fix(helm): wire envFrom secrets and configmaps into migrations job (closes #30311)

helm/litellm-helm/templates/migrations-job.yaml

@@ -89,6 +89,15 @@ spec:
             {{- end }}
             - name: DISABLE_SCHEMA_UPDATE
               value: "false" # always run the migration from the Helm PreSync hook, override the value set
+          envFrom:
+          {{- range .Values.environmentSecrets }}
+            - secretRef:
+                name: {{ . }}
+          {{- end }}
+          {{- range .Values.environmentConfigMaps }}
+            - configMapRef:
+                name: {{ . }}
+          {{- end }}
           {{- with .Values.volumeMounts }}
           volumeMounts:
             {{- toYaml . | nindent 12 }}

helm/litellm-helm/tests/migrations-job_tests.yaml

@@ -223,6 +223,61 @@ tests:
             name: init-tpl
             image: "ghcr.io/berriai/litellm-database:test"
             command: ["echo", "hello"]
+  - it: should work with environmentSecrets
+    template: migrations-job.yaml
+    set:
+      migrationJob:
+        enabled: true
+      environmentSecrets:
+        - litellm-env-secret
+        - litellm-extra-secret
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].envFrom
+          content:
+            secretRef:
+              name: litellm-env-secret
+      - contains:
+          path: spec.template.spec.containers[0].envFrom
+          content:
+            secretRef:
+              name: litellm-extra-secret
+
+  - it: should work with environmentConfigMaps
+    template: migrations-job.yaml
+    set:
+      migrationJob:
+        enabled: true
+      environmentConfigMaps:
+        - litellm-env-configmap
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].envFrom
+          content:
+            configMapRef:
+              name: litellm-env-configmap
+
+  - it: should work with both environmentSecrets and environmentConfigMaps
+    template: migrations-job.yaml
+    set:
+      migrationJob:
+        enabled: true
+      environmentSecrets:
+        - litellm-env-secret
+      environmentConfigMaps:
+        - litellm-env-configmap
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].envFrom
+          content:
+            secretRef:
+              name: litellm-env-secret
+      - contains:
+          path: spec.template.spec.containers[0].envFrom
+          content:
+            configMapRef:
+              name: litellm-env-configmap
+
   - it: should work with extraContainers
     template: migrations-job.yaml
     set: