feat(vector): add secret annotations

charts/vector/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: vector
-version: "0.43.0"
+version: "0.43.1"
 kubeVersion: ">=1.15.0-0"
 description: A lightweight, ultra-fast tool for building observability pipelines
 type: application

charts/vector/README.md

@@ -1,6 +1,6 @@
 # Vector
 
-![Version: 0.43.0](https://img.shields.io/badge/Version-0.43.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.47.0-distroless-libc](https://img.shields.io/badge/AppVersion-0.47.0--distroless--libc-informational?style=flat-square)
+![Version: 0.43.1](https://img.shields.io/badge/Version-0.43.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.47.0-distroless-libc](https://img.shields.io/badge/AppVersion-0.47.0--distroless--libc-informational?style=flat-square)
 
 [Vector](https://vector.dev/) is a high-performance, end-to-end observability data pipeline that puts you in control of your observability data. Collect, transform, and route all your logs, metrics, and traces to any vendors you want today and any other vendors you may want tomorrow. Vector enables dramatic cost reduction, novel data enrichment, and data security where you need it, not where is most convenient for your vendors.
 
@@ -208,6 +208,7 @@ helm install <RELEASE_NAME> \
 | rollWorkload | bool | `true` | Add a checksum of the generated ConfigMap to workload annotations. |
 | rollWorkloadExtraObjects | bool | `false` | Add a checksum of the generated ExtraObjects to workload annotations. |
 | rollWorkloadSecrets | bool | `false` | Add a checksum of the generated Secret to workload annotations. |
+| secrets.annotations | object | `{}` | Set annotations on Vector Secrets. |
 | secrets.generic | object | `{}` | Each Key/Value will be added to the Secret's data key, each value should be raw and NOT base64 encoded. Any secrets can be provided here. It's commonly used for credentials and other access related values. **NOTE: Don't commit unencrypted secrets to git!** |
 | securityContext | object | `{}` | Specify securityContext on Vector containers. |
 | service.annotations | object | `{}` | Set annotations on Vector's Service. |

charts/vector/templates/secret.yaml

@@ -6,6 +6,8 @@ metadata:
   namespace: {{ $.Release.Namespace | quote }}
   labels:
     {{- include "vector.labels" $ | nindent 4 }}
+  annotations:
+    {{- toYaml $.Values.secrets.annotations | nindent 4 }}
 type: Opaque
 data:
 {{- range $key, $value := $.Values.secrets.generic }}

charts/vector/values.yaml

@@ -65,6 +65,8 @@ podManagementPolicy: OrderedReady
 
 # Create a Secret resource for Vector to use.
 secrets:
+  # secrets.annotations -- Set annotations on Vector Secrets.
+  annotations: {}
   # secrets.generic -- Each Key/Value will be added to the Secret's data key, each value should be raw and NOT base64
   # encoded. Any secrets can be provided here. It's commonly used for credentials and other access related values.
   # **NOTE: Don't commit unencrypted secrets to git!**