From 3b2c81a72555df40ff78062952ec94e80b4b79e4 Mon Sep 17 00:00:00 2001
From: im-Amitto <29653282+im-Amitto@users.noreply.github.com>
Date: Tue, 26 May 2026 19:50:47 +0530
Subject: [PATCH] chore(ctl-api): scope slack envSecrets to slack deployment

Mirror the auth.envSecrets pattern so SLACK_* secrets are only mounted
on the api-slack pod, not on every shared deployment (worker, public,
runner, etc.). Lets consumers omit SLACK_* from the shared envSecrets
list without breaking unrelated pods.
---
 charts/ctl-api/templates/api_slack_deployment.tpl | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/charts/ctl-api/templates/api_slack_deployment.tpl b/charts/ctl-api/templates/api_slack_deployment.tpl
index 34b16ca..e194e1f 100644
--- a/charts/ctl-api/templates/api_slack_deployment.tpl
+++ b/charts/ctl-api/templates/api_slack_deployment.tpl
@@ -96,6 +96,14 @@ spec:
                 secretKeyRef:
                   name: {{ $envSecret.valueFrom.name }}
                   key: {{ $envSecret.valueFrom.key }}
+          {{- end}}
+          {{/* additional secrets for the slack service */}}
+          {{- range $envSecret := .Values.api.slack.envSecrets }}
+            - name: {{ $envSecret.name }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $envSecret.valueFrom.name }}
+                  key: {{ $envSecret.valueFrom.key }}
           {{- end}}
             - name: HOST_IP
               valueFrom: