requested changes

helm-charts/infisical-gateway/templates/deployment.yaml

@@ -37,11 +37,9 @@ spec:
           {{- end }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
-          env:
-          {{- range $key, $value := .Values.env }}
-            - name: {{ $key }}
-              value: {{ $value | quote }}
-          {{- end }}
+          envFrom:
+            - secretRef:
+                name: {{ .Values.secret.name }}
           ports:
             - name: http
               containerPort: {{ .Values.service.port }}

helm-charts/infisical-gateway/templates/secret.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.secret.create -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Values.secret.name }}
+  labels:
+    {{- include "infisical-gateway.labels" . | nindent 4 }}
+type: Opaque
+data:
+  {{- range $key, $value := .Values.secret.data }}
+  {{ $key }}: {{ $value | b64enc }}
+  {{- end }}
+{{- end }}

helm-charts/infisical-gateway/values.yaml

@@ -1,16 +1,22 @@
 image:
   repository: infisical/infisical-gateway
   pullPolicy: IfNotPresent
-  tag: "latest"
+  tag: "v0.0.1"
 
-# Environment variables for the gateway
-env:
-  TOKEN: ""
-  INFISICAL_API_URL: "https://app.infisical.com/api"
+secret:
+  # create a new secret (if true) or use existing (if false)
+  create: true
+  # name of the secret to use/create
+  name: "infisical-gateway-secrets"
+
+  # Secret data (only used if create: true)
+  data:
+    TOKEN: ""
+    INFISICAL_API_URL: "https://app.infisical.com"
 
 resources:
   limits:
-    cpu: 100m
+    cpu: 500m
     memory: 128Mi
   requests:
     cpu: 100m
@@ -28,8 +34,12 @@ serviceAccount:
 
 podAnnotations: {}
 podLabels: {}
-podSecurityContext: {}
-securityContext: {}
+podSecurityContext:
+  runAsNonRoot: true
+
+securityContext:
+  runAsNonRoot: true
+
 affinity: {}
 tolerations: {}
 nodeSelector: {}