22359be40e
Close billing, tenancy, migration, build, and CI/CD gaps identified in the audit: wallet/gateway guards, full-UUID namespaces, idempotent migrations with base schema, stateful service stability, safer Dockerfiles/git builds, and platform chart hardening (Redis auth, RollingUpdate, backups, Swagger off). Co-authored-by: Cursor <cursoragent@cursor.com>
18 lines
685 B
YAML
18 lines
685 B
YAML
{{- if .Values.elasticsearch.enabled }}
|
|
{{- if not .Values.elasticsearch.fluentbitPassword }}
|
|
{{- fail "elasticsearch.fluentbitPassword is required when elasticsearch.enabled=true — no hardcoded default is shipped" }}
|
|
{{- end }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: elasticsearch-credentials
|
|
namespace: {{ include "cloudhost-app.namespace" . }}
|
|
labels:
|
|
{{- include "cloudhost-app.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
stringData:
|
|
ELASTIC_PASSWORD: {{ .Values.elasticsearch.elasticPassword | quote }}
|
|
FLUENTBIT_PASSWORD: {{ .Values.elasticsearch.fluentbitPassword | quote }}
|
|
KIBANA_SYSTEM_PASSWORD: {{ .Values.elasticsearch.kibanaPassword | quote }}
|
|
{{- end }}
|