Add secretEnvironment maps to charts

Lain commented

2026-10-13 07:09:32 +00:00

Collaborator

Adds a separate secretEnvironment map to all charts that expose container environment variables, including Stalwart and optional Bulwark. A non-empty map creates a chart-managed Kubernetes Secret and the workload imports it using envFrom.secretRef; regular environment maps remain unchanged. Stalwart keeps extraSecretEnv working for compatibility.

Chart versions are bumped. Existing values are intentionally not auto-migrated: users must move each sensitive key/value into secretEnvironment and remove it from its old environment or chart-specific setting. Restart the workload after changing the map, because environment variables sourced from a Secret are read at container start.

This keeps the value out of Deployment and Pod specs, but Kubernetes Secret access and Helm release storage still need appropriate RBAC and protection.

Adds a separate secretEnvironment map to all charts that expose container environment variables, including Stalwart and optional Bulwark. A non-empty map creates a chart-managed Kubernetes Secret and the workload imports it using envFrom.secretRef; regular environment maps remain unchanged. Stalwart keeps extraSecretEnv working for compatibility. Chart versions are bumped. Existing values are intentionally not auto-migrated: users must move each sensitive key/value into secretEnvironment and remove it from its old environment or chart-specific setting. Restart the workload after changing the map, because environment variables sourced from a Secret are read at container start. This keeps the value out of Deployment and Pod specs, but Kubernetes Secret access and Helm release storage still need appropriate RBAC and protection.

Lain added 1 commit

2026-10-13 07:09:32 +00:00

Add secret environment maps to charts 6ffcafc80e

mathieu merged commit fd29f1ee9f into main

2026-10-13 08:30:11 +00:00

mathieu deleted branch lain/separate-secret-environment-20261013065722

2026-10-13 08:30:11 +00:00

mathieu referenced this pull request from a commit

2026-10-13 08:30:13 +00:00

Add secretEnvironment maps to charts (#47)

Rows
Columns

Add secretEnvironment maps to charts #47