feat: add extraObjects support

Allows deploying additional Kubernetes manifests (e.g. SealedSecrets with
OIDC credentials) alongside the chart without a separate Helm release.

Closes #16

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: steveiliop56

charts/tinyauth/README.md

@@ -16,6 +16,7 @@ The tiniest authentication and authorization server you have ever seen.
 | autoscaling.targetMemoryUtilizationPercentage | int | `80` |  |
 | deploymentStrategy.type | string | `"RollingUpdate"` |  |
 | env | list | `[]` |  |
+| extraObjects | list | `[]` |  |
 | fullnameOverride | string | `""` |  |
 | httpRoute.annotations | object | `{}` |  |
 | httpRoute.enabled | bool | `false` |  |

charts/tinyauth/templates/extraobjects.yaml

@@ -0,0 +1,4 @@
+{{- range .Values.extraObjects }}
+---
+{{ tpl (toYaml .) $ }}
+{{- end }}

charts/tinyauth/values.schema.json

@@ -43,6 +43,10 @@
             "default": [],
             "type": "array"
         },
+        "extraObjects": {
+            "default": [],
+            "type": "array"
+        },
         "fullnameOverride": {
             "type": "string"
         },

charts/tinyauth/values.yaml

@@ -407,6 +407,18 @@ httpRoute:
             type: PathPrefix
             value: /
 
+# Extra Kubernetes objects to deploy alongside the chart.
+# Useful for deploying additional manifests (e.g. SealedSecrets containing OIDC
+# client credentials) without needing a separate Helm release. Each item is a
+# raw Kubernetes manifest and may use template expressions.
+extraObjects: [] # @schema default: []
+# - apiVersion: v1
+#   kind: Secret
+#   metadata:
+#     name: my-extra-secret
+#   stringData:
+#     key: value
+
 # Additional environment variables for the container
 env: [] # @schema default: []
 # - name: CUSTOM_VAR