You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is the list of environment variables passed to primary statefulset which contains passwords:
POSTGRES_PASSWORD
POSTGRES_POSTGRES_PASSWORD
POSTGRES_REPLICATION_PASSWORD
POSTGRES_INITSCRIPTS_PASSWORD
POSTGRES_LDAP_BIND_PASSWORD
All of these have the value passed in via valueFrom.secretKeyRef as it should be. All of them except POSTGRES_INITSCRIPTS_PASSWORD which is passed by value directly in sts yaml definition.
What is the feature you are proposing to solve the problem?
Add support for passing password directly or as pre-existing secret. When passed directly add it to some secret and reference it in sts yaml using valueFrom.secretKeyRef. Standard stuff which already works for the rest of pg_pswd env vars.
What alternatives have you considered?
It is possible to pass the password as part of primary.extraEnvVarsSecret. But that still means that primary.initdb.password should be updated as suggested above or removed as not useful.
The text was updated successfully, but these errors were encountered:
Name and Version
bitnami/postgres:latest
What is the problem this feature will solve?
This is the list of environment variables passed to primary statefulset which contains passwords:
All of these have the value passed in via
valueFrom.secretKeyRef
as it should be. All of them except POSTGRES_INITSCRIPTS_PASSWORD which is passed by value directly in sts yaml definition.What is the feature you are proposing to solve the problem?
Add support for passing password directly or as pre-existing secret. When passed directly add it to some secret and reference it in sts yaml using
valueFrom.secretKeyRef
. Standard stuff which already works for the rest of pg_pswd env vars.What alternatives have you considered?
It is possible to pass the password as part of
primary.extraEnvVarsSecret
. But that still means thatprimary.initdb.password
should be updated as suggested above or removed as not useful.The text was updated successfully, but these errors were encountered: