fix(helm): reuse existing password or generate password during instal…

…l as default and dont fail pipeline. (#1685)

Co-authored-by: Derek Roberts <[email protected]>

.github/workflows/pr-open.yml

@@ -12,7 +12,6 @@ concurrency:
 jobs:
   # Enforce conventional commits in PR titles
   conventional-commits:
-    if: github.event_name == 'pull_request'
     name: Conventional Commits
     runs-on: ubuntu-22.04
     steps:

charts/quickstart-openshift/templates/secret.yaml

@@ -1,10 +1,14 @@
 {{- if and .Values.global.secrets .Values.global.secrets.enabled}}
 {{- $databaseUser := .Values.global.secrets.databaseUser| default "quickstart"  }}
-{{- $databasePassword := .Values.global.secrets.databasePassword }}
+{{- $databasePassword := .Values.global.secrets.databasePassword | default (randAlphaNum 10) | quote }}
+{{- $secretObj := (lookup "v1" "Secret" .Release.Namespace  .Release.Name ) | default dict }}
+{{- $secretData := (get $secretObj "data") | default dict }}
+  # set below to existing secret data or generate a random one when not exists
+{{- $databasePassword = (get $secretData "databasePassword") | default ($databasePassword | b64enc) }}
 {{- $databaseName := .Values.global.secrets.databaseName| default "quickstart" }}
 {{- $host := printf "%s-%s:5432" .Release.Name .Values.global.databaseAlias }}
-{{- $databaseURL := printf "postgresql://%s:%s@%s/%s" $databaseUser $databasePassword $host $databaseName }}
-{{- $databaseJDBCURL := printf "jdbc:postgresql://%s:%s@%s/%s" $databaseUser $databasePassword $host $databaseName }}
+{{- $databaseURL := printf "postgresql://%s:%s@%s/%s" $databaseUser (b64dec $databasePassword) $host $databaseName }}
+{{- $databaseJDBCURL := printf "jdbc:postgresql://%s:%s@%s/%s" $databaseUser (b64dec $databasePassword) $host $databaseName }}
 {{- $databaseJDBCURLNoCreds := printf "jdbc:postgresql://%s/%s" $host $databaseName }}
 ---
 apiVersion: v1
@@ -13,9 +17,9 @@ metadata:
   name: {{ .Release.Name }}
   labels: {{- include "selectorLabels" . | nindent 4 }}
 data:
-  databasePassword: {{ $databasePassword | b64enc | quote }}
-  postgres-password: {{ $databasePassword | b64enc | quote }}
-  password: {{ $databasePassword | b64enc | quote }}
+  databasePassword: {{ $databasePassword | quote }}
+  postgres-password: {{ $databasePassword  | quote }}
+  password: {{ $databasePassword | quote }}
   databaseUser: {{  $databaseUser | b64enc | quote }}
   databaseName: {{  $databaseName | b64enc | quote }}
   databaseURL: {{ $databaseURL | b64enc | quote }}