feat: add envfrom into deployments to enable loading entire secrets or configMaps into container ENV_VARs

README.md

@@ -192,6 +192,14 @@ extraEnv: { }
 # Set this if running behind a reverse proxy and the external port is different from the port n8n runs on
 #   WEBHOOK_TUNNEL_URL: "https://n8n.myhost.com/
 
+# Set additional environment variables on the Deployment from k8s secrets
+envFrom: []
+# List of existing secrets to add to deployments
+# Example using envFrom with AWS SSM ParameterStore via ExternalSecrets:
+# envFrom:
+#   - secretRef:
+#       name: secret-name
+
 replicaCount: 1
 
 image:

charts/n8n/templates/deployment.webhooks.yaml

@@ -56,6 +56,10 @@ spec:
           args: ["webhook"]
           env:
             {{- include "n8n.deploymentPodEnvironments" . | nindent 12 }}
+          {{- with .Values.envFrom }}
+          envFrom:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           ports:
             - name: http
               containerPort: {{ get .Values.config "port" | default 5678 }}

charts/n8n/templates/deployment.worker.yaml

@@ -56,6 +56,10 @@ spec:
           args: ["worker", "--concurrency={{ .Values.scaling.worker.concurrency }}"]
           env:
             {{- include "n8n.deploymentPodEnvironments" . | nindent 12 }}
+          {{- with .Values.envFrom }}
+          envFrom:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           ports:
             - name: http
               containerPort: {{ get .Values.config "port" | default 5678 }}

charts/n8n/templates/deployment.yaml

@@ -67,6 +67,10 @@ spec:
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env:
             {{- include "n8n.deploymentPodEnvironments" . | nindent 12 }}
+          {{- with .Values.envFrom }}
+          envFrom:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           lifecycle:
             {{- toYaml .Values.lifecycle | nindent 12 }}
           ports:

charts/n8n/values.yaml

@@ -116,6 +116,10 @@ extraEnvSecrets: {}
 #     name: postgres-user-auth
 #     key: password
 
+envFrom: []
+  # - secretRef:
+  #     name: secret-name
+
 ## Common Kubernetes Config Settings
 persistence:
   ## If true, use a Persistent Volume Claim, If false, use emptyDir