diff --git a/helm/sealed-secrets/README.md b/helm/sealed-secrets/README.md index 5c91b881b8..0c0944095c 100644 --- a/helm/sealed-secrets/README.md +++ b/helm/sealed-secrets/README.md @@ -88,6 +88,7 @@ The command removes all the Kubernetes components associated with the chart and | `image.tag` | Sealed Secrets image tag (immutable tags are recommended) | `v0.23.0` | | `image.pullPolicy` | Sealed Secrets image pull policy | `IfNotPresent` | | `image.pullSecrets` | Sealed Secrets image pull secrets | `[]` | +| `revisionHistoryLimit` | Number of old history to retain to allow rollback. Default 10 | `""` | | `createController` | Specifies whether the Sealed Secrets controller should be created | `true` | | `secretName` | The name of an existing TLS secret containing the key used to encrypt secrets | `sealed-secrets-key` | | `updateStatus` | Specifies whether the Sealed Secrets controller should update the status subresource | `true` | diff --git a/helm/sealed-secrets/templates/deployment.yaml b/helm/sealed-secrets/templates/deployment.yaml index e9b76ce135..0398ff6ee9 100644 --- a/helm/sealed-secrets/templates/deployment.yaml +++ b/helm/sealed-secrets/templates/deployment.yaml @@ -10,6 +10,9 @@ metadata: {{- end }} spec: replicas: 1 + {{- if .Values.revisionHistoryLimit }} + revisionHistoryLimit: {{ .Values.revisionHistoryLimit }} + {{- end }} selector: matchLabels: {{- include "sealed-secrets.matchLabels" . | nindent 6 }} template: diff --git a/helm/sealed-secrets/values.yaml b/helm/sealed-secrets/values.yaml index 5f3ac85a9e..2c3005c220 100644 --- a/helm/sealed-secrets/values.yaml +++ b/helm/sealed-secrets/values.yaml @@ -12,6 +12,7 @@ fullnameOverride: "" ## @param namespace Namespace where to deploy the Sealed Secrets controller ## namespace: "" + ## @param extraDeploy [array] Array of extra objects to deploy with the release ## extraDeploy: [] @@ -47,6 +48,9 @@ image: ## - myRegistryKeySecretName ## pullSecrets: [] +## @param revisionHistoryLimit Number of old history to retain to allow rollback (If not set, default Kubernetes value is set to 10) +## e.g: +revisionHistoryLimit: "" ## @param createController Specifies whether the Sealed Secrets controller should be created ## createController: true