proxy: add web identity token file env

neondatabase · Jan 12, 2024 · 1ce74c4 · 1ce74c4
1 parent f1c496b
commit 1ce74c4
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/charts/neon-proxy/Chart.yaml b/charts/neon-proxy/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: neon-proxy
 description: Neon Proxy
 type: application
-version: 1.7.13
+version: 1.7.14
 appVersion: "0.1.0"
 kubeVersion: "^1.18.x-x"
 home: https://neon.tech

diff --git a/charts/neon-proxy/README.md b/charts/neon-proxy/README.md
@@ -1,6 +1,6 @@
 # neon-proxy
 
-![Version: 1.7.13](https://img.shields.io/badge/Version-1.7.13-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) [![Lint and Test Charts](https://github.com/neondatabase/helm-charts/actions/workflows/lint-test.yaml/badge.svg)](https://github.com/neondatabase/helm-charts/actions/workflows/lint-test.yaml)
+![Version: 1.7.14](https://img.shields.io/badge/Version-1.7.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) [![Lint and Test Charts](https://github.com/neondatabase/helm-charts/actions/workflows/lint-test.yaml/badge.svg)](https://github.com/neondatabase/helm-charts/actions/workflows/lint-test.yaml)
 
 Neon Proxy
 
@@ -65,6 +65,7 @@ Kubernetes: `^1.18.x-x`
 | settings.authEndpoint | string | `""` | auth endpoint, e.g. "http://console.neon/authenticate_proxy_request/" |
 | settings.awsAccessKeyId | string | `""` | (string) AWS Access Key ID |
 | settings.awsSecretAccessKey | string | `""` | (string) AWS Secret Access Key |
+| settings.awsWebIdentityTokenFile | string | `""` | (string) AWS Web Identity Token File Path |
 | settings.controlplane_token | string | `""` | (string) JWT token to pass to control plane management API |
 | settings.disableDynamicRateLimiter | bool | `true` | (bool) Disable dynamic rate limiter |
 | settings.domain | string | `""` | domain used in TLS cert for client postgres connections |

diff --git a/charts/neon-proxy/templates/deployment.yaml b/charts/neon-proxy/templates/deployment.yaml
@@ -159,6 +159,10 @@ spec:
             - name: AWS_SECRET_ACCESS_KEY
               value: {{ . }}
             {{- end }}
+            {{- with .Values.settings.awsWebIdentityTokenFile }}
+            - name: AWS_WEB_IDENTITY_TOKEN_FILE
+              value: {{ . }}
+            {{- end }}
           {{- end }}
           {{- if .Values.settings.domain }}
           volumeMounts:

diff --git a/charts/neon-proxy/values.yaml b/charts/neon-proxy/values.yaml
@@ -83,6 +83,8 @@ settings:
   awsAccessKeyId: ""
   # settings.awsSecretAccessKey -- (string) AWS Secret Access Key
   awsSecretAccessKey: ""
+  # settings.awsWebIdentityTokenFile -- (string) AWS Web Identity Token File Path
+  awsWebIdentityTokenFile: ""
 
 serviceAccount:
   # serviceAccount.create - Specifies whether a service account should be created