wbsong111
f4d287abef
- chart 0.8.1 → 0.11.0 (appVersion 0.10.4 → 0.12.2) - deps: postgres 1.5.8 → 1.5.13, openfga 0.2.44 → 0.2.62 - ingress: Kong → APISIX (use-regex + path /.*, cluster-issuer) - openfga.playground 비활성화 (preshared 인증 패닉 방지) - breaking=false, custom-values 키 전부 호환 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
22 lines
793 B
YAML
22 lines
793 B
YAML
{{- if eq "postgres" (lower .Values.secretBackend.type) }}
|
|
{{- if empty .Values.secretBackend.postgres.encryptionKeySecret }}
|
|
{{- $secretName := include "iceberg-catalog.fullname" . }}
|
|
{{- $secretName = printf "%s-postgres-encryption" $secretName }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ $secretName }}
|
|
namespace: {{ .Release.Namespace }}
|
|
annotations:
|
|
helm.sh/resource-policy: "keep"
|
|
labels:
|
|
app.kubernetes.io/component: config
|
|
type: Opaque
|
|
data:
|
|
{{- $secretObj := (lookup "v1" "Secret" .Release.Namespace $secretName) | default dict }}
|
|
{{- $secretData := (get $secretObj "data") | default dict }}
|
|
{{- $encryptionKey := (get $secretData "encryptionKey") | default (randAlphaNum 40 | b64enc) }}
|
|
encryptionKey: {{ $encryptionKey | quote }}
|
|
{{- end }}
|
|
{{- end }}
|