[gsvitak-workwave]

Summary

Add four extension points to all 5 Deployments and 3 CronJobs in the OpenMeter Helm chart:

• extraEnv — individual env vars or secretKeyRef entries
• extraEnvFrom — bulk Secret/ConfigMap injection (e.g., ESO-managed secrets)
• extraVolumes — additional pod volumes
• extraVolumeMounts — additional container volume mounts

All default to empty lists and emit nothing when unset.

Also wires the existing openmeter.init.redis helper into all Deployments and CronJobs so pods wait for Redis readiness alongside PostgreSQL and ClickHouse.

Motivation

Enables safe secret injection via External Secrets Operator (or any secrets backend) through native Helm values, removing the need for brittle JSON6902 patches that break when upstream chart structure changes.

Example usage

extraEnvFrom:
  - secretRef:
      name: openmeter-db-credentials    # Created by ExternalSecret
  - secretRef:
      name: openmeter-kafka-credentials  # Created by ExternalSecret

extraEnv:
  - name: SVIX_JWT_SECRET
    valueFrom:
      secretKeyRef:
        name: openmeter-svix-secret
        key: jwt-secret

Changes

• values.yaml — 4 new top-level fields with helm-docs comments and usage examples
• templates/deployment.yaml — extension points added to all 5 Deployments + Redis init container
• templates/jobs.yaml — extension points added to all 3 CronJobs + Redis init container

🤖 Generated with Claude Code