fix: ability to set an existing secret on the helm chart

This allows for the sasl secret to be already set in a k8s secret
and this allows it to not be pushed in vai a param

Signed-off-by: Jon Whitcraft <jwhitcraft@mac.com>

charts/kafka-exporter/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: "1.0"
 description: A Helm chart for Kubernetes
 name: kafka-exporter
-version: 1.2.0
+version: 1.2.1
 home: /~https://github.com/abhishekjiitr/kafka-exporter-helm
 maintainers:
   - name: abhishekjiitr

charts/kafka-exporter/templates/deployment.yaml

@@ -32,7 +32,7 @@ spec:
               "metrics": {{ .Values.datadog.metrics | toJson | nindent 16 -}}
             }
            ]
-      {{- end }}    
+      {{- end }}
       labels:
         app.kubernetes.io/name: {{ include "kafka-exporter.name" . }}
         app.kubernetes.io/instance: {{ .Release.Name }}
@@ -44,6 +44,11 @@ spec:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          {{- if .Values.kafkaExporter.sasl.existingSecret }}
+          envFrom:
+            - secretRef:
+                name: {{ .Values.kafkaExporter.sasl.existingSecret }}
+          {{- end }}
           args:
             {{- if .Values.kafkaExporter}}
             {{- range .Values.kafkaExporter.kafka.servers }}
@@ -59,7 +64,9 @@ spec:
             - --sasl.handshake=false
             {{- end }}
             - --sasl.username={{ .Values.kafkaExporter.sasl.username }}
+            {{- if eq .Values.kafkaExporter.sasl.existingSecret "" }}
             - --sasl.password={{ .Values.kafkaExporter.sasl.password }}
+            {{- end }}
             - --sasl.mechanism={{ .Values.kafkaExporter.sasl.mechanism }}
             {{- end }}
             {{- if .Values.kafkaExporter.tls.enabled}}

charts/kafka-exporter/values.yaml

@@ -27,6 +27,7 @@ kafkaExporter:
     handshake: true
     username: ""
     password: ""
+    existingSecret: "" # has the password stored in it. If set, will override password
     mechanism: ""
 
   tls: