DSF: Support Extra Volumes Injection for hub components

Author: xinkechen-evernorth

dynamic-scoring-framework/charts/dynamic-scoring-framework/templates/addon-controller.yaml

@@ -23,6 +23,18 @@ spec:
         args:
           - "/dynamic-scoring-addon"
           - "controller"
+        volumeMounts:
+        {{- with .Values.hubSetting.extraVolumeMounts }}
+{{ toYaml . | nindent 10 }}
+        {{- else }}
+          []
+        {{- end }}
+      volumes:
+      {{- with .Values.hubSetting.extraVolumes }}
+{{ toYaml . | nindent 8 }}
+      {{- else }}
+        []
+      {{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount

dynamic-scoring-framework/charts/dynamic-scoring-framework/templates/dynamic-scoring-controller.yaml

@@ -392,11 +392,21 @@ spec:
           capabilities:
             drop:
             - ALL
-        volumeMounts: []
+        volumeMounts:
+        {{- with .Values.hubSetting.extraVolumeMounts }}
+{{ toYaml . | nindent 10 }}
+        {{- else }}
+          []
+        {{- end }}
       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       serviceAccountName: dynamic-scoring-framework-controller
       terminationGracePeriodSeconds: 10
-      volumes: []
+      volumes:
+      {{- with .Values.hubSetting.extraVolumes }}
+{{ toYaml . | nindent 8 }}
+      {{- else }}
+        []
+      {{- end }}

dynamic-scoring-framework/charts/dynamic-scoring-framework/values.yaml

@@ -1,4 +1,26 @@
 hubSetting:
+  # Additional pod volumes applied to all hub controller Deployments.
+  # Example:
+  # extraVolumes:
+  #   - name: scoring-config
+  #     configMap:
+  #       name: scoring-config
+  #   - name: scoring-secret
+  #     secret:
+  #       secretName: scoring-secret
+  extraVolumes: []
+
+  # Additional volume mounts applied to all hub controller containers.
+  # Example:
+  # extraVolumeMounts:
+  #   - name: scoring-config
+  #     mountPath: /etc/dsf/config
+  #     readOnly: true
+  #   - name: scoring-secret
+  #     mountPath: /etc/dsf/secret
+  #     readOnly: true
+  extraVolumeMounts: []
+
   # Namespace where the hub components (e.g. controllers) will be deployed
   namespace: open-cluster-management