feat(cloudflare-tunnel-remote): add external secrets support

charts/cloudflare-tunnel-remote/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.1.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/cloudflare-tunnel-remote/templates/deployment.yaml

@@ -40,7 +40,7 @@ spec:
         - name: TUNNEL_TOKEN
           valueFrom:
             secretKeyRef:
-              name: {{ include "cloudflare-tunnel-remote.fullname" . }}
+              name: {{ .Values.cloudflare.secretName | default (include "cloudflare-tunnel-remote.fullname" .) }}
               key: tunnelToken
         livenessProbe:
           httpGet:

charts/cloudflare-tunnel-remote/templates/secret.yaml

@@ -1,5 +1,6 @@
 # This credentials secret allows cloudflared to authenticate itself
 # to the Cloudflare infrastructure.
+{{- if and (.Values.cloudflare.tunnel_token) (not .Values.cloudflare.secretName) }}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -8,3 +9,4 @@ metadata:
     {{- include "cloudflare-tunnel-remote.labels" . | nindent 4 }}
 stringData:
   tunnelToken: {{ .Values.cloudflare.tunnel_token }}
+{{- end }}

charts/cloudflare-tunnel-remote/values.yaml

@@ -3,6 +3,8 @@
 # Cloudflare parameters.
 cloudflare:
   tunnel_token: ""
+  # If defined, no secret is created for the credentials, and instead, the secret referenced is used
+  secretName: null
 
 image:
   repository: cloudflare/cloudflared