Add support for custom ee pull secret if desired

Author: Martin Jackson

Chart.yaml

@@ -3,5 +3,5 @@ description: A Helm chart to install an ansible-automation-platform instance
 keywords:
 - pattern
 name: ansible-automation-platform-instance
-version: 0.1.0
+version: 0.1.1
 dependencies:

README.md

@@ -1,6 +1,6 @@
 # ansible-automation-platform-instance
 
-![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square)
+![Version: 0.1.1](https://img.shields.io/badge/Version-0.1.1-informational?style=flat-square)
 
 A Helm chart to install an ansible-automation-platform instance
 
@@ -13,7 +13,11 @@ This chart is used to set up the Ansible Automation Platform Operator version 2.
 | aap.eda_disabled | bool | `false` |  |
 | aap.hub_disabled | bool | `true` |  |
 | aap.lightspeed_disabled | bool | `true` |  |
+| eePullSecret.key | string | `"secret/data/hub/ee-pull-secret"` |  |
+| eePullSecret.manage | bool | `false` |  |
 | global.hubClusterDomain | string | `"example.com"` |  |
+| secretStore.kind | string | `"ClusterSecretStore"` |  |
+| secretStore.name | string | `"vault-backend"` |  |
 
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

templates/aap.yaml

@@ -6,6 +6,9 @@ metadata:
   namespace: ansible-automation-platform
 spec:
   controller:
+{{- if .Values.eePullSecret.manage }}
+    ee_pull_credentials_secret: ee-pull-secret
+{{- end }}
     disabled: false
   eda:
     disabled: {{ coalesce .Values.aap.eda_disabled "false"  }}

templates/ee-pull-secret.yaml

@@ -0,0 +1,17 @@
+{{- if .Values.eePullSecret.manage }}
+---
+apiVersion: "external-secrets.io/v1beta1"
+kind: ExternalSecret
+metadata:
+  name: ee-pull-secret
+spec:
+  refreshInterval: 15s
+  secretStoreRef:
+    name: {{ .Values.secretStore.name }}
+    kind: {{ .Values.secretStore.kind }}
+  target:
+    name: ee-pull-secret
+  dataFrom:
+  - extract:
+      key: {{ .Values.eePullSecret.key }}
+{{- end }}

values.yaml

@@ -2,7 +2,15 @@
 global:
   hubClusterDomain: example.com
 
+eePullSecret:
+  manage: false
+  key: secret/data/hub/ee-pull-secret
+
 aap:
   eda_disabled: false
   hub_disabled: true
   lightspeed_disabled: true
+
+secretStore:
+  name: vault-backend
+  kind: ClusterSecretStore