chore(kubernetes): Add helm chart support for extraVolumes and extraVolumeMounts. (#114)

Allows mounting custom filters in a kubernetes setup.

Precondition for developmentseed/eoapi-k8s#388

Related: EOEPCA/resource-discovery#198 and
IFRCGo/go-deploy#144

Author: pantierra

helm/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: stac-auth-proxy
 description: A Helm chart for stac-auth-proxy
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: "1.0.0"

helm/templates/deployment.yaml

@@ -38,7 +38,15 @@ spec:
             - name: {{ $key }}
               value: {{ include "stac-auth-proxy.envValue" $value }}
             {{- end }}
+          {{- with .Values.extraVolumeMounts }}
+          volumeMounts:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
 
+      {{- with .Values.extraVolumes }}
+      volumes:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

helm/values.schema.yaml

@@ -236,6 +236,36 @@ properties:
       additionalProperties: true
     description: "Init containers to run before the main container starts"
 
+  extraVolumes:
+    type: array
+    items:
+      type: object
+      additionalProperties: true
+    description: "Additional volumes to mount (e.g., ConfigMaps for custom filter files)"
+    default: []
+
+  extraVolumeMounts:
+    type: array
+    items:
+      type: object
+      required: ["name", "mountPath"]
+      properties:
+        name:
+          type: string
+          description: "Name of the volume to mount"
+        mountPath:
+          type: string
+          description: "Path within the container at which the volume should be mounted"
+        subPath:
+          type: string
+          description: "Path within the volume from which the container's volume should be mounted"
+        readOnly:
+          type: boolean
+          description: "Mounted read-only if true, read-write otherwise"
+      additionalProperties: true
+    description: "Additional volume mounts for the container"
+    default: []
+
   serviceAccount:
     type: object
     properties:

helm/values.yaml

@@ -46,6 +46,23 @@ nodeSelector: {}
 tolerations: []
 affinity: {}
 
+# Additional volumes to mount
+extraVolumes: []
+# Example:
+# extraVolumes:
+#   - name: filters
+#     configMap:
+#       name: stac-auth-proxy-filters
+
+# Additional volume mounts for the container
+extraVolumeMounts: []
+# Example:
+# extraVolumeMounts:
+#   - name: filters
+#     mountPath: /app/src/stac_auth_proxy/custom_filters.py
+#     subPath: custom_filters.py
+#     readOnly: true
+
 # Init containers to run before the main container starts
 # initContainers: []
 # Example: