Patch version + changelog for #20 (#21)

Author: bencmbrook

charts/sombra/CHANGELOG.md

@@ -53,3 +53,9 @@
 * Created serviceaccount.yaml template for conditional service account creation
 * Updated deployment to conditionally use the specified service account
 * **Non-breaking change**: Service account functionality is completely opt-in and disabled by default
+
+## 0.6.5
+
+* Added support for client-managed secrets via `envFrom` configuration
+* Allow loading environment variables from ConfigMaps and Secrets using the `envFrom` field
+* **Non-breaking change**: `envFrom` functionality is completely opt-in and disabled by default

charts/sombra/Chart.yaml

@@ -1,15 +1,15 @@
 apiVersion: v2
 name: sombra
-description: A Helm chart for deploying sombra and its dependent services in Kubernetes
+description: A Helm chart to deploy Sombra and its dependent services in a Kubernetes cluster
 type: application
-version: 0.6.4
+version: 0.6.5
 maintainers:
 - name: Transcend
   email: [email protected]
 dependencies:
 - name: llm-classifier
   condition: llm-classifier.enabled
-  version: "0.2.0"
+  version: "0.2.1"
 - name: pathfinder
   condition: pathfinder.enabled
-  version: "0.2.0"
+  version: "0.2.1"

charts/sombra/charts/llm-classifier/Chart.yaml

@@ -1,6 +1,5 @@
 apiVersion: v2
 name: llm-classifier
-description: A Helm chart for deploying LLM Classifier in Kubernetes cluster
+description: A Helm chart to deploy the LLM Classifier in a Kubernetes cluster
 type: application
-version: 0.2.0
-
+version: 0.2.1

charts/sombra/charts/llm-classifier/templates/deployment.yaml

@@ -33,6 +33,10 @@ spec:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          {{- if .Values.envFrom }}
+          envFrom:
+            {{- toYaml .Values.envFrom | nindent 12 }}
+          {{- end }}
           env:
             {{- range $name, $value := .Values.envs }}
             - name: {{ $value.name }}

charts/sombra/charts/llm-classifier/values.yaml

@@ -44,6 +44,8 @@ envs:
   # - name: LLM_KEY_PATH
   #   value: "/etc/llm-classifier/ssl/llm-classifier.key"
 
+envFrom: []
+
 # Define resources as per required throughput
 # Make sure cluster support `nvidia.com/gpu`
 resources:

charts/sombra/charts/pathfinder/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
 name: pathfinder
-description: A Helm chart to deploy Pathfinder in Kubernetes cluster
+description: A Helm chart to deploy Pathfinder in a Kubernetes cluster
 type: application
-version: 0.2.0
+version: 0.2.1

charts/sombra/charts/pathfinder/templates/deployment.yaml

@@ -32,7 +32,10 @@ spec:
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
-          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          {{- if .Values.envFrom }}
+          envFrom:
+            {{- toYaml .Values.envFrom | nindent 12 }}
+          {{- end }}
           env:
             - name: RUN_DATADOG_APM
               value: 'false'

charts/sombra/charts/pathfinder/values.yaml

@@ -81,6 +81,8 @@ envs:
   - name: REQUIRE_AUTHENTICATION
     value: 'true'
 
+envFrom: []
+
 # Enable to use horizontal pod autoscaling based of metrics
 autoscaling:
   enabled: false

charts/sombra/templates/deployment.yaml

@@ -40,7 +40,7 @@ spec:
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if .Values.envFrom }}
           envFrom:
-{{- toYaml .Values.envFrom | nindent 12 }}
+            {{- toYaml .Values.envFrom | nindent 12 }}
           {{- end }}
           env:
             {{- if gt $envs_as_secret_len 0  -}}

charts/sombra/values.yaml

@@ -141,8 +141,6 @@ transcend_ingress:
 # Configure the container service with the minimum set of environment variables
 # @see https://docs.transcend.io/docs/security/end-to-end-encryption/deploying-sombra#3.-configure-the-container-service-with-the-minimum-set-of-environment-variables
 
-envFrom: []
-
 # These environment variables are saved as secret
 envs_as_secret:
   - name: JWT_ECDSA_KEY
@@ -160,6 +158,8 @@ envs:
   - name: LLM_CLASSIFIER_URL
     value: http://<RELEASE_NAME>-llm-classifier.transcend.svc:6081
 
+envFrom: []
+
 # Set to true when deploying multiple Sombra gateways
 isMultiTenant: false