Merge branch 'add-vault-annotations' into 'main'

feat: add Vault annotations

See merge request !2

quiver-mongoapi-helm/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.0
+version: 0.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

quiver-mongoapi-helm/values.yaml

@@ -10,6 +10,18 @@ image:
   # Overrides the image tag whose default is the chart appVersion.
   tag: "main"
 
+podAnnotations:
+  vault.hashicorp.com/agent-inject: "true"
+  vault.hashicorp.com/agent-inject-secret-credentials.txt: subugoe/ocrd-quiver/mongodb
+  vault.hashicorp.com/agent-inject-template-credentials.txt: |
+          {{- with secret "subugoe/ocrd-quiver/mongodb" -}}
+          {{ .Data.data.users }}
+          {{ .Data.data.usersPasswords }}
+          {{- end -}}
+  vault.hashicorp.com/secret-volume-path-credentials.txt: /var/lib/quiver
+  vault.hashicorp.com/role: subugoe
+
+
 imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
@@ -23,8 +35,6 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
-podAnnotations: {}
-
 podSecurityContext: {}
   # fsGroup: 2000