61 lines
2.1 KiB
Smarty
61 lines
2.1 KiB
Smarty
{{/* Define the secrets */}}
|
|
{{- define "vaultwarden.secrets" -}}
|
|
|
|
{{- $adminToken := "" }}
|
|
{{- if eq .Values.vaultwarden.admin.enabled true }}
|
|
{{- $adminToken = .Values.vaultwarden.admin.token | default (randAlphaNum 48) | b64enc | quote }}
|
|
{{- end -}}
|
|
|
|
{{- $smtpUser := "" }}
|
|
{{- if and (eq .Values.vaultwarden.smtp.enabled true ) (.Values.vaultwarden.smtp.user) }}
|
|
{{- $smtpUser = .Values.vaultwarden.smtp.user | b64enc | quote }}
|
|
{{- end -}}
|
|
|
|
{{- $yubicoClientId := "" }}
|
|
{{- if eq .Values.vaultwarden.yubico.enabled true }}
|
|
{{- $yubicoClientId = required "Yubico Client ID required" .Values.vaultwarden.yubico.clientId | toString | b64enc | quote }}
|
|
{{- end -}}
|
|
---
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: vaultwardensecret
|
|
data:
|
|
{{- if ne $adminToken "" }}
|
|
ADMIN_TOKEN: {{ $adminToken }}
|
|
{{- end }}
|
|
{{- if ne $smtpUser "" }}
|
|
SMTP_USERNAME: {{ $smtpUser }}
|
|
SMTP_PASSWORD: {{ required "Must specify SMTP password" .Values.vaultwarden.smtp.password | b64enc | quote }}
|
|
{{- end }}
|
|
{{- if ne $yubicoClientId "" }}
|
|
YUBICO_CLIENT_ID: {{ $yubicoClientId }}
|
|
YUBICO_SECRET_KEY: {{ required "Yubico Secret Key required" .Values.vaultwarden.yubico.secretKey | b64enc | quote }}
|
|
{{- end }}
|
|
|
|
---
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
labels:
|
|
{{- include "common.labels" . | nindent 4 }}
|
|
name: dbcreds
|
|
{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }}
|
|
{{- $dbPass := "" }}
|
|
data:
|
|
{{- if $previous }}
|
|
{{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }}
|
|
postgresql-password: {{ ( index $previous.data "postgresql-password" ) }}
|
|
postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }}
|
|
{{- else }}
|
|
{{- $dbPass = randAlphaNum 50 }}
|
|
postgresql-password: {{ $dbPass | b64enc | quote }}
|
|
postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }}
|
|
{{- end }}
|
|
url: {{ ( printf "%v%v:%v@%v-%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass .Release.Name "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }}
|
|
plainhost: {{ ( printf "%v-%v" .Release.Name "postgresql" ) | b64enc | quote }}
|
|
type: Opaque
|
|
{{- end -}}
|