WIP: Generate db secret

.github/workflows/build.yaml

@@ -3,7 +3,7 @@ on:
   push:
     branches: 
     - main
-    - PH-52/*
+    - 85-*
     - PH-47/*
     - PH-54/*
     - PH-79/*

helm/pharos/templates/secret-postgres.yaml

@@ -0,0 +1,23 @@
+{{- if and .Values.postgresql.enabled .Values.postgresql.auth.generateSecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Values.postgresql.auth.existingSecret }}
+  labels:
+    {{- include "pharos.labels" . | nindent 4 }}
+type: Opaque
+data:
+  {{- $postgresPassword := randAlphaNum 16 }}
+  {{- $postgresUsername := "pharos" }}
+  {{- $postgresPort := "5432" }}
+  {{- $postgresEndpoint := printf "%s-postgres.%s.svc.cluster.local" .Release.Name .Release.Namespace }}
+  {{- $postgresDSN := printf "postgres://%s:%s@%s:%s/%s?sslmode=disable" $postgresUsername $postgresPassword $postgresEndpoint $postgresPort $postgresUsername }}
+
+  # Store the generated values
+  postgres-password: {{ $postgresPassword | b64enc }}
+  password: {{ $postgresPassword | b64enc }}
+  username: {{ $postgresUsername | b64enc }}
+  port: {{ $postgresPort | b64enc }}
+  endpoint: {{ $postgresEndpoint | b64enc }}
+  dsn: {{ $postgresDSN | b64enc }}
+{{- end }}

helm/pharos/values.yaml

@@ -55,6 +55,8 @@ postgres:
   enabled: true
   # -- PostgreSQL authentication
   auth:
+    # -- Generate a secret for PostgreSQL connection
+    generateSecret: true
     # -- Use an existing secret for PostgreSQL connection
     existingSecret: "postgres-connection"  
   primary: