cluster: add support for projected volumes

charts/cluster/templates/cluster.yaml

@@ -143,3 +143,9 @@ spec:
     {{- end }}
   {{ include "cluster.bootstrap" . | nindent 2 }}
   {{ include "cluster.backup" . | nindent 2 }}
+  {{-  with .Values.cluster.projectedVolumeTemplate.sources }}
+  projectedVolumeTemplate:
+    sources:
+      {{- . | toYaml | nindent 6 -}}
+  {{ end }}
+

charts/cluster/test/postgresql-cluster-configuration/01-non_default_configuration_cluster-assert.yaml

@@ -131,3 +131,11 @@ spec:
     metadata:
       annotations:
         my-annotation: my-service-account
+  projectedVolumeTemplate:
+    sources:
+      - secret:
+          items:
+          - key: ca.crt
+            path: crt/ca-01.pem
+          name: ca-secret
+

charts/cluster/test/postgresql-cluster-configuration/01-non_default_configuration_cluster.yaml

@@ -128,5 +128,12 @@ cluster:
       annotations:
         my-annotation: my-service-account
 
+  projectedVolumeTemplate:
+    sources:
+      - secret:
+          name: ca-secret 
+          items:
+          - key: ca.crt
+            path: crt/ca-01.pem
 backups:
   enabled: false

charts/cluster/values.schema.json

@@ -300,6 +300,9 @@
                 "priorityClassName": {
                     "type": "string"
                 },
+                "projectedVolumeTemplate": {
+                    "type": "object"
+                },
                 "resources": {
                     "type": "object"
                 },

charts/cluster/values.yaml

@@ -394,6 +394,17 @@ cluster:
   additionalLabels: {}
   annotations: {}
 
+  # -- mounting custom files inside the Postgres pods through .spec.projectedVolumeTemplate
+  # See https://cloudnative-pg.io/documentation/current/cluster_conf/#projected-volumes
+  projectedVolumeTemplate: {}
+    # sources:
+    #   - secret:
+    #       name: sample-secret
+    #       items:
+    #         - key: tls.crt
+    #           path: certificate/tls.crt
+    #         - key: tls.key
+    #           path: certificate/tls.key
 
 backups:
   # -- You need to configure backups manually, so backups are disabled by default.