284313f908
Some checks are pending
Bidi Control Character Guard / bidi-control-guard (push) Waiting to run
Circular Dependency Check / Check for new circular dependencies (push) Waiting to run
Citus Migration Smoke / Combined migrations on single-node Citus (push) Waiting to run
E2E Fresh Install Tests / fresh-install-e2e (push) Waiting to run
ext-v2 guardrails / Run ext-v2 guard and ESLint (push) Waiting to run
Integration Tests / Check for relevant changes (push) Waiting to run
Integration Tests / ${{ (github.event_name == 'schedule' || github.event.inputs.suite == 'full') && 'Full integration suite' || 'Tier-1 integration subset' }} (push) Blocked by required conditions
Mobile checks / Mobile lint + typecheck (push) Waiting to run
Mobile checks / Mobile unit tests (push) Waiting to run
Mobile checks / Mobile dependency audit (report) (push) Waiting to run
Mobile checks / Mobile reproducibility checks (push) Waiting to run
Secrets guard (env backups) / Ensure no tracked env backup files (push) Waiting to run
Temporal Readiness / fast-readiness (push) Waiting to run
Temporal Readiness / docker-parity (push) Waiting to run
TypeScript Type Check / Nx affected typecheck (push) Waiting to run
Unit Tests / Skipped-test budget (push) Waiting to run
Unit Tests / Nx affected unit tests (push) Waiting to run
Unit Tests / Server unit coverage (informational) (push) Waiting to run
Validate Tenant Management Schema / Check for relevant changes (push) Waiting to run
Validate Tenant Management Schema / Validate Tenant Management Schema (push) Blocked by required conditions
EE Workflows Build Guard / ee-workflows-build-guard (push) Waiting to run
Excluded: .git, node_modules, secrets/, compose.env, assemblyscript tgz Source: /opt/alga-psa on psa.joliet.tech
29 lines
1.3 KiB
YAML
29 lines
1.3 KiB
YAML
{{- if .Values.db.enabled }}
|
|
{{- $ns := include "sebastian.namespace" . -}}
|
|
{{- $existing := (lookup "v1" "Secret" $ns "db-credentials") -}}
|
|
{{- $existingPVC := (lookup "v1" "PersistentVolumeClaim" $ns (printf "%s-postgres-data" (include "sebastian.fullname" .))) -}}
|
|
{{- if and (not $existing) $existingPVC }}
|
|
{{- fail (printf "Refusing to generate db-credentials because PVC %s/%s already exists. Existing appliance data must be recovered with the original secret or wiped before a fresh install." $ns (printf "%s-postgres-data" (include "sebastian.fullname" .))) }}
|
|
{{- end }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: db-credentials
|
|
namespace: {{ include "sebastian.namespace" . }}
|
|
annotations:
|
|
"helm.sh/resource-policy": keep
|
|
type: Opaque
|
|
data:
|
|
{{- if $existing }}
|
|
DB_PASSWORD_HOCUSPOCUS: {{ index $existing.data "DB_PASSWORD_HOCUSPOCUS" }}
|
|
DB_PASSWORD_PGBOUNCER: {{ index $existing.data "DB_PASSWORD_PGBOUNCER" }}
|
|
DB_PASSWORD_SERVER: {{ index $existing.data "DB_PASSWORD_SERVER" }}
|
|
DB_PASSWORD_SUPERUSER: {{ index $existing.data "DB_PASSWORD_SUPERUSER" }}
|
|
{{- else }}
|
|
DB_PASSWORD_HOCUSPOCUS: {{ randAlphaNum 32 | b64enc | quote }}
|
|
DB_PASSWORD_PGBOUNCER: {{ randAlphaNum 32 | b64enc | quote }}
|
|
DB_PASSWORD_SERVER: {{ randAlphaNum 32 | b64enc | quote }}
|
|
DB_PASSWORD_SUPERUSER: {{ randAlphaNum 32 | b64enc | quote }}
|
|
{{- end }}
|
|
{{- end }}
|