Andrew
f4ec009840
Renders only when mariadb.enabled=true. Generates a random root password Secret with helm.sh/resource-policy=keep so uninstall doesn't orphan the data volume. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
32 lines
985 B
YAML
32 lines
985 B
YAML
{{- if .Values.mariadb.enabled }}
|
|
{{- $rootSecretName := default (printf "%s-mariadb-root" (include "ezscale-website.fullname" .)) .Values.mariadb.rootPasswordSecret }}
|
|
{{- if not .Values.mariadb.rootPasswordSecret }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ $rootSecretName }}
|
|
labels: {{- include "ezscale-website.labels" . | nindent 4 }}
|
|
annotations:
|
|
helm.sh/resource-policy: keep
|
|
type: Opaque
|
|
stringData:
|
|
password: {{ randAlphaNum 32 | quote }}
|
|
---
|
|
{{- end }}
|
|
apiVersion: k8s.mariadb.com/v1alpha1
|
|
kind: MariaDB
|
|
metadata:
|
|
name: {{ include "ezscale-website.fullname" . }}-mariadb
|
|
labels: {{- include "ezscale-website.labels" . | nindent 4 }}
|
|
spec:
|
|
image: {{ .Values.mariadb.image }}
|
|
rootPasswordSecretKeyRef:
|
|
name: {{ $rootSecretName }}
|
|
key: password
|
|
generate: false
|
|
replicas: {{ .Values.mariadb.replicas }}
|
|
storage:
|
|
size: {{ .Values.mariadb.storage.size }}
|
|
storageClassName: {{ .Values.mariadb.storage.storageClassName }}
|
|
{{- end }}
|