33 lines
1.5 KiB
YAML
33 lines
1.5 KiB
YAML
{{- if not .Values.existingSecret }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "osa-suite.fullname" . }}-secrets
|
|
labels:
|
|
{{- include "osa-suite.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
stringData:
|
|
SECRET_KEY: {{ .Values.secrets.secretKey | default (randAlphaNum 64) | quote }}
|
|
FERNET_KEY: {{ required "secrets.fernetKey is required (or set existingSecret) — generate with: python -c \"from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())\"" .Values.secrets.fernetKey | quote }}
|
|
{{- if .Values.auth.passwordHash }}
|
|
AUTH_PASSWORD_HASH: {{ .Values.auth.passwordHash | quote }}
|
|
{{- end }}
|
|
{{- if .Values.keycloak.clientSecret }}
|
|
KEYCLOAK_CLIENT_SECRET: {{ .Values.keycloak.clientSecret | quote }}
|
|
{{- end }}
|
|
{{- if .Values.keycloak.oidcClientSecret }}
|
|
KEYCLOAK_OIDC_CLIENT_SECRET: {{ .Values.keycloak.oidcClientSecret | quote }}
|
|
{{- end }}
|
|
{{- if .Values.smtp.username }}
|
|
SMTP_USERNAME: {{ .Values.smtp.username | quote }}
|
|
{{- end }}
|
|
{{- if .Values.smtp.password }}
|
|
SMTP_PASSWORD: {{ .Values.smtp.password | quote }}
|
|
{{- end }}
|
|
{{- if .Values.postgresql.enabled }}
|
|
DATABASE_PASSWORD: {{ required "postgresql.password is required when postgresql is enabled" .Values.postgresql.password | quote }}
|
|
{{- else if .Values.postgresql.external.host }}
|
|
DATABASE_PASSWORD: {{ required "postgresql.external.password is required when using external database" .Values.postgresql.external.password | quote }}
|
|
{{- end }}
|
|
{{- end }}
|