charts/dial-core/templates/secret-encryption.yaml (27 lines of code) (raw):
{{- if not .Values.configuration.encryption.existingSecret }}
apiVersion: v1
kind: Secret
metadata:
name: {{ template "dialCore.encryptionSecretName" . }}
namespace: {{ include "common.names.namespace" . | quote }}
labels: {{ include "dialCore.labels.standard" . | nindent 4 }}
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.labels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.labels "context" $ ) | nindent 4 }}
{{- end }}
{{- if or .Values.annotations .Values.commonAnnotations }}
annotations:
{{- if .Values.annotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.annotations "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.commonAnnotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
{{- end }}
type: Opaque
data:
aidial.encryption.secret: {{ include "common.secrets.passwords.manage" (dict "secret" (include "dialCore.encryptionSecretName" .) "key" "aidial.encryption.secret" "providedValues" (list "configuration.encryption.secret") "length" 32 "strong" false "context" $) }}
aidial.encryption.key: {{ include "common.secrets.passwords.manage" (dict "secret" (include "dialCore.encryptionSecretName" .) "key" "aidial.encryption.key" "providedValues" (list "configuration.encryption.key") "length" 32 "strong" false "context" $) }}
{{- end }}