secret-postgresql.yaml

{{- if .Values.createPostgresqlSecret -}}
apiVersion: v1
kind: Secret
metadata:
  name: {{ .Values.postgresql.auth.existingSecret }}
  labels:
    app.kubernetes.io/name: {{ include "defectdojo.name" . }}
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
    helm.sh/chart: {{ include "defectdojo.chart" . }}
    {{- with .Values.extraLabels }}
      {{- toYaml . | nindent 4 }}
    {{- end }}
  annotations:
    helm.sh/resource-policy: keep
    helm.sh/hook: "pre-install"
    helm.sh/hook-delete-policy: "before-hook-creation"
type: Opaque
data:
{{- if .Values.postgresql.auth.password }}
  {{ .Values.postgresql.auth.secretKeys.adminPasswordKey }}: {{ .Values.postgresql.auth.password | b64enc | quote }}
  {{ .Values.postgresql.auth.secretKeys.userPasswordKey }}: {{ .Values.postgresql.auth.password | b64enc | quote }}
{{- else }}
  {{- $postgresRandomPassword := randAlphaNum 16 | b64enc | quote }}
  {{ .Values.postgresql.auth.secretKeys.adminPasswordKey }}: {{ $postgresRandomPassword }}
  {{ .Values.postgresql.auth.secretKeys.userPasswordKey }}: {{ $postgresRandomPassword }}
{{- end }}
# TODO: check if replication password in injected into the values
{{ if eq .Values.postgresql.architecture "replication" -}}
{{- if .Values.postgresql.postgresqlReplicationPassword }}
  {{ .Values.postgresql.auth.secretKeys.replicationPasswordKey }}: {{ .Values.postgresql.postgresqlReplicationPassword | b64enc | quote }}
{{- else }}
  {{ .Values.postgresql.auth.secretKeys.replicationPasswordKey }}: {{ randAlphaNum 10 | b64enc | quote }}
{{- end }}
{{- end }}
{{- end }}