iterate over secrets in helm

deployment.yaml

    env:
{{- range $secret := .Values.secrets }}
  {{- if eq $secret.type "env" }}
    {{- range $key := $secret.keys }}
      {{- $envPrefix := $secret.prefix | default "" | upper }}
      {{- $envKey := $key | upper | replace "." "_" | replace "-" "_" }}
      - name: {{ $envPrefix }}{{ $envKey }}
         valueFrom:
           secretKeyRef:
             name: {{ $secret.name }}
             key: {{ $key }}
    {{- end }}
  {{- end }}
{{- end }}

values.yaml

deployment:
  secrets:
  - type: env                
    name: my-secret     # secret name
    prefix: MY_         # optional prefix
    keys:               # secret key ref list
    - foo               # my-secret.foo => MY_FOO
    - x.y.z             # my-secret.x.y.z => MY_X_Y_Z