[telegraf] Add envFromSecret to pass sensitive data into environment (#285)

charts/telegraf/Chart.yaml

 apiVersion: v2
 name: telegraf
-version: 1.7.38
-appVersion: 1.18.0
+version: 1.8.0
+appVersion: 1.18.3
 deprecated: false
 description: Telegraf is an agent written in Go for collecting, processing, aggregating, and writing metrics.
 keywords:

charts/telegraf/templates/deployment.yaml

@@ -41,6 +41,11 @@ spec:
         {{- end }}
         env:
 {{ toYaml .Values.env | indent 8 }}
+{{- if .Values.envFromSecret }}
+        envFrom:
+          - secretRef:
+              name: {{ .Values.envFromSecret . }}
+{{- end }}
         volumeMounts:
         - name: config
           mountPath: /etc/telegraf

charts/telegraf/templates/role.yaml

 {{- if .Values.rbac.create }}
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 {{- if .Values.rbac.clusterWide }}
 kind: ClusterRole
 {{- else }}
@@ -12,4 +12,4 @@ metadata:
     {{- include "telegraf.labels" . | nindent 4 }}
 rules:
 {{ toYaml .Values.rbac.rules | indent 2 }}
-{{- end }}
\ No newline at end of file
+{{- end }}

charts/telegraf/templates/rolebinding.yaml

 {{- if .Values.rbac.create }}
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 {{- if .Values.rbac.clusterWide }}
 kind: ClusterRoleBinding
 {{- else }}
@@ -21,4 +21,4 @@ roleRef:
   kind: Role
   {{- end }}
   name: {{ template "telegraf.fullname" . }}
-{{- end }}
\ No newline at end of file
+{{- end }}

charts/telegraf/values.yaml

@@ -18,6 +18,14 @@ imagePullSecrets: []
 ## Configure args passed to Telegraf containers
 args: []
 
+
+# The name of a secret in the same kubernetes namespace which contains values to
+# be added to the environment (must be manually created)
+# This can be useful for auth tokens, etc.
+
+# envFromSecret: "telegraf-tokens"
+
+
 env:
   - name: HOSTNAME
     value: "telegraf-polling-service"