bump vals to v0.22.0 (#703)

Signed-off-by: yxxhero <aiopsclub@163.com>
This commit is contained in:
yxxhero
2023-02-17 14:09:49 +08:00
committed by GitHub
parent 9d74fa3513
commit f629ee1ae6
25 changed files with 43 additions and 43 deletions
+17 -17
View File
@@ -1,32 +1,32 @@
# Secrets
# Secrets
helmfile can handle secrets using [helm-secrets](https://github.com/jkroepke/helm-secrets) plugin or using remote secrets storage
(everything that package [vals](https://github.com/variantdev/vals) can handle vault, AWS SSM etc)
This section will describe the second use case.
helmfile can handle secrets using [helm-secrets](https://github.com/jkroepke/helm-secrets) plugin or using remote secrets storage
(everything that package [vals](https://github.com/helmfile/vals) can handle vault, AWS SSM etc)
This section will describe the second use case.
# Remote secrets
# Remote secrets
This paragraph will describe how to use remote secrets storage (vault, SSM etc) in helmfile
This paragraph will describe how to use remote secrets storage (vault, SSM etc) in helmfile
## Fetching single key
To fetch single key from remote secret storage you can use `fetchSecretValue` template function example below
```yaml
# helmfile.yaml
```yaml
# helmfile.yaml
repositories:
- name: stable
url: https://kubernetes-charts.storage.googleapis.com
repositories:
- name: stable
url: https://kubernetes-charts.storage.googleapis.com
environments:
default:
environments:
default:
values:
- service:
password: ref+vault://svc/#pass
login: ref+vault://svc/#login
releases:
- name: service
- name: service
namespace: default
labels:
cluster: services
@@ -37,10 +37,10 @@ releases:
- service:
login: {{ .Values.service.login | fetchSecretValue }} # this will resolve ref+vault://svc/#pass and fetch secret from vault
password: {{ .Values.service.password | fetchSecretValue | quote }}
# - values/service.yaml.gotmpl # alternatively
# - values/service.yaml.gotmpl # alternatively
```
## Fetching multiple keys
Alternatively you can use `expandSecretRefs` to fetch a map of secrets
Alternatively you can use `expandSecretRefs` to fetch a map of secrets
```yaml
# values/service.yaml.gotmpl
service:
@@ -53,6 +53,6 @@ This will produce
service:
login: svc-login # fetched from vault
password: pass
```