Skip to content

feat(step-certificates): add custom labels support to service resource#245

Open
jalet wants to merge 3 commits intosmallstep:masterfrom
jalet:master
Open

feat(step-certificates): add custom labels support to service resource#245
jalet wants to merge 3 commits intosmallstep:masterfrom
jalet:master

Conversation

@jalet
Copy link

@jalet jalet commented Feb 11, 2026

Add global.labels support to propagate custom labels to all chart resources, and service.labels for service-specific custom labels.

  • global.labels: applied to all resources (Deployment, StatefulSet, Service, ServiceAccount, etc.)
  • service.labels: applied only to the Service resource
  • Follows existing pattern from serviceaccount.labels

Add service.labels configuration option to allow users to add custom labels
to the Kubernetes Service resource. This enables integration with service
meshes, monitoring systems, and compliance tagging frameworks (NIS2, GDPR).

Custom labels are merged with standard Helm labels and follow the existing
pattern established by serviceaccount.labels.

- Add service.labels configuration in values.yaml
- Update Service template to render custom labels
- Document feature in README with examples
@jalet jalet requested a review from a team as a code owner February 11, 2026 10:31
@CLAassistant
Copy link

CLAassistant commented Feb 11, 2026

CLA assistant check
All committers have signed the CLA.

@github-actions github-actions bot added the needs triage Waiting for discussion / prioritization by team label Feb 11, 2026
@AihiAhazi
Copy link

AihiAhazi commented Feb 25, 2026

This PR is really helpful. Maybe have even a global labels configuration to add labels to all resources and then have specified labels to add additional to e.g. service resource.

jalet and others added 2 commits March 10, 2026 21:41
Extend custom label support beyond the service resource to every
Kubernetes resource in the chart: pods (bootstrap, CA), RBAC
(Role, RoleBinding, ClusterRole, ClusterRoleBinding), and all
Secret resources.

Also refactors rbac.yaml to use the step-certificates.labels helper
instead of duplicating label fields, and adds global.labels to the
helpers template so the labels propagate automatically.

Closes the gap left by the previous commit which only covered the
service resource.
@jalet
Copy link
Author

jalet commented Mar 10, 2026

This PR is really helpful. Maybe have even a global labels configuration to add labels to all resources and then have specified labels to add additional to e.g. service resource.

This should be fixed no, there's global option that also passes custom labels to resources

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs triage Waiting for discussion / prioritization by team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants