feat(helm): set default database encryption key to random value

Signed-off-by: Dominik Pinsel <[email protected]>
cpomorska · Aug 10, 2023 · 896f31d · 896f31d
1 parent 6be4222
commit 896f31d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/charts/managed-identity-wallet/templates/deployment.yaml b/charts/managed-identity-wallet/templates/deployment.yaml
@@ -56,7 +56,7 @@ spec:
             - name: MIW_HOST_NAME
               value: {{ tpl .Values.miw.host . }}
             - name: ENCRYPTION_KEY
-              value: {{ .Values.miw.database.encryptionKey }}
+              value: {{ default .Values.miw.database.encryptionKey (randAlphaNum 32)}}
             - name: AUTHORITY_WALLET_BPN
               value: {{ tpl .Values.miw.authorityWallet.bpn . }}
             - name: AUTHORITY_WALLET_DID

diff --git a/charts/managed-identity-wallet/values.yaml b/charts/managed-identity-wallet/values.yaml
@@ -50,7 +50,8 @@ anchors:
       vcExpiryDate: &vcExpiryDate ""
     postgres:
       database: &miwPostgresDatabase "miw_app"
-      encryptionKey: &miwPostgresEncryptionKey 76a7834fb37e090c2789a9b1a76748d3
+      # -- database encryption key for confidential data. Default: 32 random alphanumeric chars
+      encryptionKey: &miwPostgresEncryptionKey ""
   defaultSecurityContext: &defaultSecurityContext
     runAsUser: 1001
     runAsGroup: 0