Add thermo history Helm chart

templates/external-secrets.yaml

@@ -0,0 +1,52 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: {{ include "thermo.fullname" . }}-postgres-secret
+  labels:
+    {{- include "thermo.labels" . | nindent 4 }}
+spec:
+  refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
+  secretStoreRef:
+    name: {{ .Values.externalSecrets.secretStore.name }}
+    kind: {{ .Values.externalSecrets.secretStore.kind }}
+  target:
+    name: {{ include "thermo.fullname" . }}-postgres-secret
+    creationPolicy: Owner
+    template:
+      type: Opaque
+      data:
+        POSTGRES_DB: {{ .Values.postgres.database | quote }}
+        POSTGRES_USER: {{ .Values.postgres.writerUser | quote }}
+        POSTGRES_PASSWORD: {{ "{{ .writer_password }}" | quote }}
+        GRAFANA_USER: {{ .Values.postgres.readerUser | quote }}
+        GRAFANA_PASSWORD: {{ "{{ .reader_password }}" | quote }}
+  data:
+    - secretKey: writer_password
+      remoteRef:
+        key: {{ .Values.externalSecrets.writerPasswordKey }}
+    - secretKey: reader_password
+      remoteRef:
+        key: {{ .Values.externalSecrets.readerPasswordKey }}
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: {{ include "thermo.fullname" . }}-postgres-redpanda
+  labels:
+    {{- include "thermo.labels" . | nindent 4 }}
+spec:
+  refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
+  secretStoreRef:
+    name: {{ .Values.externalSecrets.secretStore.name }}
+    kind: {{ .Values.externalSecrets.secretStore.kind }}
+  target:
+    name: {{ include "thermo.fullname" . }}-postgres-redpanda
+    creationPolicy: Owner
+    template:
+      type: Opaque
+      data:
+        THERMO_POSTGRES_DSN: {{ printf "postgres://%s:%s@%s-postgres.%s.svc.cluster.local:5432/%s?sslmode=disable" .Values.postgres.writerUser "{{ .writer_password }}" (include "thermo.fullname" .) .Release.Namespace .Values.postgres.database | quote }}
+  data:
+    - secretKey: writer_password
+      remoteRef:
+        key: {{ .Values.externalSecrets.writerPasswordKey }}