{{- if .Values.mariadb.enabled }}
{{- $rootSecretName := default (printf "%s-mariadb-root" (include "ezscale-website.fullname" .)) .Values.mariadb.rootPasswordSecret }}
{{- if not .Values.mariadb.rootPasswordSecret }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ $rootSecretName }}
  labels: {{- include "ezscale-website.labels" . | nindent 4 }}
  annotations:
    helm.sh/resource-policy: keep
type: Opaque
stringData:
  password: {{ randAlphaNum 32 | quote }}
---
{{- end }}
apiVersion: k8s.mariadb.com/v1alpha1
kind: MariaDB
metadata:
  name: {{ include "ezscale-website.fullname" . }}-mariadb
  labels: {{- include "ezscale-website.labels" . | nindent 4 }}
spec:
  image: {{ .Values.mariadb.image }}
  rootPasswordSecretKeyRef:
    name: {{ $rootSecretName }}
    key: password
    generate: false
  replicas: {{ .Values.mariadb.replicas }}
  storage:
    size: {{ .Values.mariadb.storage.size }}
    storageClassName: {{ .Values.mariadb.storage.storageClassName }}
{{- end }}