34 lines
2.1 KiB
YAML
34 lines
2.1 KiB
YAML
{{- $name := include "go-guess.secretName" . -}}
|
|
{{- $existing := lookup "v1" "Secret" .Release.Namespace $name -}}
|
|
{{- $jwt := .Values.secrets.jwtSecret -}}
|
|
{{- $postgresPassword := .Values.secrets.postgresqlPassword -}}
|
|
{{- $rabbitmqPassword := .Values.secrets.rabbitmqPassword -}}
|
|
{{- if and (not $jwt) $existing }}{{ $jwt = index $existing.data "jwt-secret" | b64dec }}{{ end -}}
|
|
{{- if and (not $postgresPassword) $existing }}{{ $postgresPassword = index $existing.data "postgresql-password" | b64dec }}{{ end -}}
|
|
{{- if and (not $rabbitmqPassword) $existing }}{{ $rabbitmqPassword = index $existing.data "rabbitmq-password" | b64dec }}{{ end -}}
|
|
{{- if not $jwt }}{{ $jwt = randAlphaNum 48 }}{{ end -}}
|
|
{{- if not $postgresPassword }}{{ $postgresPassword = randAlphaNum 32 }}{{ end -}}
|
|
{{- if not $rabbitmqPassword }}{{ $rabbitmqPassword = randAlphaNum 32 }}{{ end -}}
|
|
{{- $databaseURL := .Values.secrets.databaseURL -}}
|
|
{{- if and (not $databaseURL) .Values.postgresql.enabled -}}
|
|
{{- $databaseURL = printf "postgres://%s:%s@%s:5432/%s?sslmode=disable" .Values.postgresql.auth.username ($postgresPassword | urlquery) (include "go-guess.postgresqlName" .) .Values.postgresql.auth.database -}}
|
|
{{- end -}}
|
|
{{- if not $databaseURL }}{{ fail "secrets.databaseURL is required when postgresql.enabled is false" }}{{ end -}}
|
|
{{- $rabbitmqURL := .Values.secrets.rabbitmqURL -}}
|
|
{{- if and (not $rabbitmqURL) .Values.rabbitmq.enabled -}}
|
|
{{- $rabbitmqURL = printf "amqp://%s:%s@%s:5672/" .Values.rabbitmq.auth.username ($rabbitmqPassword | urlquery) (include "go-guess.rabbitmqName" .) -}}
|
|
{{- end -}}
|
|
{{- if not $rabbitmqURL }}{{ fail "secrets.rabbitmqURL is required when rabbitmq.enabled is false" }}{{ end -}}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ $name }}
|
|
labels:
|
|
{{- include "go-guess.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
data:
|
|
jwt-secret: {{ $jwt | b64enc | quote }}
|
|
database-url: {{ $databaseURL | b64enc | quote }}
|
|
rabbitmq-url: {{ $rabbitmqURL | b64enc | quote }}
|
|
postgresql-password: {{ $postgresPassword | b64enc | quote }}
|
|
rabbitmq-password: {{ $rabbitmqPassword | b64enc | quote }}
|