more work

Chart.yaml

 apiVersion: v2
-name: apache-shib
-description: Example Helm chart for Apache+Shibboleth
+name: apache-shib-demo
+description: Demonstration Helm chart for Apache+Shibboleth
 
 # A chart can be either an 'application' or a 'library' chart.
 #

README.md

@@ -30,4 +30,14 @@ The architecture follows the standard GCP Ingress model:
 
 ## Helm
 
+LATER.
+
+## Secrets
+
+This Helm chart does *not* setup or provision any Kubernetes secrets: you
+must create them independently. The secrets needed are:
+
+* `apache-shib-demo-<APP_ENV>-saml-key.pem`
+
+* `apache-shib-demo-<APP_ENV>-saml-crt.pem`
 

templates/deployment.yaml

@@ -34,3 +34,19 @@ spec:
               path: /
             initialDelaySeconds: 10
             periodSeconds: 10
+          volumeMounts:
+          - name: saml-crt.pem
+            mountPath: /etc/ssl/certs/saml-crt.pem
+            subPath: saml-crt.pem
+          - name: saml-key.pem
+            mountPath: /etc/ssl/private/saml-key.pem
+            subPath: saml-key.pem
+      ## VOLUMES
+      volumes:
+      - name: saml-crt.pem
+        secret:
+          secretName: "{{ $APP_NAMESPACE }}-saml-crt.pem"
+      - name: saml-key.pem
+        secret:
+          secretName: "{{ $APP_NAMESPACE }}-saml-key.pem"
+