# Helm

## HQ Changelog

### Support for ESO SecretStore

In the past only *ClusterSecretStore* when handling external secret was support. With a new version you can choose to pick either *ClusterSecretStore* or a *SecretStore* when creating external secret.

{% tabs %}
{% tab title="ClusterSecretStore" %}
{% code title="values.yaml" %}

```yaml
lensesHq:
  storage:
    postgres:
      enabled: true
      host: postgres.host.url
      port: 5432
      username: postgres
      database: hq
      passwordSecret:
        type: "externalSecret"
        name: postgres
        key:  password
        externalSecret:
          secretStoreRef:
              type: ClusterSecretStore
              name: css-secrets
```

{% endcode %}
{% endtab %}

{% tab title="SecretStore" %}
{% code title="values.yaml" %}

```yaml
lensesHq:  
  storage:
    postgres:
      enabled: true
      host: postgres.host.url
      port: 5432
      username: postgres
      database: hq
      passwordSecret:
        type: "externalSecret"
        name: postgres
        key:  password
        externalSecret:
          secretStoreRef:
              type: SecretStore
              name: ss-secrets
```

{% endcode %}
{% endtab %}
{% endtabs %}

### ESO additional specs

New property has been added to external secret template called *additionalSpecs* where you can add or change any of the specs that would normally be added in ExternalSecret resource.

Example:

```yaml
lensesHq:  
  storage:
    postgres:
      enabled: true
      host: postgres.host.url
      port: 5432
      username: postgres
      database: hq
      passwordSecret:
        type: "externalSecret"
        name: postgres
        key:  password
        externalSecret:
          additionalSpecs:
            refreshInterval: 12h
          secretStoreRef:
              type: ClusterSecretStore
              name: css-secrets
```

### Small bugfixes

* *`lensesHq.http.tls`* property was referencing wrong properties within defined *values.yaml*