{{- if and  .Values.database.password (not .Values.database.existingSecret) -}}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "keycloak.fullname" $ }}-database
  namespace: {{ include "keycloak.namespace" . }}
  labels:
  {{- include "keycloak.labels" $ | nindent 4 }}
type: Opaque
stringData:
  password: {{ .Values.database.password | quote }}
{{- end }}