feat(deployment): move init-container connection string (#960)

Signed-off-by: Miguel Martinez Trivino <[email protected]>

Author: migmartri

deployment/chainloop/templates/controlplane/config.secret.yaml

@@ -14,6 +14,7 @@ type: Opaque
 data:
   # We store it also as a different key so it can be reused during upgrades by the common.secrets.passwords.manage helper
   generated_jws_hmac_secret: {{ $hmacpass }}
+  db_migrate_source: {{include "controlplane.database.atlas_connection_string" . | b64enc | quote }}
 stringData:
   {{- if and .Values.sentry .Values.sentry.enabled }}
     {{- fail "configuring sentry at the top level is no longer supported. Add the configuration to the controlplane section in the values.yaml file" }}

deployment/chainloop/templates/controlplane/deployment.yaml

@@ -41,9 +41,15 @@ spec:
             - migrate
             - apply
             - --url
-            - "{{include "controlplane.database.atlas_connection_string" . }}"
+            - $(CONNECTION_STRING)
             - --dir
             - file:///migrations
+          env:
+            - name: CONNECTION_STRING
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "chainloop.controlplane.fullname" . }}
+                  key: db_migrate_source
       containers:
         - name: {{ .Chart.Name }}
           securityContext: