SDM Secrets and Custom Secret Name Setup

Secrets

Custom Name	Default Name	Type	Description	Used in Components (Pods)
<global.secrets.tiCloud.customSecretName>	<release_name>-secret-sdm-cloud	Required when related feature is enabled	Basic authentication secret which contains username and password for Spectra Intelligence authentication. Required when Spectra Intelligence is enabled (config.ticloud.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery, DCS
<global.secrets.tiCloudProxy.customSecretName>	<release_name>-secret-sdm-cloud-proxy	Optional	Basic authentication secret which contains username and password for Spectra Intelligence proxy authentication. Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery Worker
<global.secrets.oidc.customSecretName>	<release_name>-secret-sdm-oidc	Required when related feature is enabled	Opaque secret which contains rp_client_id and rp_client_secret for OIDC authentication. Required when OIDC authentication is enabled (config.oidc.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery
<global.secrets.ldap.credentials.customSecretName>	<release_name>-secret-sdm-ldap	Required when related feature is enabled	Opaque secret which contains bind_dn and bind_password for LDAP authentication. Required when LDAP authentication is enabled (config.ldap.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.ldap.cacert.customSecretName>	<release_name>-secret-sdm-ldap-cacert	Required when related feature is enabled	Opaque secret which contains CA certificate for LDAP authentication. Required when LDAP authentication is enabled, and TLS features are enabled (config.ldap.enabled and config.ldap.tls and config.ldap.tlsRequireCert). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.ldap.cert.customSecretName>	<release_name>-secret-sdm-ldap-cert	Required when related feature is enabled	Opaque secret which contains TLS certificate for LDAP server. Required when LDAP authentication is enabled and TLS features are enabled (config.ldap.enabled and config.ldap.tls and config.ldap.tlsRequireCert). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.saml.customSecretName>	<release_name>-secret-sdm-saml-metadata	Required when related feature is enabled	Opaque secret which contains SAML federation metadata. Required when SAML authentication is enabled (config.saml.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.registryCredentialsCustomSecretName>	rl-registry-credentials	Required for private registry access	Basic authentication secret which contains registry credentials. Secret is either created by umbrella chart (registry.createRegistryCredentialsSecret) or already exists.	Portal
<global.secrets.clickhouse.customSecretName>	<release_name>-clickhouse-secret	Required when centralLogging is enabled	Basic authentication secret used to connect to Clickhouse. Secret is either created manually (clickhouse chart) or already exists. Required when central logging is enabled (sdmPortal.config.centralLogging.enabled).	Portal, Celery, DCS, Clickhouse
<global.secrets.postfix.customSecretName>	<release_name>-postfix-secret	Required when related feature is enabled	Basic authentication secret for SMTP. Secret is either created manually (postfix chart) or already exists.	Postfix

Values

Custom Secret Configuration

Key	Type	Default	Description
global.secrets.clickhouse	object	-	Secret configuration values for Clickhouse credentials.
global.secrets.clickhouse.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.ldap	object	-	LDAP secret configuration values
global.secrets.ldap.cacert.customSecretName	string	""	Custom secret name of the secret containing PEM file with CA certificate under the ca.pem key.
global.secrets.ldap.cert.customSecretName	string	nil	Custom secret name of the secret containing PEM encoded cert for client certificate authentication under the cert.pem key.
global.secrets.ldap.credentials.customSecretName	string	""	Custom secret name which contains credentials used in LDAP authentication. If not set, default secret name will be used.
global.secrets.oidc	object	-	Secret configuration values for setting the OIDC client credentials.
global.secrets.oidc.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.postfix	object	-	Secret configuration values for Postfix credentials.
global.secrets.postfix.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.saml	object	-	SAML secret configuration values
global.secrets.saml.customSecretName	string	""	Custom secret name of the secret containing federation metadata under the metadata.xml key.
global.secrets.tiCloud	object	-	Secret configuration values for setting the Spectra Intelligence credentials.
global.secrets.tiCloud.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.tiCloudProxy	object	-	Secret configuration values for setting the Spectra Intelligence proxy credentials.
global.secrets.tiCloudProxy.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.