password is now hook and also contains backendDsn value, deployment is statefulset now

Author: Lur1an

charts/edgedb/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: edgedb
 description: A Helm chart for self hosting EdgeDB
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: "5.6"

charts/edgedb/README.md

@@ -46,14 +46,7 @@ This is useful in case a postgres operator is creating the database for you and
 
 ### Security Configuration
 #### Server Password
-By default, the chart generates a random password. You can provide your own password using a secret:
-```yaml
-security:
-  password:
-    secret:
-      name: my-edgedb-secret
-      key: password
-```
+By default, the chart generates a random password as a secret.
 
 #### TLS Configuration
 

charts/edgedb/templates/_helpers.tpl

@@ -51,6 +51,17 @@ app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
 
+{{/*
+Get the server password value
+*/}}
+{{- define "edgedb.serverPassword" -}}
+{{- if .Values.security.password }}
+{{- .Values.security.password.secret.name }}
+{{- else }}
+{{- include "edgedb.fullname" . }}-server-password
+{{- end }}
+{{- end }}
+
 {{- define "edgedb.tlsSecretName"}}
 {{- if .Values.security.tls.enabled }}
   {{- if .Values.security.tls.secret }}

charts/edgedb/templates/deployment.yaml

@@ -1,5 +1,5 @@
 apiVersion: apps/v1
-kind: Deployment
+kind: StatefulSet
 metadata:
   name: {{ include "edgedb.fullname" . }}
   labels:

charts/edgedb/templates/password.yaml

@@ -3,9 +3,14 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ include "edgedb.fullname" . }}-server-password
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-5"
+    "helm.sh/hook-delete-policy": before-hook-creation
   labels:
     {{- include "edgedb.labels" . | nindent 4 }}
 type: Opaque
 data:
-  password: {{ randAlphaNum 20 | b64enc | quote }}
-{{ end }}
+  password: {{ $password := randAlphaNum 20 }}{{ $password | b64enc | quote }}
+  edgedbBackendDsn: {{ printf "edgedb://edgedb:%s@%s.%s.svc.cluster.local:5656" $password (include "edgedb.fullname" .) .Release.Namespace | b64enc | quote }}
+{{- end }}

charts/edgedb/values.yaml

@@ -12,11 +12,6 @@ affinity: {}
 replicas: 1
 
 security:
-  password:
-    # You can provide your own password by referencing a secret, otherwise the chart will create a password
-    # secret:
-    #   name: edgedb-user-defined-secret
-    #   key: user-defined-key
   tls:
     enabled: false
     # Provide the template for a cert-manager certificate

devenv.nix

@@ -8,6 +8,7 @@
       helm install $1 \
         charts/$1 \
         --namespace $1 \
+        --values charts/$1/values-example.yaml \
         --create-namespace
     '';
   };