From ea684d91d18b3f4dfa98cb256a2412e7f3c6a081 Mon Sep 17 00:00:00 2001
From: Abdessalam ZAIMI <abdessalam.zaimi@sia-partners.com>
Date: Thu, 16 Apr 2026 11:23:08 +0200
Subject: [PATCH 1/2] feat: support server_auth, imagePullSecrets and podLabels

---
 templates/deployment.yaml |  2 ++
 templates/secrets.yaml    |  3 +++
 values.yaml               | 11 +++++++++++
 3 files changed, 16 insertions(+)

diff --git a/templates/deployment.yaml b/templates/deployment.yaml
index 45bbeef..b7baf28 100644
--- a/templates/deployment.yaml
+++ b/templates/deployment.yaml
@@ -26,10 +26,12 @@ spec:
     {{- toYaml . | nindent 4 }}
   {{- end }}
   {{- end }}
+  {{- include "pgdog.imagePullSecrets" . | nindent 2 }}
   template:
     metadata:
       labels:
         {{- include "pgdog.selectorLabels" . | nindent 8 }}
+        {{- include "pgdog.podLabels" . | nindent 8 }}
       {{- if or .Values.restartOnConfigChange .Values.podAnnotations }}
       annotations:
         {{- if .Values.restartOnConfigChange }}
diff --git a/templates/secrets.yaml b/templates/secrets.yaml
index 45d7076..fa33671 100644
--- a/templates/secrets.yaml
+++ b/templates/secrets.yaml
@@ -38,6 +38,9 @@ read_only = {{ .readOnly }}
 {{- if .serverLifetime }}
 server_lifetime = {{ .serverLifetime }}
 {{- end }}
+{{- if .serverAuth }}
+server_auth = {{ .serverAuth | quote }}
+{{- end }}
 {{- end }}
 {{- end -}}
 
diff --git a/values.yaml b/values.yaml
index 7d33c5e..9fb3ef6 100644
--- a/values.yaml
+++ b/values.yaml
@@ -16,6 +16,8 @@ selectorLabels: {}
 # allows adding custom annotations to the deployment
 annotations: {}
 
+# allows adding custom labels to the pods
+podLabels: {}
 # allows adding custom annotations to the pods
 podAnnotations: {}
 
@@ -28,6 +30,15 @@ podAnnotations: {}
 # When set, this will be added as a label to all Prometheus metrics
 # clusterName: ""
 
+## Optionally specify an array of imagePullSecrets.
+## Secrets must be manually created in the namespace.
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+## e.g:
+## imagePullSecrets:
+##   - name: regcred
+##
+imagePullSecrets: []
+
 # image contains the Docker image properties.
 image:
   # repository is the Docker image repository

From acd252f0a88ca5a245d5d47c5c451b8d7b38edc7 Mon Sep 17 00:00:00 2001
From: Abdessalam ZAIMI <abdessalam.zaimi@sia-partners.com>
Date: Thu, 16 Apr 2026 11:49:05 +0200
Subject: [PATCH 2/2] feat: support server_auth, imagePullSecrets and podLabels

---
 templates/deployment.yaml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/templates/deployment.yaml b/templates/deployment.yaml
index b7baf28..4c26f41 100644
--- a/templates/deployment.yaml
+++ b/templates/deployment.yaml
@@ -26,12 +26,13 @@ spec:
     {{- toYaml . | nindent 4 }}
   {{- end }}
   {{- end }}
-  {{- include "pgdog.imagePullSecrets" . | nindent 2 }}
   template:
     metadata:
       labels:
+        {{- with .Values.podLabels }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
         {{- include "pgdog.selectorLabels" . | nindent 8 }}
-        {{- include "pgdog.podLabels" . | nindent 8 }}
       {{- if or .Values.restartOnConfigChange .Values.podAnnotations }}
       annotations:
         {{- if .Values.restartOnConfigChange }}
@@ -55,6 +56,10 @@ spec:
       initContainers:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: pgdog
           {{- if .Values.image.name }}