[Feature-17566][Helm] add secrets and initContainers in worker statefulset

deploy/kubernetes/dolphinscheduler/templates/statefulset-dolphinscheduler-worker.yaml

@@ -60,6 +60,10 @@ spec:
       imagePullSecrets:
       - name: {{ .Values.image.pullSecret }}
       {{- end }}
+      {{- if .Values.worker.initContainers }}
+      initContainers:
+        {{- toYaml .Values.worker.initContainers | nindent 8 }}
+      {{- end }}
       containers:
         - name: {{ include "dolphinscheduler.fullname" . }}-worker
           image: {{ include "dolphinscheduler.image.fullname.worker" . }}
@@ -83,6 +87,16 @@ spec:
           envFrom:
             - configMapRef:
                 name: {{ include "dolphinscheduler.fullname" . }}-common
+            {{- if .Values.worker.envFromSecret }}
+            - secretRef:
+                name: {{ .Values.worker.envFromSecret }}
+            {{- end }}
+            {{- if .Values.worker.envFromSecrets }}
+            {{- range .Values.worker.envFromSecrets }}
+            - secretRef:
+                name: {{ . }}
+            {{- end }}
+            {{- end }}
           {{- if .Values.worker.resources }}
           resources:
             {{- toYaml .Values.worker.resources | nindent 12 }}
@@ -123,6 +137,9 @@ spec:
             {{- include "dolphinscheduler.sharedStorage.volumeMount" . | nindent 12 }}
             {{- include "dolphinscheduler.fsFileResource.volumeMount" . | nindent 12 }}
             {{- include "dolphinscheduler.etcd.ssl.volumeMount" . | nindent 12 }}
+            {{- if .Values.worker.extraVolumeMounts }}
+            {{- toYaml .Values.worker.extraVolumeMounts | nindent 12 }}
+            {{- end }}
       volumes:
         {{- if .Values.worker.persistentVolumeClaim.enabled }}
         - name: {{ include "dolphinscheduler.fullname" . }}-worker-data
@@ -156,6 +173,9 @@ spec:
         {{- include "dolphinscheduler.sharedStorage.volume" . | nindent 8 }}
         {{- include "dolphinscheduler.fsFileResource.volume" . | nindent 8 }}
         {{- include "dolphinscheduler.etcd.ssl.volume" . | nindent 8 }}
+        {{- if .Values.worker.extraVolumes }}
+        {{- toYaml .Values.worker.extraVolumes | nindent 8 }}
+        {{- end }}
   {{- if .Values.worker.persistentVolumeClaim.enabled }}
   volumeClaimTemplates:
     {{- if .Values.worker.persistentVolumeClaim.dataPersistentVolume.enabled }}

deploy/kubernetes/dolphinscheduler/values.yaml

@@ -583,6 +583,38 @@ worker:
   # -- Update strategy
   # ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
   #
+  # -- Direct Secret Mounting
+  # Mount secrets directly as environment variables
+  # Single secret
+  envFromSecret: ""
+
+  # Multiple secrets (advanced use cases)
+  # Use when you have variables distributed across different secrets
+  # envFromSecrets:
+  #   - "git-sync-secret"        # Git synchronization credentials
+  #   - "database-secret"        # Database connection details
+  #   - "external-api-secret"    # Third-party API keys
+
+  # -- Init Container for Advanced Processing
+  # Use when you need to transform, validate, or prepare configuration files
+  initContainers: {}
+    - name: config-processor
+      image: busybox:latest
+      command:
+        - /bin/sh
+        - -c
+        - |
+          echo "⚙️ Init startup settings..."
+          # Create specific starup script for an specific environment settings in worker pods.
+          # You can use unix variables from secrets
+      envFrom:
+        # -- Example secret name for initContainer
+        - secretRef:
+            name: git-sync-secret
+        # -- Example volumeMounts for initContiner
+      volumeMounts:
+        - name: shared-config
+          mountPath: /shared-config
   updateStrategy:
     type: RollingUpdate
   # -- Replicas is the desired number of replicas of the given Template.