[trino][catalogs] define username/password with secret

charts/trino/README.md

@@ -955,5 +955,16 @@ Fast distributed SQL query engine for big data analytics that helps you explore
          port: 9999
   ```
 
+ * `additionalSecrets` - list, default: `[]`
+     Example:
+ ```yaml
+ additionalSecrets: []
+  # - name: extra-secret
+  #   value:
+  #      POSTGRES_USER:
+  #      POSTGRES_PASSWORD:
+  #      MARIADB_USER:
+  #      MARIADB_PASSWORD: 
+
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

charts/trino/templates/secret.yaml

@@ -25,3 +25,17 @@ data:
   group.db: {{ .Values.auth.groups | b64enc }}
 {{- end }}
 {{- end }}
+---
+{{- if .Values.additionalSecrets }}
+{{- range .Values.additionalSecrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: "{{ .name }}"
+data:
+{{- range $key, $val := .value }}
+  {{ $key }}: {{ $val | b64enc | nindent 4 }}
+{{- end }}
+type: Opaque
+{{- end }}
+{{- end }}

charts/trino/values.yaml

@@ -407,6 +407,20 @@ catalogs:
 additionalCatalogs: {}
 # additionalCatalogs -- Deprecated, use `catalogs` instead. Configure additional
 # [catalogs](https://trino.io/docs/current/installation/deployment.html#catalog-properties).
+# @raw
+# Example:
+# ```yaml
+#  postgresql: |
+#    connector.name=postgresql
+#    connection-url=jdbc:postgresql://postgres-service.my-postgres.svc:5432/my_db
+#    connection-user=${ENV:POSTGRESQL_USER}
+#    connection-password=${ENV:POSTGRESQL_PASSWORD}
+#  mariadb: |
+#    connector.name=mariadb
+#    connection-url=jdbc:mariadb://mariadb-service.my-mariadb.svc:3306/my_db
+#    connection-user=${ENV:MARIADB_USER}
+#    connection-password=${ENV:MARIADB_PASSWORD}
+# ```
 
 env: []
 # env -- additional environment variables added to every pod, specified as a list with explicit values
@@ -680,6 +694,8 @@ coordinator:
   # ```yaml
   #  - name: extras
   #    emptyDir: {}
+  #  - name: extra-secret
+  #    emptyDir: {}
   # ```
 
   additionalVolumeMounts: []
@@ -689,6 +705,9 @@ coordinator:
   #  - name: extras
   #    mountPath: /usr/share/extras
   #    readOnly: true
+  #  - name: extra-secret
+  #    mountPath: /etc/trino/secrets
+  #    readOnly: true
 
   annotations: {}
 
@@ -1133,3 +1152,11 @@ networkPolicy:
   #        port: 9999
   # ```
   egress: []
+
+additionalSecrets: []
+  # - name: extra-secret
+  #   value:
+  #      POSTGRESQL_USER:
+  #      POSTGRESQL_PASSWORD:
+  #      MARIADB_USER:
+  #      MARIADB_PASSWORD: