@sap/cds-dk 7.3.0 → 7.3.2

package/lib/init/template/enterprise-messaging-shared/files/event-mesh.json.hbs

@@ -1,7 +1,7 @@
 {
   "emname": "{{appName}}-emname",
   "version": "1.1.0",
-  "namespace": "default/{{appName}}/1",
+  "namespace": "default/{{cleanedAppName}}/1",
   "options": {
     "management": true,
     "messagingrest": true,

package/lib/init/template/enterprise-messaging-shared/index.js

@@ -3,14 +3,14 @@ const cds = require('../../../cds')
 const { read } = cds.utils
 const { readProject } = require('../../util/projectReader')
 const { mergeJSON, mergeYAML } = require('../../util/merge')
+const { parseMd5File, writeMd5File } = require('../../util/md5')
 const { srvNode4, srvJava4, enterpriseMessaging } = require('../_merging/registry-mta')
 
 module.exports = class EnterpriseMessagingSharedTemplate extends require('../templateBase') {
 
   async canRun() {
-    const { hasMta, hasHelm, isJava }  = await readProject()
-    if (isJava)             throw `'cds add enterprise-messaging-shared' is not available for Java yet`
-    if (hasHelm && !hasMta) throw `'cds add enterprise-messaging-shared' is not available for Kyma yet`
+    const { isJava } = await readProject()
+    if (isJava) throw `'cds add enterprise-messaging-shared' is not available for Java yet`
     return true
   }
 
@@ -26,9 +26,9 @@ module.exports = class EnterpriseMessagingSharedTemplate extends require('../tem
     await mergeJSON('event-mesh.json', join(__dirname, 'files', 'event-mesh.json.hbs'), project)
   }
 
-  async runDependentMerging() {
+  async runDependentMerging(context = {}) {
     const project = await readProject()
-    const { hasMta, isNodejs, srvPath } = project
+    const { hasMta, hasHelm, isNodejs, srvPath } = project
 
     if (hasMta) {
       const srv = (isNodejs ? srvNode4 : srvJava4)(srvPath)
@@ -45,5 +45,19 @@ module.exports = class EnterpriseMessagingSharedTemplate extends require('../tem
           }
       )
     }
+
+    if (hasHelm) {
+      let isIndependentCommand = false
+      if (Object.keys(context).length == 0){
+          isIndependentCommand = true
+          context.oldTrackingData = context.newTrackingData = await parseMd5File(join('chart', '.cds-add-helm-files.md5'))
+      }
+      await mergeYAML(join('chart', 'values.yaml'), join(__dirname, 'files', 'values.yaml'))
+      const HelmTemplate = require(`../helm`);
+      const helmTemplate = new HelmTemplate(context.oldTrackingData, context.newTrackingData);
+      isIndependentCommand = isIndependentCommand | await helmTemplate.addSubChart('service-instance');
+      await helmTemplate.addDependency('service-instance', 'event-mesh');
+      if (isIndependentCommand) await writeMd5File(join('chart', '.cds-add-helm-files.md5'), context.newTrackingData)
+    }
   }
 }

package/lib/init/template/helm/index.js

@@ -14,7 +14,7 @@ module.exports = class HelmTemplate extends require('../templateBase') {
     }
 
     getRelatedFacets() {
-        return ['hana', 'xsuaa', 'enterprise-messaging', 'destination' , 'multitenancy', 'extensibility', 'approuter', 'connectivity']
+        return ['hana', 'xsuaa', 'enterprise-messaging', 'enterprise-messaging-shared', 'destination' , 'multitenancy', 'extensibility', 'approuter', 'connectivity']
     }
 
     static hasFacet() {

package/lib/init/template/helm/subcharts/content-deployment/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
-name: content-deployment
 description: A Helm Chart for creating a Content Deployment job
-type: application
-version: 0.1.0
+name: content-deployment
 sources:
-- "https://github.tools.sap/unified-runtime/content-deployment"
+- https://github.tools.sap/unified-runtime/content-deployment
+type: application
+version: 1.3.0

package/lib/init/template/helm/subcharts/content-deployment/templates/_helpers.tpl

@@ -118,6 +118,8 @@ Name of the imagePullSecret
 {{- $ips.global.name }}
 {{- else if or $ips.local.dockerconfigjson $ips.global.dockerconfigjson }}
 {{- include "content-deployment.internal.fullname" . }}
+{{- else }}
+{{- "image-pull-secret" }}
 {{- end }}
 {{- end }}
 
@@ -128,9 +130,9 @@ Calculate the final image name
 {{- $tag := .Values.image.tag | default .Values.global.image.tag | default "latest" }}
 {{- $registry := .Values.image.registry | default .Values.global.image.registry }}
 {{- if $registry }}
-{{- $registry | trimSuffix "/" }}/{{ .Values.image.repository }}:{{ $tag }}
+{{- $registry | trimSuffix "/" | trimPrefix "https://" }}/{{ .Values.image.repository | trimSuffix "/" }}:{{ $tag }}
 {{- else }}
-{{- .Values.image.repository }}:{{ $tag }}
+{{- .Values.image.repository | trimSuffix "/" | trimPrefix "https://" }}:{{ $tag }}
 {{- end }}
 {{- end }}
 

package/lib/init/template/helm/subcharts/content-deployment/templates/job.yaml

@@ -50,15 +50,16 @@ spec:
             drop:
             - ALL
           privileged: false
+          runAsNonRoot: true
+          {{- if .Values.runAsUser }}
+          runAsUser: {{ .Values.runAsUser }}
+          {{- end }}
           readOnlyRootFilesystem: false
         volumeMounts:
         - mountPath: /tmp
           name: tmp
         {{- include "content-deployment.internal.serviceMounts" . | nindent 8 }}
       restartPolicy: OnFailure
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
       volumes:
       - name: tmp
         emptyDir: {}

package/lib/init/template/helm/subcharts/content-deployment/values.schema.json

@@ -10,26 +10,18 @@
         "global": {
             "$id": "#/properties/global",
             "type": "object",
-            "title": "Helm global values",
-            "description": "For more information, see https://helm.sh/docs/chart_template_guide/subcharts_and_globals/#global-chart-values",
             "x-ignore-untested": true,
             "additionalProperties": true,
             "properties": {
                 "imagePullSecret": {
                     "$id": "#/properties/global/imagePullSecret",
-                    "title": "Image Pull Secret configuration",
-                    "description": "For more information, see https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/",
                     "additionalProperties": true,
                     "type": "object",
                     "properties": {
                         "name": {
-                            "title": "Secret name",
-                            "description": "Name of the Kubernetes Secret, used as an image pull secret (must be of type kubernetes.io/dockerconfigjson). Can't be used with the `dockerconfigjson` option.",
                             "$ref": "#/definitions/KubernetesName"
                         },
                         "dockerconfigjson": {
-                            "title": "Secret content",
-                            "description": "The content for the dynamically generated Kubernetes Secret, which will be used as an image pull secret. Can't be used with the `name` option.",
                             "type": "string"
                         }
                     },
@@ -53,7 +45,6 @@
                 "image": {
                     "$id": "#/properties/global/image",
                     "title": "Image configuration",
-                    "description": "Either name or repository is required.",
                     "type": "object",
                     "required": [],
                     "additionalProperties": true,
@@ -72,24 +63,23 @@
         },
         "nameOverride": {
             "$id": "#/properties/nameOverride",
-            "title": "Chart name override",
-            "description": "Will be used instead of the `.Chart.Name`, e.g. when generating the Deployment name.",
             "type": "string",
             "pattern": "[0-9a-z][0-9a-z-.]*"
         },
         "fullnameOverride": {
             "$id": "#/properties/fullnameOverride",
-            "title": "Override for the `.fullname` helper function.",
-            "description": "Will be used as an override for the `.fullname` helper function (i.e. `.Release.Name-.Chart.Name`).",
             "type": "string",
             "pattern": "[0-9a-z][0-9a-z-.]*"
         },
         "serviceAccountName": {
             "$id": "#/properties/serviceAccountName",
-            "title": "Service Account name",
-            "description": "Name of the Service Account assigned to pods.",
             "type": "string"
         },
+        "runAsUser": {
+            "$id": "#/properties/runAsUser",
+            "type": "integer",
+            "minimum": 1
+        },
         "image": {
             "$id": "#/properties/image",
             "title": "Image configuration",
@@ -101,10 +91,8 @@
             "properties": {
                 "repository": {
                     "$id": "#/properties/image/properties/repository",
-                    "title": "Repository of the image",
-                    "description": "Should also include the image name (i.e. everything before the `:` sign).",
                     "type": "string",
-                    "pattern": "^[\\w-./:]*[@sha256]*$"
+                    "pattern": "^[\\w-./:]*(@sha256)?$"
                 },
                 "tag": {
                     "$id": "#/properties/image/properties/tag",
@@ -118,19 +106,13 @@
         },
         "imagePullSecret": {
             "$id": "#/properties/imagePullSecret",
-            "title": "Image Pull Secret configuration",
-            "description": "For more information, see https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/",
             "additionalProperties": false,
             "type": "object",
             "properties": {
                 "name": {
-                    "title": "Secret name",
-                    "description": "Name of the Kubernetes Secret, used as an image pull secret (must be of type kubernetes.io/dockerconfigjson). Can't be used with the `dockerconfigjson` option.",
                     "$ref": "#/definitions/KubernetesName"
                 },
                 "dockerconfigjson": {
-                    "title": "Secret content",
-                    "description": "The content for the dynamically generated Kubernetes Secret, which will be used as an image pull secret. Can't be used with the `name` option.",
                     "type": "string"
                 }
             },
@@ -154,27 +136,22 @@
         "resources": {
             "$id": "#/properties/resources",
             "type": "object",
-            "title": "Pod resources configuration",
             "additionalProperties": false,
             "properties": {
                 "requests": {
                     "type": "object",
-                    "description": "Minimal required resources for the application to operate, that will be reserved for each replica.",
                     "additionalProperties": false,
                     "properties": {
                         "cpu": {
                             "$id": "#/properties/resources/properties/requests/properties/cpu",
-                            "description": "CPU resource units, as described here https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-cpu",
                             "type": ["number", "string"]
                         },
                         "ephemeral-storage": {
                             "$id": "#/properties/resources/properties/requests/properties/ephemeral-storage",
-                            "description": "Size of the local ephemeral storage, measured in bytes. For more info, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage",
                             "type": "string"
                         },
                         "memory": {
                             "$id": "#/properties/resources/properties/requests/properties/memory",
-                            "description": "Amount of memory, mesaured in bytes. For more info, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-memory",
                             "type": "string"
                         }
                     }
@@ -185,17 +162,14 @@
                     "properties": {
                         "cpu": {
                             "$id": "#/properties/resources/properties/limits/properties/cpu",
-                            "description": "CPU resource units, as described here https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-cpu",
                             "type": ["number", "string"]
                         },
                         "ephemeral-storage": {
                             "$id": "#/properties/resources/properties/limits/properties/ephemeral-storage",
-                            "description": "Size of the local ephemeral storage, measured in bytes. For more info, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage",
                             "type": "string"
                         },
                         "memory": {
                             "$id": "#/properties/resources/properties/limits/properties/memory",
-                            "description": "Amount of memory, mesaured in bytes. For more info, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-memory",
                             "type": "string"
                         }
                     }
@@ -204,7 +178,6 @@
         },
         "env": {
             "$id": "#/properties/env",
-            "description": "Key-value map of environment variables, which should be added to the Pod spec.",
             "anyOf": [
                 {
 
@@ -214,68 +187,55 @@
                             "$comment": "regex above copied from https://github.com/kubernetes/kubernetes/blob/ea0764452222146c47ec826977f49d7001b0ea8c/staging/src/k8s.io/apimachinery/pkg/util/validation/validation.go#L402",
                             "anyOf": [
                                 {
-                                    "description": "Plain value of an environment variable.",
                                     "type": ["integer", "string"]
                                 },
                                 {
-                                    "description": "`valueFrom` configuration for the environment variable https://kubernetes.io/docs/tasks/inject-data-application/environment-variable-expose-pod-information/",
                                     "type": "object",
                                     "additionalProperties": false,
                                     "maxProperties": 1,
                                     "properties": {
                                         "configMapKeyRef": {
-                                            "description": "Selects a key of a ConfigMap.",
                                             "type": "object",
                                             "additionalProperties": false,
                                             "properties": {
                                                 "name": {
-                                                    "description": "Name of a ConfigMap.",
                                                     "type": "string"
                                                 },
                                                 "key": {
-                                                    "description": "Key in that ConfigMap, which value will be used.",
                                                     "type": "string"
                                                 }
                                             }
                                         },
                                         "secretKeyRef": {
-                                            "description": "Selects a key of a Secret.",
                                             "type": "object",
                                             "additionalProperties": false,
                                             "properties": {
                                                 "name": {
-                                                    "description": "Name of a Secret.",
                                                     "type": "string"
                                                 },
                                                 "key": {
-                                                    "description": "Key in that Secret, which value will be used.",
                                                     "type": "string"
                                                 }
                                             }
                                         },
                                         "resourceFieldRef": {
-                                            "description": "Selects a resource of the container.",
                                             "type": "object",
                                             "additionalProperties": false,
                                             "properties": {
                                                 "containerName": {
-                                                    "description": "Name of a Container.",
                                                     "type": "string"
                                                 },
                                                 "resource": {
-                                                    "description": "Only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
                                                     "type": "string"
                                                 }
                                             }
                                         },
                                         "fieldRef": {
-                                            "description": "Selects a field of the pod.",
                                             "type": "object",
                                             "additionalProperties": false,
                                             "properties": {
                                                 "fieldPath": {
-                                                    "type": "string",
-                                                    "description": "Supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs."
+                                                    "type": "string"
                                                 }
                                             }
                                         }
@@ -306,58 +266,47 @@
                                 "type": ["string", "integer"]
                             },
                             "configMapKeyRef": {
-                                "description": "Selects a key of a ConfigMap.",
                                 "type": "object",
                                 "additionalProperties": false,
                                 "properties": {
                                     "name": {
-                                        "description": "Name of a ConfigMap.",
                                         "type": "string"
                                     },
                                     "key": {
-                                        "description": "Key in that ConfigMap, which value will be used.",
                                         "type": "string"
                                     }
                                 }
                             },
                             "secretKeyRef": {
-                                "description": "Selects a key of a Secret.",
                                 "type": "object",
                                 "additionalProperties": false,
                                 "properties": {
                                     "name": {
-                                        "description": "Name of a Secret.",
                                         "type": "string"
                                     },
                                     "key": {
-                                        "description": "Key in that Secret, which value will be used.",
                                         "type": "string"
                                     }
                                 }
                             },
                             "resourceFieldRef": {
-                                "description": "Selects a resource of the container.",
                                 "type": "object",
                                 "additionalProperties": false,
                                 "properties": {
                                     "containerName": {
-                                        "description": "Name of a Container.",
                                         "type": "string"
                                     },
                                     "resource": {
-                                        "description": "Only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.",
                                         "type": "string"
                                     }
                                 }
                             },
                             "fieldRef": {
-                                "description": "Selects a field of the pod.",
                                 "type": "object",
                                 "additionalProperties": false,
                                 "properties": {
                                     "fieldPath": {
-                                        "type": "string",
-                                        "description": "Supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs."
+                                        "type": "string"
                                     }
                                 }
                             }
@@ -369,7 +318,6 @@
         },
         "envSecretNames": {
             "$id": "#/properties/envSecretNames",
-            "description": "[Deprecated] Use `envFrom` instead",
             "type": "array",
             "uniqueItems": true,
             "items": {
@@ -379,7 +327,6 @@
         },
         "envFrom": {
             "$id": "#/properties/envFrom",
-            "description": "List of sources to populate environment variables in the pod.",
             "type": "array",
             "default": [],
             "items": {
@@ -389,10 +336,8 @@
                         "additionalProperties": false,
                         "properties": {
                             "configMapRef": {
-                                "description": "The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.",
                                 "properties": {
                                     "name": {
-                                        "description": "Name of a ConfigMap.",
                                         "type": "string"
                                     }
                                 },
@@ -407,10 +352,8 @@
                         "additionalProperties": false,
                         "properties": {
                             "secretRef": {
-                                "description": "The contents of the target Secret's Data field will represent the key-value pairs as environment variables.",
                                 "properties": {
                                     "name": {
-                                        "description": "Name of a Secret.",
                                         "type": "string"
                                     }
                                 },
@@ -427,7 +370,6 @@
         "ttlDaysAfterFinished": {
             "$id": "#/properties/ttlDaysAfterFinished",
             "title": "Time to keep the Job after it has finished.",
-            "description": "Number of days to keep the Kubernetes Job once it is finished. 0 means it is removed as soon as it is finished.",
             "type": "integer",
             "minimum": 0,
             "default": 14
@@ -449,7 +391,6 @@
                             ],
                             "properties": {
                                 "fromSecret": {
-                                    "description": "Name of a Kubernetes Secret, with the binding content, compliant to the SAP Kubernetes Service Binding spec https://github.tools.sap/Kubernetes-Service-Bindings/doc/",
                                     "type": "string"
                                 }
                             }
@@ -459,33 +400,26 @@
                             "additionalProperties": false,
                             "properties": {
                                 "serviceInstanceName": {
-                                    "description": "Name of a BTP Operator Service Instance, created by the `service-instance` Helm chart. Can't be used with the `serviceInstanceFullname` option.",
                                     "type": "string"
                                 },
                                 "serviceInstanceFullname": {
-                                    "description": "Full name of a BTP Operator Service Instance. Can't be used with the `serviceInstanceName` option.",
                                     "type": "string"
                                 },
                                 "externalName": {
-                                    "description": "The name for the service binding in SAP BTP",
                                     "type": "string"
                                 },
                                 "secretName": {
-                                    "description": "The name of the secret where the credentials are stored.",
                                     "type": "string"
                                 },
                                 "parameters": {
-                                    "description": "Some services support the provisioning of additional configuration parameters during the bind request. For the list of supported parameters, check the documentation of the particular service offering.",
                                     "type": "object"
                                 },
                                 "parametersFrom": {
-                                    "description": "List of sources to populate parameters.",
                                     "type": "array",
                                     "items": {
                                         "anyOf": [
                                             {
                                                 "type": "object",
-                                                "description": "Kubernetes Secret as a parameters source.",
                                                 "additionalProperties": false,
                                                 "properties": {
                                                     "secretKeyRef": {
@@ -497,11 +431,9 @@
                                                         ],
                                                         "properties": {
                                                             "name": {
-                                                                "description": "Name of a Secret.",
                                                                 "type": "string"
                                                             },
                                                             "key": {
-                                                                "description": "Key in that Secret, which contains a string that represents the json to include in the set of parameters to be sent to the broker.",
                                                                 "type": "string"
                                                             }
                                                         }
@@ -510,7 +442,6 @@
                                             },
                                             {
                                                 "type": "object",
-                                                "description": "Kubernetes Config Map as a parameters source.",
                                                 "additionalProperties": false,
                                                 "properties": {
                                                     "configMapKeyRef": {
@@ -522,11 +453,9 @@
                                                         ],
                                                         "properties": {
                                                             "name": {
-                                                                "description": "Name of a Config Map",
                                                                 "type": "string"
                                                             },
                                                             "key": {
-                                                                "description": "Key in that Config Map, which contains a string that represents the json to include in the set of parameters to be sent to the broker.",
                                                                 "type": "string"
                                                             }
                                                         }
@@ -537,7 +466,6 @@
                                     }
                                 },
                                 "credentialsRotationPolicy": {
-                                    "description": "Holds automatic credentials rotation configuration. For more details, see https://github.com/SAP/sap-btp-service-operator#spec-1",
                                     "type": "object"
                                 }
                             },
@@ -572,12 +500,10 @@
         "ImageRegistry": {
             "type": "string",
             "title": "Image registry",
-            "description": "Image registry e.g. docker.io",
-            "pattern": "^[\\w-./]+$"
+            "pattern": "^[\\w-./:]+$"
         },
         "ImageTag": {
             "title": "Image tag",
-            "description": "Image tag without the name (everything after the `:` sign, potentially including the `@sha256` section at the end).",
             "type": "string",
             "$comment": "Copied from https://github.com/containers/image/blob/18d58d29fdc4fc32fb8a8a6d186b829b217f1bf5/docker/reference/regexp.go#L68-L70",
             "pattern": "^((?:(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:(?:\\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+)?(?::[0-9]+)?/)?[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?)(?::([\\w][\\w.-]{0,127}))?(?:@([A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}))?$"        }

