fix keycloak secrets drift

aenix-io · Dec 4, 2024 · b5262ea · b5262ea
1 parent 7da85d6
commit b5262ea
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/packages/system/keycloak/templates/sts.yaml b/packages/system/keycloak/templates/sts.yaml
@@ -1,6 +1,11 @@
 {{- $cozyConfig := lookup "v1" "ConfigMap" "cozy-system" "cozystack" }}
 {{- $host := index $cozyConfig.data "root-host" }}
+
+{{- $existingPassword := lookup "v1" "Secret" "cozy-keycloak" "{{ .Release.Name }}-credentials" }}
 {{- $password := randAlphaNum 16 -}}
+{{- if $existingPassword }}
+  {{- $password = index $existingPassword.data "password" | b64dec }}
+{{- end }}
 
 apiVersion: v1
 kind: Secret