fix: keys are not idempotent

hoverkraft-tech · Dec 30, 2024 · 463315f · 463315f
1 parent 0a9b698
commit 463315f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/postal/templates/secret.yaml b/postal/templates/secret.yaml
@@ -12,6 +12,6 @@ metadata:
   {{- end }}
 data:
   mariadb-password: {{ .Values.mariadb.auth.password | b64enc | quote }}
-  signing-key: {{ $key | b64enc | quote }}
-  rails-secret-key: {{ $key | b64enc | quote }}
+  signing-key: {{ .Values.global.signingKey | required "You must provide a global.signingKey value" | b64enc | quote }}
+  rails-secret-key: {{ .Values.global.railsSecretKey | required "You must provide a global.railsSecretKey value" | b64enc | quote }}
 {{- end }}
diff --git a/postal/values.yaml b/postal/values.yaml
@@ -20,6 +20,10 @@ commonsAnnotations: {}
 global:
   # use an existing secret instead of the automaticaly generated one
   existingSecretName: ""
+  # -- key used to sign emails
+  signingKey: ""
+  # -- the secret key used to sign and encrypt cookies and session data in the application
+  railsSecretKey: ""
   # The hostname that the Postal web interface runs on
   webHostname: localhost
   # The HTTP protocol to use for the Postal web interface