }}
42+
valuesFrom:
43+
{{- if eq (include "clustermanager.openshift" $) "true" }}
44+
- kind: ConfigMap
45+
name: ace-openshift-scc
46+
valuesKey: virtual-secrets-server.yaml
47+
{{- end }}
48+
{{- with $vals }}
49+
{{- dict "values" . | toYaml | nindent 2 }}
50+
{{- end }}

‎charts/opscenter-features/values.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -208,6 +208,10 @@ helm:
208208
version: "0.1.0"
209209
vault:
210210
version: "0.27.0"
211+
virtual-secrets-server:
212+
version: "v2025.3.14"
213+
secrets-store-csi-driver-provider-virtual-secrets:
214+
version: "v2025.3.14"
211215
# ocm charts
212216
ingress-nginx:
213217
version: "4.11.1"

‎features.md‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,12 @@ graph TD;
7676
kubevault-opscenter-->kubevault;
7777
kubevault-opscenter-->grafana-operator;
7878
kubevault-->license-proxyserver;
79+
secrets-store-csi-driver-provider-aws-->secrets-store-csi-driver;
80+
csi-secrets-store-provider-azure-->secrets-store-csi-driver;
81+
secrets-store-csi-driver-provider-gcp-->secrets-store-csi-driver;
82+
vault-->secrets-store-csi-driver;
83+
secrets-store-csi-driver-provider-virtual-secrets-->virtual-secrets;
84+
secrets-store-csi-driver-provider-virtual-secrets-->secrets-store-csi-driver;
7985
cert-manager-csi-driver-cacerts-->cert-manager;
8086
cert-manager-->gateway-api;
8187
falco-ui-server-->falco;

0 commit comments

Comments
 (0)