From 6fbde8b08ce25875387fdde0598c527973bc34cc Mon Sep 17 00:00:00 2001
From: Timothy Olaleke <timothyolaleke@gmail.com>
Date: Wed, 10 Apr 2024 10:07:55 +0100
Subject: [PATCH 1/3] external secret templating

---
 templates/externalsecret.yaml | 18 ++++++++++++++++++
 values.yaml                   | 12 ++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 templates/externalsecret.yaml

diff --git a/templates/externalsecret.yaml b/templates/externalsecret.yaml
new file mode 100644
index 0000000..a445e77
--- /dev/null
+++ b/templates/externalsecret.yaml
@@ -0,0 +1,18 @@
+{{- if (.Values.externalSecret.enabled) -}}
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: {{ .Values.externalSecret.name }}
+spec:
+  refreshInterval: {{ .Values.externalSecret.refreshInterval }}
+  secretStoreRef:
+    name: {{ .Values.externalSecret.secretStoreRef.name }}
+    kind: ClusterSecretStore
+  target:
+    name: {{ .Values.externalSecret.target.name }}
+    creationPolicy: {{ .Values.externalSecret.target.creationPolicy }}
+  dataFrom:
+  - extract:
+      key: {{ .Values.externalSecret.dataFrom.key }}
+{{- end -}}
+
diff --git a/values.yaml b/values.yaml
index 7596d6b..fdd76a4 100644
--- a/values.yaml
+++ b/values.yaml
@@ -68,6 +68,18 @@ sealedSecret:
   encryptedData: {}
 
 
+externalSecret:
+  enabled: false
+  name: app-secret-external
+  refreshInterval: 1m
+  secretStoreRef:
+    name: cluster-secret-store
+  target:
+    name: app-secret-external
+    creationPolicy: Owner
+  dataFrom:
+    key: app-secret
+
 imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""

From c7afef19b1318f59a223e7a1685f1b071206f408 Mon Sep 17 00:00:00 2001
From: Timothy Olaleke <timothyolaleke@gmail.com>
Date: Wed, 10 Apr 2024 10:12:41 +0100
Subject: [PATCH 2/3] add support for labels

---
 templates/externalsecret.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates/externalsecret.yaml b/templates/externalsecret.yaml
index a445e77..e159959 100644
--- a/templates/externalsecret.yaml
+++ b/templates/externalsecret.yaml
@@ -3,6 +3,10 @@ apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: {{ .Values.externalSecret.name }}
+  labels:
+    {{- with .Values.externalSecret.extraLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}  
 spec:
   refreshInterval: {{ .Values.externalSecret.refreshInterval }}
   secretStoreRef:

From d4fdba1b4e7b7a79e98b0e794c3de73a45dea69c Mon Sep 17 00:00:00 2001
From: Timothy Olaleke <timothyolaleke@gmail.com>
Date: Wed, 10 Apr 2024 10:17:42 +0100
Subject: [PATCH 3/3] pass externalSecret to deployment

---
 templates/deployment.yaml     | 4 ++++
 templates/externalsecret.yaml | 2 +-
 values.yaml                   | 1 -
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/templates/deployment.yaml b/templates/deployment.yaml
index 9dd77d2..e9a84ec 100644
--- a/templates/deployment.yaml
+++ b/templates/deployment.yaml
@@ -76,6 +76,10 @@ spec:
             - secretRef:
                 name: {{ include "microservice.fullname" . }}-sealedsecret
             {{- end }}
+            {{- if .Values.externalSecret.enabled }}
+            - secretRef:
+                name: {{ .Values.externalSecret.name }}
+            {{- end }}            
           {{- if .Values.livenessProbe.enabled }}
           livenessProbe:
             httpGet:
diff --git a/templates/externalsecret.yaml b/templates/externalsecret.yaml
index e159959..94e2ea9 100644
--- a/templates/externalsecret.yaml
+++ b/templates/externalsecret.yaml
@@ -13,7 +13,7 @@ spec:
     name: {{ .Values.externalSecret.secretStoreRef.name }}
     kind: ClusterSecretStore
   target:
-    name: {{ .Values.externalSecret.target.name }}
+    name: {{ .Values.externalSecret.name }}
     creationPolicy: {{ .Values.externalSecret.target.creationPolicy }}
   dataFrom:
   - extract:
diff --git a/values.yaml b/values.yaml
index fdd76a4..f636dad 100644
--- a/values.yaml
+++ b/values.yaml
@@ -75,7 +75,6 @@ externalSecret:
   secretStoreRef:
     name: cluster-secret-store
   target:
-    name: app-secret-external
     creationPolicy: Owner
   dataFrom:
     key: app-secret