Skip to content

Commit a02b228

Browse files
committed
WZ-55366 - Outpost lite - support additional secrets
Support injecting additional secrets directly to the pod.
1 parent f37d22f commit a02b228

File tree

2 files changed

+13
-0
lines changed

2 files changed

+13
-0
lines changed

wiz-outpost-lite/templates/deployment.yaml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -165,6 +165,11 @@ spec:
165165
- mountPath: /usr/local/share/ca-certificates/
166166
name: ca-certificate
167167
readOnly: true
168+
{{- range $secretName := .Values.secrets }}
169+
- mountPath: /mnt/secrets/{{ $secretName }}
170+
name: {{ $secretName }}
171+
readOnly: true
172+
{{- end }}
168173
terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
169174
{{- with .Values.nodeSelector }}
170175
nodeSelector:
@@ -193,6 +198,12 @@ spec:
193198
- key: caCertificate
194199
path: root.crt
195200
optional: true
201+
{{- range $secret := .Values.secrets }}
202+
- name: {{ $secret }}
203+
secret:
204+
secretName: {{ $secret }}
205+
{{- end }}
206+
196207
---
197208
{{- end }}
198209
{{- end }}

wiz-outpost-lite/values.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -140,3 +140,5 @@ encryption:
140140
create: false
141141
secretName: "" # defaults to wiz-encryption-key-<outpostID>
142142
privateKey: ""
143+
144+
secrets: [] # List of secrets to be used by the runner pod

0 commit comments

Comments
 (0)