diff --git a/helm/templates/deployment.yaml b/helm/templates/deployment.yaml index 92d514fd..72625e9d 100644 --- a/helm/templates/deployment.yaml +++ b/helm/templates/deployment.yaml @@ -38,7 +38,15 @@ spec: - name: {{ $key }} value: {{ include "stac-auth-proxy.envValue" $value }} {{- end }} + {{- with .Values.extraVolumeMounts }} + volumeMounts: + {{- toYaml . | nindent 12 }} + {{- end }} + {{- with .Values.extraVolumes }} + volumes: + {{- toYaml . | nindent 8 }} + {{- end }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} diff --git a/helm/values.schema.yaml b/helm/values.schema.yaml index 9df052a3..bd415aed 100644 --- a/helm/values.schema.yaml +++ b/helm/values.schema.yaml @@ -236,6 +236,36 @@ properties: additionalProperties: true description: "Init containers to run before the main container starts" + extraVolumes: + type: array + items: + type: object + additionalProperties: true + description: "Additional volumes to mount (e.g., ConfigMaps for custom filter files)" + default: [] + + extraVolumeMounts: + type: array + items: + type: object + required: ["name", "mountPath"] + properties: + name: + type: string + description: "Name of the volume to mount" + mountPath: + type: string + description: "Path within the container at which the volume should be mounted" + subPath: + type: string + description: "Path within the volume from which the container's volume should be mounted" + readOnly: + type: boolean + description: "Mounted read-only if true, read-write otherwise" + additionalProperties: true + description: "Additional volume mounts for the container" + default: [] + serviceAccount: type: object properties: diff --git a/helm/values.yaml b/helm/values.yaml index e791e0d2..8bad227a 100644 --- a/helm/values.yaml +++ b/helm/values.yaml @@ -46,6 +46,23 @@ nodeSelector: {} tolerations: [] affinity: {} +# Additional volumes to mount +extraVolumes: [] +# Example: +# extraVolumes: +# - name: filters +# configMap: +# name: stac-auth-proxy-filters + +# Additional volume mounts for the container +extraVolumeMounts: [] +# Example: +# extraVolumeMounts: +# - name: filters +# mountPath: /app/src/stac_auth_proxy/custom_filters.py +# subPath: custom_filters.py +# readOnly: true + # Init containers to run before the main container starts # initContainers: [] # Example: