From 123edce24589ee3a1d393323edcc4a46c8a9ad32 Mon Sep 17 00:00:00 2001
From: Michelle Weidling <98-mrodzis@users.noreply.gitlab.gwdg.de>
Date: Mon, 11 Sep 2023 11:45:28 +0000
Subject: [PATCH] feat: add Vault annotations

---
 quiver-mongoapi-helm/Chart.yaml  |  2 +-
 quiver-mongoapi-helm/values.yaml | 14 ++++++++++++--
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/quiver-mongoapi-helm/Chart.yaml b/quiver-mongoapi-helm/Chart.yaml
index 974368a..93b216c 100644
--- a/quiver-mongoapi-helm/Chart.yaml
+++ b/quiver-mongoapi-helm/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.0
+version: 0.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/quiver-mongoapi-helm/values.yaml b/quiver-mongoapi-helm/values.yaml
index 349f25a..84d58b3 100644
--- a/quiver-mongoapi-helm/values.yaml
+++ b/quiver-mongoapi-helm/values.yaml
@@ -10,6 +10,18 @@ image:
   # Overrides the image tag whose default is the chart appVersion.
   tag: "main"
 
+podAnnotations:
+  vault.hashicorp.com/agent-inject: "true"
+  vault.hashicorp.com/agent-inject-secret-credentials.txt: subugoe/ocrd-quiver/mongodb
+  vault.hashicorp.com/agent-inject-template-credentials.txt: |
+          {{- with secret "subugoe/ocrd-quiver/mongodb" -}}
+          {{ .Data.data.users }}
+          {{ .Data.data.usersPasswords }}
+          {{- end -}}
+  vault.hashicorp.com/secret-volume-path-credentials.txt: /var/lib/quiver
+  vault.hashicorp.com/role: subugoe
+
+
 imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
@@ -23,8 +35,6 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
-podAnnotations: {}
-
 podSecurityContext: {}
   # fsGroup: 2000
 
-- 
GitLab