Customize environment

.github/workflows/ci.yaml

@@ -49,7 +49,7 @@ jobs:
         with:
           name: vaas
           repository: gdatasoftwareag/charts
-          tag: 1.0.3
+          tag: 1.0.4
           path: charts/vaas
           registry: ghcr.io
           registry_username: ${{ secrets.REGISTRY_USERNAME }}

.gitignore

@@ -3,4 +3,7 @@
 *.log
 *-locale.yaml
 *.tgz
-.fleet/
+.fleet/
+values-local.yaml
+.output/
+Chart.lock

charts/vaas/Chart.yaml

@@ -1,14 +1,14 @@
 apiVersion: v2
 name: vaas
-version: 1.0.3
+version: 1.0.4
 description: Deployment of a Verdict-as-a-Service on-premise instance
 maintainers:
   - name: G DATA CyberDefense AG
     email: [email protected]
 type: application
 dependencies:
   - name: redis
-    version: 18.13.0
+    version: 18.14.0
     condition: redis.enabled
     repository: https://charts.bitnami.com/bitnami
   - name: gdscan

charts/vaas/templates/gateway/_helpers.tpl

@@ -59,33 +59,3 @@ Selector labels
 app.kubernetes.io/name: {{ include "gateway.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
-
-{{/*
-Create environment variables to configure gateway container.
-*/}}
-{{- define "gateway.env" }}
-- name: Authentication__Schemes__Bearer__Authority
-  value: {{.Values.gateway.authentication.authority}} 
-- name: Authentication__Schemes__Bearer__RequireHttpsMetadata
-  value: "false"
-- name: Upload__Endpoint
-  value: {{.Values.gateway.uploadUrl}}
-- name: JwtSettings__Secret
-  value: {{ randAlphaNum 64 }}
-- name: GDScanConfiguration__Url
-  value: "http://gdscan:8080/scan/body"
-- name: RedisConfiguration__Configuration
-  value: "redis-master"
-{{- if .Values.gateway.cloudhashlookup.enabled }}
-- name: VerdictAsAService__Url
-  value: {{ .Values.gateway.options.url | quote }}
-- name: VerdictAsAService__TokenUrl
-  value: {{ .Values.gateway.options.tokenurl | quote }}
-- name: VerdictAsAService__Credentials__GrantType
-  value: {{ .Values.gateway.options.credentials.granttype | quote }}
-- name: VerdictAsAService__Credentials__ClientId
-  value: {{ .Values.gateway.options.credentials.clientid | quote }}
-- name: VerdictAsAService__Credentials__ClientSecret
-  {{ toYaml .Values.gateway.options.credentials.clientsecret }}
-{{- end }}
-{{- end }}

charts/vaas/templates/gateway/statefulset.yaml

@@ -36,8 +36,34 @@ spec:
           volumeMounts:
           - mountPath: /tmp
             name: gateway-tmp
-          env: 
-            {{- include "gateway.env" . | nindent 12 }}
+          env:
+            {{- if .Values.gateway.extraEnvVars }}
+            {{- toYaml .Values.gateway.extraEnvVars | nindent 12 }}
+            {{- end }}
+            - name: Authentication__Schemes__Bearer__Authority
+              value: {{.Values.gateway.authentication.authority}} 
+            - name: Authentication__Schemes__Bearer__RequireHttpsMetadata
+              value: "false"
+            - name: Upload__Endpoint
+              value: {{.Values.gateway.uploadUrl}}
+            - name: JwtSettings__Secret
+              value: {{ randAlphaNum 64 }}
+            - name: GDScanConfiguration__Url
+              value: "http://gdscan:8080/scan/body"
+            - name: RedisConfiguration__Configuration
+              value: "redis-master"
+            {{- if .Values.gateway.cloudhashlookup.enabled }}
+            - name: VerdictAsAService__Url
+              value: {{ .Values.gateway.options.url | quote }}
+            - name: VerdictAsAService__TokenUrl
+              value: {{ .Values.gateway.options.tokenurl | quote }}
+            - name: VerdictAsAService__Credentials__GrantType
+              value: {{ .Values.gateway.options.credentials.granttype | quote }}
+            - name: VerdictAsAService__Credentials__ClientId
+              value: {{ .Values.gateway.options.credentials.clientid | quote }}
+            - name: VerdictAsAService__Credentials__ClientSecret
+              {{ toYaml .Values.gateway.options.credentials.clientsecret }}
+            {{- end }}
           ports:
             - name: http
               containerPort: {{ .Values.gateway.service.http.port }}

charts/vaas/values.yaml

@@ -134,6 +134,8 @@ gateway:
   tolerations: []
   affinity: {}
 
+  extraEnvVars: []
+
   # This block is only for G DATA's internal usage.
   hashlookup:
     enabled: false