package/lib/init/template/helm/subcharts/content-deployment/values.yaml

@@ -1,20 +1,46 @@
+# Helm global values, for more information, see https://helm.sh/docs/chart_template_guide/subcharts_and_globals/#global-chart-values
 global:
+  # Image Pull Secret configuration, for more information, see https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
   imagePullSecret: {}
-    # name: ""
-    # dockerconfigjson: ""
+  # Name of the Kubernetes Secret, used as an image pull secret (must be of type kubernetes.io/dockerconfigjson). Can't be used with the `dockerconfigjson` option.
+  # name: ""
+  # The content for the dynamically generated Kubernetes Secret, which will be used as an image pull secret. Can't be used with the `name` option.
+  # dockerconfigjson: ""
+  # Either name or repository is required.
   image: {}
-    # registry: gcr.io/my-project
-    # tag: latest
-
-image: {}
-  # repository: repo/image
   # registry: gcr.io/my-project
   # tag: latest
 
+  sap:
+    _internal:
+      content-deployment:
+        versions:
+          1.3.0: true
+# Will be used instead of the `.Chart.Name`, e.g. when generating the Deployment name.
+# nameOverride: name
+
+# Will be used as an override for the `.fullname` helper function (i.e. `.Release.Name-.Chart.Name`).
+# fullnameOverride: my-name
+
+# Name of the Service Account assigned to pods.
+# serviceAccountName: my-serviceaccount
+
+# The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified.
+# runAsUser: 1000
+image: {}
+# Should also include the image name (i.e. everything before the `:` sign).
+# repository: repo/image
+# registry: gcr.io/my-project
+# tag: latest
+
+# Image Pull Secret configuration, for more information, see https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecret: {}
-  # name: ""
-  # dockerconfigjson: ""
+# Name of the Kubernetes Secret, used as an image pull secret (must be of type kubernetes.io/dockerconfigjson). Can't be used with the `dockerconfigjson` option.
+# name: ""
+# The content for the dynamically generated Kubernetes Secret, which will be used as an image pull secret. Can't be used with the `name` option.
+# dockerconfigjson: ""
 
+# Pod resources configuration, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information
 # resources:
 #   limits:
 #     cpu: 100m
@@ -24,17 +50,32 @@ imagePullSecret: {}
 #     cpu: 100m
 #     ephemeral-storage: 1G
 #     memory: 1G
-
-# serviceAccountName: my-serviceaccount
-
 env: {}
-
+# env:
+#   key1: value
+#   key2:
+#     secretKeyRef:
+#       name: my-secret
+#       key: my-key
+#   key3:
+#     configMapKeyRef:
+#       name: my-configmap
+#       key: my-key
+# Also can be specified as a list
+# env:
+#   - name: key1
+#     value: value1
+#   - name: key2
+#     configMapKeyRef:
+#       name: my-configmap
+#       key: my-key
 envFrom: []
 # - configMapRef:
 #     name: my-configmap1
 # - secretRef:
 #     name: my-secret-ref1
 
+ttlDaysAfterFinished: 14
 # bindings:
 #   ui5-repo-servicerepo:
 #     serviceInstanceName: ui5-repo-instance
@@ -52,5 +93,3 @@ envFrom: []
 #     serviceInstanceName: hana-manual
 #   portal:
 #     fromSecret: manual-secret # user-provided-service
-
-ttlDaysAfterFinished: 14