General secrets resetting fix (#822)

Author: dragomirp

lib/charms/postgresql_k8s/v0/postgresql_tls.py

@@ -45,7 +45,7 @@
 
 # Increment this PATCH version before using `charmcraft publish-lib` or reset
 # to 0 if you are raising the major API version.
-LIBPATCH = 12
+LIBPATCH = 13
 
 logger = logging.getLogger(__name__)
 SCOPE = "unit"
@@ -135,16 +135,10 @@ def _on_certificate_available(self, event: CertificateAvailableEvent) -> None:
             event.defer()
             return
 
-        chain = self.charm.get_secret(SCOPE, "chain")
         new_chain = "\n".join(event.chain) if event.chain is not None else None
-        if chain != new_chain:
-            self.charm.set_secret(SCOPE, "chain", new_chain)
-        cert = self.charm.get_secret(SCOPE, "cert")
-        if cert != event.certificate:
-            self.charm.set_secret(SCOPE, "cert", event.certificate)
-        ca = self.charm.get_secret(SCOPE, "ca")
-        if ca != event.ca:
-            self.charm.set_secret(SCOPE, "ca", event.ca)
+        self.charm.set_secret(SCOPE, "chain", new_chain)
+        self.charm.set_secret(SCOPE, "cert", event.certificate)
+        self.charm.set_secret(SCOPE, "ca", event.ca)
 
         try:
             if not self.charm.push_tls_files_to_workload():

src/charm.py

@@ -286,6 +286,13 @@ def app_units(self) -> set[Unit]:
 
         return {self.unit, *self._peers.units}
 
+    def scoped_peer_data(self, scope: Scopes) -> dict | None:
+        """Returns peer data based on scope."""
+        if scope == APP_SCOPE:
+            return self.app_peer_data
+        elif scope == UNIT_SCOPE:
+            return self.unit_peer_data
+
     @property
     def app_peer_data(self) -> dict:
         """Application peer relation data object."""
@@ -361,7 +368,7 @@ def set_secret(self, scope: Scopes, key: str, value: str | None) -> str | None:
 
         secret_key = self._translate_field_to_secret_key(key)
         # Old translation in databag is to be deleted
-        self.peer_relation_data(scope).delete_relation_data(peers.id, [key])
+        self.scoped_peer_data(scope).pop(key, None)
         self.peer_relation_data(scope).set_secret(peers.id, secret_key, value)
 
     def remove_secret(self, scope: Scopes, key: str) -> None:
@@ -373,10 +380,8 @@ def remove_secret(self, scope: Scopes, key: str) -> None:
             return None
 
         secret_key = self._translate_field_to_secret_key(key)
-        if scope == APP_SCOPE:
-            self.peer_relation_app.delete_relation_data(peers.id, [secret_key])
-        else:
-            self.peer_relation_unit.delete_relation_data(peers.id, [secret_key])
+
+        self.peer_relation_data(scope).delete_relation_data(peers.id, [secret_key])
 
     @property
     def is_cluster_initialised(self) -> bool: