feat: support existing secrets for redis & clickhouse

HelmChart/Public/oneuptime/templates/clickhouse-statefulset.yaml

@@ -92,8 +92,13 @@ spec:
         - name: CLICKHOUSE_PASSWORD
           valueFrom:
             secretKeyRef:
+              {{- if .Values.clickhouse.auth.existingSecret.name }}
+              name: {{ .Values.clickhouse.auth.existingSecret.name }}
+              key: {{ .Values.clickhouse.auth.existingSecret.passwordKey }}
+              {{- else }}
               name: {{ .Release.Name }}-clickhouse
               key: admin-password
+              {{- end }}
         - name: CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT
           value: "1"
         livenessProbe:

HelmChart/Public/oneuptime/templates/redis-statefulset.yaml

@@ -79,8 +79,13 @@ spec:
         - name: REDIS_PASSWORD
           valueFrom:
             secretKeyRef:
+              {{- if .Values.redis.auth.existingSecret.name }}
+              name: {{ .Values.redis.auth.existingSecret.name }}
+              key: {{ .Values.redis.auth.existingSecret.passwordKey }}
+              {{- else }}
               name: {{ .Release.Name }}-redis
               key: redis-password
+              {{- end }}
         livenessProbe:
           exec:
             command:

HelmChart/Public/oneuptime/templates/secrets.yaml

@@ -64,7 +64,7 @@ stringData:
 
 ---
 
-{{- if .Values.redis.enabled }}
+{{- if and .Values.redis.enabled (not .Values.redis.auth.existingSecret.name) }}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -217,7 +217,7 @@ stringData:
 
 ---
 
-{{- if .Values.clickhouse.enabled }}
+{{- if and .Values.clickhouse.enabled (not .Values.clickhouse.auth.existingSecret.name) }}
 apiVersion: v1
 kind: Secret
 metadata:

HelmChart/Public/oneuptime/values.schema.json

@@ -349,6 +349,18 @@
             },
             "password": {
               "type": ["string", "null"]
+            },
+            "existingSecret": {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": ["string", "null"]
+                },
+                "passwordKey": {
+                  "type": ["string", "null"]
+                }
+              },
+              "additionalProperties": false
             }
           },
           "additionalProperties": false
@@ -450,6 +462,18 @@
           "properties": {
             "password": {
               "type": ["string", "null"]
+            },
+            "existingSecret": {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": ["string", "null"]
+                },
+                "passwordKey": {
+                  "type": ["string", "null"]
+                }
+              },
+              "additionalProperties": false
             }
           },
           "additionalProperties": false

HelmChart/Public/oneuptime/values.yaml

@@ -132,6 +132,10 @@ clickhouse:
     username: oneuptime
     # Will be auto-generated if not provided
     password:
+    # Use an existing secret for the ClickHouse password
+    existingSecret:
+      name:
+      passwordKey:
   image:
     repository: clickhouse/clickhouse-server
     tag: latest
@@ -197,6 +201,10 @@ redis:
   auth:
     # Will be auto-generated if not provided
     password:
+    # Use an existing secret for the Redis password
+    existingSecret:
+      name:
+      passwordKey:
   image:
     repository: redis
     tag: latest