fix(helm-test): reuse default postgres setting during upgrade

eclipse-tractusx · May 23, 2024 · 81a8b36 · 81a8b36
1 parent feaf893
commit 81a8b36
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/helm-test.yml b/.github/workflows/helm-test.yml
@@ -115,13 +115,14 @@ jobs:
             # Upgrade the released chart version with the locally available chart
             # default value for event_name != workflow_dispatch
             # Setting passwords during upgrade:
-            # - The postgresPassword/password will be set via postgres-init.yaml.
-            # - The dtr.idp.clients.edc.puris.secret is new and needs to be set during upgrade as not set in previous version
+            # - set existing secret to value currently defaulted
+            # - insert password to postgres directly due to empty default for reuse during upgrade
+            # https://docs.bitnami.com/general/how-to/troubleshoot-helm-chart-issues/#credential-errors-while-upgrading-chart-releases
             -   name: Run helm upgrade
                 run: |
                     helm repo add bitnami https://charts.bitnami.com/bitnami
                     helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
-                    helm install puris tractusx-dev/puris --version ${{ github.event.inputs.upgrade_from || '1.0.0' }}
+                    helm install puris tractusx-dev/puris --version ${{ github.event.inputs.upgrade_from || '1.0.0' }} --set postgresql.auth.existingSecret="secret-puris-postgres-init"
                     helm dependency update charts/puris
-                    helm upgrade puris charts/puris
+                    helm upgrade puris charts/puris --set global.postgresql.auth.postgres=$(kubectl get secret -n default secret-puris-postgres-init -o jsonpath="{.data.password}" | base64 --decode)
                 if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true'