Chart updates (#3241)

* Allow deployments to use private images

The docker credentials secret can be created by:
kubectl create secret docker-registry <name> # args

* Update db password secret on update too

Support changing DB password on upgrade.

* Update Readme

* How to use private docker repos
* Clear up some confusion around the ca configmap name

contrib/chart/backstage/README.md

@@ -125,12 +125,14 @@ lighthouse:
 
 ```
 
-For the CA, create a `configMap` named `<helm_release_name>-postgres-ca` with a file called `ca.crt`:
+For the CA, create a `configMap` named `<release name>-<chart name>-postgres-ca` with a file called `ca.crt`:
 
 ```
-kubectl create configmap my-backstage --from-file=ca.crt"
+kubectl create configmap my-company-backstage-postgres-ca --from-file=ca.crt"
 ```
 
+> Where the release name contains the chart name "backstage" then only the release name will be used.
+
 Now install the helm chart:
 
 ```
@@ -155,10 +157,26 @@ backend:
 
 lighthouse:
   image:
-    repository: <image-name
+    repository: <image-name>
     tag: <image-tag>
 ```
 
+### Use a private docker repo
+
+Create a docker-registry secret
+
+```
+kubectl create secret docker-registry <docker_registry_secret_name> # args
+```
+
+> For private images on docker hub --docker-server can be set to docker.io
+
+Reference the secret in your chart values
+
+```yaml
+dockerRegistrySecretName: <docker_registry_secret_name>
+```
+
 ### Different namespace
 
 To install the charts a specific namespace use `--namespace <ns>`:

contrib/chart/backstage/templates/backend-deployment.yaml

@@ -20,6 +20,10 @@ spec:
         component: backend
 
     spec:
+      {{- if .Values.dockerRegistrySecretName }}
+      imagePullSecrets:
+        - name: {{ .Values.dockerRegistrySecretName }}
+      {{- end}}
       containers:
         - name: {{ .Chart.Name }}-backend
           image: {{ .Values.backend.image.repository }}:{{ .Values.backend.image.tag }}

contrib/chart/backstage/templates/frontend-deployment.yaml

@@ -20,6 +20,10 @@ spec:
         component: frontend
 
     spec:
+      {{- if .Values.dockerRegistrySecretName }}
+      imagePullSecrets:
+        - name: {{ .Values.dockerRegistrySecretName }}
+      {{- end}}
       containers:
         - name: {{ .Chart.Name }}-frontend
           image: {{ .Values.frontend.image.repository }}:{{ .Values.frontend.image.tag }}

contrib/chart/backstage/templates/lighthouse-deployment.yaml

@@ -21,6 +21,10 @@ spec:
         component: lighthouse-audit-service
 
     spec:
+      {{- if .Values.dockerRegistrySecretName }}
+      imagePullSecrets:
+        - name: {{ .Values.dockerRegistrySecretName }}
+      {{- end}}
       containers:
         - name: lighthouse-audit-service
           image: {{ .Values.lighthouse.image.repository }}:{{ .Values.lighthouse.image.tag }}

contrib/chart/backstage/templates/postgresql-password-secret.yaml

@@ -8,7 +8,7 @@ metadata:
   labels:
     release: {{ .Release.Name }}
   annotations:
-    "helm.sh/hook": "pre-install"
+    "helm.sh/hook": "pre-install,pre-upgrade"
     "helm.sh/hook-delete-policy": "before-hook-creation"
 data:
   postgresql-password: {{ .Values.appConfig.backend.database.connection.password | b64enc }}
@@ -23,7 +23,7 @@ metadata:
   labels:
     release: {{ .Release.Name }}
   annotations:
-    "helm.sh/hook": "pre-install"
+    "helm.sh/hook": "pre-install,pre-upgrade"
     "helm.sh/hook-delete-policy": "before-hook-creation"
 data:
   postgresql-password: {{ .Values.lighthouse.database.connection.password | b64enc }}