Support Kubernetes secrets for the refresh token (#15)

flexera-public · Sep 14, 2023 · 263ce32 · 263ce32
1 parent 756d7c0
commit 263ce32
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/helm-chart/templates/cronjob.yaml b/helm-chart/templates/cronjob.yaml
@@ -22,7 +22,11 @@ spec:
             {{- end }}
             env:
               - name: REFRESH_TOKEN
+              {{- if eq (typeOf .Values.flexera.refreshToken) "string" }}
                 value: "{{ .Values.flexera.refreshToken }}"
+              {{- else }}
+                {{- toYaml .Values.flexera.refreshToken | nindent 16 }}
+              {{- end }}
               - name: ORG_ID
                 value: "{{ .Values.flexera.orgId }}"
               - name: BILL_CONNECT_ID

diff --git a/helm-chart/values.yaml b/helm-chart/values.yaml
@@ -20,6 +20,15 @@ cronSchedule: "0 */6 * * *" # every 6 hours
 
 flexera:
   # -- Refresh Token from FlexeraOne
+  # You can provide the refresh token in two ways:
+  # 1. Directly as a string:
+  #    refreshToken: "your_token_here"
+  # 2. Reference it from a Kubernetes secret:
+  #    refreshToken:
+  #      valueFrom:
+  #        secretKeyRef:
+  #          name: flexera-secrets  # Name of the Kubernetes secret
+  #          key: refresh_token     # Key in the secret containing the refresh token
   refreshToken: ""
   # -- Flexera Organization ID
   orgId: ""