added applicationSecret

chart/templates/deployment.yaml

@@ -26,12 +26,30 @@ spec:
       {{- end }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      volumes:
+      {{- if .Values.application.secretName }}
+        - name: application-secret
+          secret:
+            secretName: {{ .Values.application.secretName }}
+            defaultMode: 420
+      {{- else }}
+        []
+      {{- end }}
       containers:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          volumeMounts:
+          {{- if .Values.application.secretName }}
+            - name: application-secret
+              readOnly: true
+              mountPath: /app/config/production.json
+              subPath: production.json
+          {{- else }}
+            []
+          {{- end }}
           ports:
             - name: http
               containerPort: 3000

chart/values.yaml

@@ -14,6 +14,8 @@ imagePullSecrets:
   - name: pull-secret
 nameOverride: ""
 fullnameOverride: ""
+application:
+  secretName: ""
 
 podAnnotations: {}