Skip to content

Conversation

@Andrea-Gallicchio
Copy link

@Andrea-Gallicchio Andrea-Gallicchio commented Nov 28, 2025

Summary

Add support for referencing an existing Kubernetes secret for htpasswd authentication, avoiding plain text passwords in values.yaml.

Changes

  • Add secrets.existingSecretHtpasswd to reference an existing secret
  • Add secrets.existingSecretHtpasswdKey to specify the key name (defaults to "htpasswd")
  • Update templates to support both generated and existing secrets
  • Add README documentation

Usage

secrets:
  existingSecretHtpasswd: "my-htpasswd-secret"
  existingSecretHtpasswdKey: "htpasswd"  # Optional

Create the secret:

kubectl create secret generic my-htpasswd-secret \
  --from-file=htpasswd=/path/to/htpasswd

If both secrets.htpasswd and secrets.existingSecretHtpasswd are set, the existing secret takes precedence.

Add support for referencing an existing Kubernetes secret for htpasswd authentication, avoiding plain text passwords in `values.yaml`.

- Add `secrets.existingSecretHtpasswd` to reference an existing secret
- Add `secrets.existingSecretHtpasswdKey` to specify the key name (defaults to "htpasswd")
- Update templates to support both generated and existing secrets
- Add README documentation

```yaml
secrets:
  existingSecretHtpasswd: "my-htpasswd-secret"
  existingSecretHtpasswdKey: "htpasswd"  # Optional
```

Create the secret:
```bash
kubectl create secret generic my-htpasswd-secret \
  --from-file=htpasswd=/path/to/htpasswd
```

If both `secrets.htpasswd` and `secrets.existingSecretHtpasswd` are set, the existing secret takes precedence.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant