feat: add external-secrets template (#380)

Author: mikhail-klimko

charts/cf-runtime/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 description: A Helm chart for Codefresh Runner
 name: cf-runtime
-version: 4.0.1
+version: 4.0.2
 keywords:
   - codefresh
   - runner
@@ -14,9 +14,11 @@ maintainers:
     url: https://codefresh-io.github.io/
 annotations:
   artifacthub.io/changes: |
-    - kind: changed
-      description: Update cf-common lib chart
+    - kind: added
+      description: Add external secrets template
+    - kind: fixed
+      description: Fix condition if existing secrets are provided (API and Agent tokens)
 dependencies:
   - name: cf-common
     repository: https://chartmuseum.codefresh.io/cf-common
-    version: 0.12.1
+    version: 0.12.2

charts/cf-runtime/README.md

@@ -1,6 +1,6 @@
 ## Codefresh Runner
 
-![Version: 4.0.1](https://img.shields.io/badge/Version-4.0.1-informational?style=flat-square)
+![Version: 4.0.2](https://img.shields.io/badge/Version-4.0.2-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/installation/codefresh-runner/) to Kubernetes.
 
@@ -662,7 +662,7 @@ Go to [https://<YOUR_ONPREM_DOMAIN_HERE>/admin/runtime-environments/system](http
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://chartmuseum.codefresh.io/cf-common | cf-common | 0.12.1 |
+| https://chartmuseum.codefresh.io/cf-common | cf-common | 0.12.2 |
 
 ## Values
 

charts/cf-runtime/templates/other/external-secrets.yaml

@@ -0,0 +1,2 @@
+{{ $templateName := printf "cf-common-%s.external-secrets" (index .Subcharts "cf-common").Chart.Version }}
+{{- include $templateName . -}}

charts/cf-runtime/templates/runner/secret.yaml

@@ -2,6 +2,6 @@
 {{- $_ := set $runnerContext "Values" (get .Values "runner") }}
 {{- $_ := set $runnerContext.Values "global" (get .Values "global") }}
 
-{{- if and $runnerContext.Values.enabled (not $runnerContext.Values.global.existingAgentToken) .Values.runtime.agent }}
+{{- if and $runnerContext.Values.enabled (not (or $runnerContext.Values.global.existingAgentToken $runnerContext.Values.global.agentTokenSecretKeyRef)) .Values.runtime.agent }}
 {{- include "runner.resources.secret" $runnerContext }}
 {{- end }}

charts/cf-runtime/templates/runtime/secret-dind-certs.yaml

@@ -1,5 +1,5 @@
 {{- if .Values.runtime.agent }}
-{{- if or (not .Values.global.existingDindCertsSecret ) (not .Values.global.dindCertsSecretRef) }}
+{{- if not (or .Values.global.existingDindCertsSecret .Values.global.dindCertsSecretRef) }}
 apiVersion: v1
 type: Opaque
 kind: Secret