Redo via values.yaml

Author: rranjan3

.github/workflows/pre-merge.yml

@@ -85,6 +85,8 @@ jobs:
       - name: Deploy Umbrella Charts
         run: |
           set -x
+          # Generate a random password for CI testing
+          ORCH_DEFAULT_PASSWORD=$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-25)
           PUBLIC_RS="registry-rs.edgeorchestration.intel.com/edge-orch/"
           DEV_VALUES="-f tools/latest-dev-components.yaml"
           CORE_DEV_VALUES=""
@@ -120,7 +122,8 @@ jobs:
             --set import.credentials.enabled=false \
             --set import.tenant-controller.enabled=false \
             --set tenant-controller.managerArgs.disableCredentialsManagement=true \
-            --set inventory.postgresql.pod.enabled=true ${CORE_DEV_VALUES} \
+            --set inventory.postgresql.pod.enabled=true \
+            --set inventory.postgresql.auth.password="${ORCH_DEFAULT_PASSWORD}" ${CORE_DEV_VALUES} \
             infra-core ./infra-core
 
           helm install -n orch-infra --set global.registry.name="${PUBLIC_RS}" \

inventory/templates/postgresql-secrets.yml

@@ -3,14 +3,13 @@
 ---
 # NOTE this is used only in the dev environment
 {{- if .Values.postgresql.pod.enabled }}
-{{- $pgPassword := derivePassword 1 "long" .Chart.AppVersion "postgresql" "" }}
 apiVersion: v1
 kind: Secret
 metadata:
   name: {{ .Values.postgresql.secrets }}
 stringData:
   PGUSER: "admin"
-  PGPASSWORD: {{ $pgPassword | quote }}
+  PGPASSWORD: {{ required "PostgreSQL password" .Values.postgresql.auth.password | quote }}
   PGDATABASE: "postgres"
   PGPORT: "5432"
   PGHOST: "inventory-postgresql-0.inventory-postgresql"

inventory/values.yaml

@@ -137,6 +137,9 @@ postgresql:
       mountPath: "/var/lib/postgresql/data"
   # secrets with PGHOST, PGUSER, PGPASSWORD, PGDATABASE, PGPORT
   secrets: inventory-postgresql-config
+  # Authentication configuration
+  auth:
+    password: ""
   # Configuration for read-only replicas
   readOnlyReplicasEnabled: false
   # secrets for read-only replicas with PGHOST, PGUSER, PGPASSWORD, PGDATABASE, PGPORT