concourse / concourse/concourse-chart
Concourse Helm Chart - Specify custom Worker Secrets name
Nobody has claimed this yet.
- Dominant language
- Mustache
- Stars
- 160
- Forks
- 189
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
When deploying two implementations of the Helm Chart in the same namespace, unable to share a single worker secret between the two deployments.
Describe the solution you'd like
In worker-deployment.yaml and worker-statefulset.yaml, the worker secrets are configured as a named volume as such:
secretName: {{ template "concourse.worker.fullname" . }}
Unfortunately, the above uses a helm template function and the secret name is autogenerated by that function is not configurable nor overridable through the values.yaml or as overrides in the helm chart execution. And if you do override the name to match, name conflicts with the deployment of the Helm chart will ensue.
In our case, we're deploying two (2) groups of workers that are configured very differently (i.e. Windows vs. Unix), and since we already have our worker-secrets configured AND stored outside of the first helm chart, it would be advantageous to share the same secret instead of duplicating it for the second Helm Chart installation. Even another user who has two deployments of Concourse workers via Helm might want to share the secret configuration auto-generated by the first Helm Chart with the second Helm Chart deployment.
The solution would be to allow a custom value to override the secret name created by the helm chart template function.
Describe alternatives you've considered
No response
Additional context
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with values.yaml and the secret volume definitions in worker-deployment.yaml and worker-statefulset.yaml. Trace how the current worker secret name is generated, then verify the chart supports selecting an existing secret for separate installations without naming conflicts. Done means two differently configured worker deployments can reference one shared worker secret.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- helm, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100