garm-helm/charts/garm/templates/_credentials.tpl

{{/*
Generate a random string for use as a secret
*/}}
{{- define "garm.randomString" -}}
{{- randAlphaNum 32 -}}
{{- end -}}

{{/*
Get admin password - either user-provided or generated
*/}}
{{- define "garm.adminPassword" -}}
    {{ $credentials := (lookup "v1" "Secret" .Release.Namespace "garm-credentials") }}
    {{- if hasKey $credentials "data" -}}
        {{- if hasKey $credentials.data "GARM_ADMIN_PASSWORD" }}
            {{- index $credentials.data "GARM_ADMIN_PASSWORD" | b64dec -}}
        {{- else -}}
            {{- "NO ADMIN PASSWORD" -}}
        {{- end -}}
    {{- else -}}
        {{- include "garm.randomString" . -}}
    {{- end -}}
{{- end -}}


{{/*
Get Gitea token - either user-provided or generated
*/}}
{{- define "garm.giteaToken" -}}
{{- if not .Values.credentials.giteaToken -}}
{{- include "garm.randomString" . -}}
{{- else -}}
{{- .Values.credentials.giteaToken -}}
{{- end -}}
{{- end -}}

{{- define "garm.jwtSecret" -}}
{{- $secret := lookup "v1" "Secret" .Release.Namespace (printf "%s-config" ( include "garm.fullname" . )) -}}
{{- if and $secret ((fromToml (index $secret.data "config.toml" | b64dec)).jwt_auth.secret) -}}
{{- $another := fromToml (index $secret.data "config.toml" | b64dec) -}}
{{ $another.jwt_auth.secret }}
{{- else -}}
{{- include "garm.randomString" . -}}
{{- end -}}
{{- end -}}

{{- define "garm.dbPassphrase" -}}
{{- $secret := lookup "v1" "Secret" .Release.Namespace (printf "%s-db-credentials" ( include "garm.fullname" . )) -}}
{{- if and $secret (index $secret.data "passphrase" | b64dec) -}}
{{- (index $secret.data "passphrase" | b64dec) -}}
{{- else -}}
{{- include "garm.randomString" . -}}
{{- end -}}
{{- end -}}