SDM Secrets and Custom Secret Name Setup

Secrets

Custom Name	Default Name	Type	Description	Used in Components (Pods)
<global.secrets.tiCloud.customSecretName>	<release_name>-secret-sdm-cloud	Required when related feature is enabled	Basic authentication secret which contains username and password for Spectra Intelligence authentication. Required when Spectra Intelligence is enabled (config.ticloud.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery Worker
<global.secrets.tiCloudProxy.customSecretName>	<release_name>-secret-sdm-cloud-proxy	Optional	Basic authentication secret which contains username and password for Spectra Intelligence proxy authentication. Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery Worker
<global.secrets.rlappUuid.customSecretName>	<release_name>-secret-sdm-rlapp-uuid	Optional	Opaque secret which contains rlapp_uuid. If not set, the chart generates it. Set it when the chart is rendered without cluster access (for example Argo CD).	Portal, Celery Worker
<global.secrets.rlappSecretKey.customSecretName>	<release_name>-secret-sdm-rlapp-secret-key	Optional	Opaque secret which contains secret_key. If not set, the chart generates it. Set it when the chart is rendered without cluster access (for example Argo CD).	Portal, Celery Worker
<global.secrets.seaweedfs.customSecretName>	<release_name>-seaweedfs-secret	Optional	Basic authentication secret which contains username and password for SeaweedFS. If not set, the chart generates it. Set it when the chart is rendered without cluster access (for example Argo CD).	Portal, Celery Worker, SeaweedFS
<global.secrets.oidc.customSecretName>	<release_name>-secret-sdm-oidc	Required when related feature is enabled	Opaque secret which contains rp_client_id and rp_client_secret for OIDC authentication. Required when OIDC authentication is enabled (config.oidc.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal, Celery Worker
<global.secrets.ldap.credentials.customSecretName>	<release_name>-secret-sdm-ldap	Required when related feature is enabled	Opaque secret which contains bind_dn and bind_password for LDAP authentication. Required when LDAP authentication is enabled (config.ldap.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.ldap.cacert.customSecretName>	<release_name>-secret-sdm-ldap-cacert	Required when related feature is enabled	Opaque secret which contains CA certificate for LDAP authentication. Required when LDAP authentication is enabled, and TLS features are enabled (config.ldap.enabled and config.ldap.tls and config.ldap.tlsRequireCert). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.ldap.cert.customSecretName>	<release_name>-secret-sdm-ldap-cert	Required when related feature is enabled	Opaque secret which contains TLS certificate for LDAP server. Required when LDAP authentication is enabled and TLS features are enabled (config.ldap.enabled and config.ldap.tls and config.ldap.tlsRequireCert). Secret is either created manually (sdm-portal chart) or already exists.	Portal
<global.secrets.saml.customSecretName>	<release_name>-secret-sdm-saml-metadata	Required when related feature is enabled	Opaque secret which contains SAML federation metadata. Required when SAML authentication is enabled (config.saml.enabled). Secret is either created manually (sdm-portal chart) or already exists.	Portal
imagePullSecrets[0].name	rl-registry-key	Required	Secret of type kubernetes.io/dockerconfigjson used for pulling images and Helm charts from a Docker registry.	Portal
<global.secrets.clickhouse.customSecretName>	<release_name>-clickhouse-secret	Required when centralLogging is enabled	Basic authentication secret used to connect to Clickhouse. Secret is either created manually (clickhouse chart) or already exists. Required when central logging is enabled (sdmPortal.config.centralLogging.enabled).	Portal, Celery Worker, DCS, Clickhouse
<global.secrets.postfix.customSecretName>	<release_name>-postfix-secret	Required when related feature is enabled	Basic authentication secret for SMTP. Secret is either created manually (postfix chart) or already exists.	Postfix

Values

Custom Secret Configuration

Key	Type	Default	Description
global.secrets.clickhouse	object	-	Secret configuration values for Clickhouse credentials.
global.secrets.clickhouse.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.ldap	object	-	LDAP secret configuration values
global.secrets.ldap.cacert.customSecretName	string	""	Custom secret name of the secret containing PEM file with CA certificate under the ca.pem key.
global.secrets.ldap.cert.customSecretName	string	nil	Custom secret name of the secret containing PEM encoded cert for client certificate authentication under the cert.pem key.
global.secrets.ldap.credentials.customSecretName	string	""	Custom secret name which contains credentials used in LDAP authentication. If not set, default secret name will be used.
global.secrets.oidc	object	-	Secret configuration values for setting the OIDC client credentials.
global.secrets.oidc.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.postfix	object	-	Secret configuration values for Postfix credentials.
global.secrets.postfix.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.rlappSecretKey	object	-	Secret configuration values for the SDM secret key (key secret_key).
global.secrets.rlappSecretKey.customSecretName	string	nil	Custom secret name. If not set, the chart generates the Secret.
global.secrets.rlappUuid	object	-	Secret configuration values for the RLAPP UUID (key rlapp_uuid).
global.secrets.rlappUuid.customSecretName	string	nil	Custom secret name. If not set, the chart generates the Secret.
global.secrets.saml	object	-	SAML secret configuration values
global.secrets.saml.customSecretName	string	""	Custom secret name of the secret containing federation metadata under the metadata.xml key.
global.secrets.seaweedfs	object	-	Secret configuration values for the SeaweedFS credentials.
global.secrets.seaweedfs.customSecretName	string	nil	Custom secret name. If not set, the chart generates the Secret.
global.secrets.tiCloud	object	-	Secret configuration values for setting the Spectra Intelligence credentials.
global.secrets.tiCloud.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.
global.secrets.tiCloudProxy	object	-	Secret configuration values for setting the Spectra Intelligence proxy credentials.
global.secrets.tiCloudProxy.customSecretName	string	""	Custom secret name. If not set, default secret name will be used.