From b43f572d749f39590cce4c3c4ef24164c6a5358a Mon Sep 17 00:00:00 2001
From: Angelos Mimidis <agmimidi@users.noreply.github.com>
Date: Mon, 4 May 2026 10:44:50 +0000
Subject: [PATCH] Allow consuming existing secret

---
 helm/fishymetrics/templates/secret.yaml | 2 ++
 helm/fishymetrics/values.yaml           | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/helm/fishymetrics/templates/secret.yaml b/helm/fishymetrics/templates/secret.yaml
index dc8c08c8..83db136d 100644
--- a/helm/fishymetrics/templates/secret.yaml
+++ b/helm/fishymetrics/templates/secret.yaml
@@ -1,3 +1,4 @@
+{{- if not $.Values.existingSecret }}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -12,3 +13,4 @@ data:
   vault-secret-id: {{ .Values.vault.secretId | b64enc | quote }}
   elastic-user: {{ .Values.vector.elasticsearch.user | b64enc | quote }}
   elastic-pass: {{ .Values.vector.elasticsearch.pass | b64enc | quote }}
+{{- end -}}
diff --git a/helm/fishymetrics/values.yaml b/helm/fishymetrics/values.yaml
index 15bcbcec..cf58d016 100644
--- a/helm/fishymetrics/values.yaml
+++ b/helm/fishymetrics/values.yaml
@@ -16,6 +16,10 @@ log:
   fileMaxBackups: "1"
   fileMaxAge: "1"
 
+# Set to true to consume an existing secret. 
+# For backwards compatibility, the secret name is still expected to be {{ template "fishymetrics.name" . }}-creds
+existingSecret: false
+
 bmc:
   username: ""
   password: ""