feat(step-certificates): add extraObjects and podExtraAnnotations

step-certificates/examples/extra-objects/values.yaml

@@ -0,0 +1,26 @@
+podExtraAnnotations:
+  prometheus.io/path: /metrics
+  prometheus.io/port: "9100"
+  prometheus.io/scrape: "true"
+
+extraObjects:
+  - |
+    apiVersion: monitoring.googleapis.com/v1
+    kind: PodMonitoring
+    metadata:
+      name: {{ .Release.Name }}-podmonitoring
+    spec:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: {{ include "step-certificates.name" . }}
+      endpoints:
+        - port: 9090
+          path: /metrics
+          interval: 30s
+      targetLabels:
+        metadata:
+          - container
+          - pod
+          - node
+          - top_level_controller_name
+          - top_level_controller_type

step-certificates/templates/_helpers.tpl

@@ -66,6 +66,17 @@ Create CA DNS
 {{- end -}}
 {{- end -}}
 
+{{/*
+Renders a complete tree, including values that contains template.
+*/}}
+{{- define "step-certificates.render" -}}
+  {{- if typeIs "string" .value }}
+    {{- tpl .value .context }}
+  {{ else }}
+    {{- tpl (.value | toYaml) .context }}
+  {{- end }}
+{{- end -}}
+
 {{/*
 Linked CA variables
 */}}

step-certificates/templates/ca.yaml

@@ -23,8 +23,11 @@ spec:
         {{- with .Values.podExtraLabels }}
         {{- toYaml . | nindent 8 }}
         {{- end }}
-      {{- if .Values.inject.enabled }}
       annotations:
+        {{- with .Values.podExtraAnnotations }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
+      {{- if .Values.inject.enabled }}
         checksum/config: {{ include (print $.Template.BasePath "/configmaps.yaml") . | sha256sum }}
         checksum/secret: {{ include (print $.Template.BasePath "/secrets.yaml") . | sha256sum }}
       {{- end }}

step-certificates/templates/extraobjects.yaml

@@ -0,0 +1,4 @@
+{{- range .Values.extraObjects }}
+---
+{{ include "step-certificates.render" (dict "value" . "context" $) }}
+{{- end }}

step-certificates/values.yaml

@@ -67,6 +67,12 @@ bootstrap:
 # Extra labels
 podExtraLabels: {}
 
+# Extra annotations
+podExtraAnnotations: {}
+
+# Extra objects to deploy
+extraObjects: []
+
 # inject contains values to be injected into config maps and secrets
 inject:
   enabled: false