qdrant-helm icon indicating copy to clipboard operation
qdrant-helm copied to clipboard

Generating apiKey

Open apocalypsation1 opened this issue 6 months ago • 3 comments

Followed your values.yaml chart regarding on apiKey. I want to create my own api key instead of qdrant generating it. But when i run together with the helm installl. qdrant will generate one qdrant-vector-apikey and my test-qdrant in secret. And the statefulset will be using qdrant-vector-apikey instead of test-qdrant.

apiKey:
  valueFrom:
    secretKeyRef:
      name: test-qdrant
      key: qdrant-key

Problem with the use of lookup() function in the helm chart's helpers.tpl file, i don't have a running kubernetes cluster to query the secret from.

{{- $secretObj := (lookup "v1" "Secret" .Release.Namespace (printf "%s-apikey" (include "qdrant.fullname" . ))) | default dict -}}

apocalypsation1 avatar Jun 17 '25 07:06 apocalypsation1

Helm lookups play extremely bad with ArgoCD. I would be very nice to avoid that and use kubernetes secret volume mounts instead.

vermut avatar Jun 24 '25 12:06 vermut

I also wanted to bring my own apiKey. Just stumbled upon the lookup. Ideally, qdrant would be referencing the user provided secret directly at runtime.

jneuff avatar Jul 31 '25 11:07 jneuff

The biggest hurdle to get there is that the secret containing the apiKey is currently expected to be in some predefined qdrant config format: https://github.com/qdrant/qdrant-helm/blob/main/charts/qdrant/templates/statefulset.yaml#L195 It would be simpler, if the secret would be mounted with key projection of the apiKey.

jneuff avatar Jul 31 '25 11:07 jneuff