{{- /*
Einmaliges Secret: wird nur angelegt, wenn es noch nicht existiert (lookup).
*/}}
{{- $secretName := include "bookstack.db.secretName" . }}
{{- if and (not (lookup "v1" "Secret" .Release.Namespace $secretName)) .Values.db.enabled }}
apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: {{ $secretName }}
  namespace: {{ .Release.Namespace }}
  annotations:
    helm.sh/resource-policy: keep
  labels:
    {{- include "bookstack.labels" . | nindent 4 }}
    app.kubernetes.io/component: database
data:
  mariadb-root-password: {{ default (randAlphaNum 32) .Values.db.auth.rootPassword | b64enc | quote }}
  mariadb-password: {{ default (randAlphaNum 32) .Values.db.auth.password | b64enc | quote }}
  mariadb-replication-password: {{ default (randAlphaNum 32) .Values.db.auth.replicationPassword | b64enc | quote }}
{{- end }}