chore: deployment - flexible runtime configuration

Author: martinothamar

charts/deployment/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v1
 description: A Helm chart for Kubernetes
 # name can only be lowercase. It is used in the templates.
 name: deployment
-version: 3.9.0
+version: 3.10.0

charts/deployment/templates/deployment.yaml

@@ -100,7 +100,7 @@ spec:
               mountPath: {{ $mount.mountPath }}
             {{- end }}
             - name: app-secrets-volume
-              mountPath: /mnt/app-secrets
+              mountPath: {{ .Values.appSecrets.mountPath }}
               readOnly: true
           {{- if .Values.startup.enabled}}
           startupProbe:
@@ -147,5 +147,10 @@ spec:
           {{- end }}
         {{- end }}
         - name: app-secrets-volume
-          secret:
-            secretName: {{ template "fullname" . }}-secrets
+          projected:
+            sources:
+              - secret:
+                  name: {{ template "fullname" . }}-secrets
+{{- with .Values.appSecrets.additionalSources }}
+{{- toYaml . | nindent 14 }}
+{{- end }}

charts/deployment/values.yaml

@@ -91,6 +91,24 @@ volumes:
     secret:
       secretName: accesstoken
 
+appSecrets:
+  mountPath: /mnt/app-secrets
+  additionalSources: []
+  # Additional projected volume sources merged into appSecrets.mountPath.
+  # Example:
+  # additionalSources:
+  #   - configMap:
+  #       name: apps-runtime-common-config
+  #       items:
+  #         - key: runtime-common.json
+  #           path: runtime-common.json
+  #   - secret:
+  #       name: apps-runtime-common-secrets
+  #       optional: true
+  #       items:
+  #         - key: runtime-common-secrets.json
+  #           path: runtime-common-secrets.json
+
 startup:
   enabled: false
   path: /health