{{- if .Values.database.enabled }}
{{- $name := include "cloudhost-app.name" . -}}
{{- $ns   := include "cloudhost-app.namespace" . -}}
apiVersion: v1
kind: Secret
metadata:
  name: {{ $name }}-db-secret
  namespace: {{ $ns }}
  labels:
    {{- include "cloudhost-app.labels" . | nindent 4 }}
  annotations:
    "helm.sh/resource-policy": keep
type: Opaque
data:
  username: {{ .Values.database.username | b64enc | quote }}
  password: {{ .Values.database.password | b64enc | quote }}
{{- end }}