mirror of
https://github.com/rtomik/helm-charts.git
synced 2026-04-05 17:50:38 +00:00
50 lines
2.5 KiB
YAML
50 lines
2.5 KiB
YAML
{{- $needsSecret := false -}}
|
|
{{- if not .Values.config.secretKey.existingSecret -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
{{- if not .Values.postgresql.existingSecret -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
{{- if and .Values.config.ldap.enabled .Values.config.ldap.bindPassword (not .Values.config.ldap.existingSecret) -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
{{- if and .Values.config.email.host .Values.config.email.user (not .Values.config.email.existingSecret) -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
{{- if and .Values.config.s3.enabled (not .Values.config.s3.existingSecret) -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
{{- if and .Values.config.hcaptcha.siteKey .Values.config.hcaptcha.secret (not .Values.config.hcaptcha.existingSecret) -}}
|
|
{{- $needsSecret = true -}}
|
|
{{- end -}}
|
|
|
|
{{- if $needsSecret }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ include "tandoor.fullname" . }}-secrets
|
|
labels:
|
|
{{- include "tandoor.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
data:
|
|
{{- if not .Values.config.secretKey.existingSecret }}
|
|
{{ .Values.config.secretKey.secretKey | default "secret-key" }}: {{ .Values.config.secretKey.value | default "change-me-tandoor-secret-key-at-least-50-characters-long-for-security" | b64enc }}
|
|
{{- end }}
|
|
{{- if not .Values.postgresql.existingSecret }}
|
|
{{ .Values.postgresql.passwordKey | default "postgresql-password" }}: {{ .Values.postgresql.password | default "tandoor" | b64enc }}
|
|
{{- end }}
|
|
{{- if and .Values.config.ldap.enabled .Values.config.ldap.bindPassword (not .Values.config.ldap.existingSecret) }}
|
|
{{ .Values.config.ldap.bindPasswordKey | default "ldap-bind-password" }}: {{ .Values.config.ldap.bindPassword | b64enc }}
|
|
{{- end }}
|
|
{{- if and .Values.config.email.host .Values.config.email.user (not .Values.config.email.existingSecret) }}
|
|
{{ .Values.config.email.passwordKey | default "email-password" }}: {{ .Values.config.email.password | default "" | b64enc }}
|
|
{{- end }}
|
|
{{- if and .Values.config.s3.enabled (not .Values.config.s3.existingSecret) }}
|
|
{{ .Values.config.s3.accessKeyKey | default "s3-access-key" }}: {{ .Values.config.s3.accessKey | default "" | b64enc }}
|
|
{{ .Values.config.s3.secretAccessKeyKey | default "s3-secret-access-key" }}: {{ .Values.config.s3.secretAccessKey | default "" | b64enc }}
|
|
{{- end }}
|
|
{{- if and .Values.config.hcaptcha.siteKey .Values.config.hcaptcha.secret (not .Values.config.hcaptcha.existingSecret) }}
|
|
{{ .Values.config.hcaptcha.secretKeyKey | default "hcaptcha-secret" }}: {{ .Values.config.hcaptcha.secret | b64enc }}
|
|
{{- end }}
|
|
{{- end }}
|