Ontotext-AD / graphdb-helm

Official Helm chart for GraphDB
https://www.ontotext.com/products/graphdb/
Apache License 2.0
15 stars 18 forks source link

Make GraphDB chart gitops capable (or: idempotent) #118

Open sjentzsch opened 3 weeks ago

sjentzsch commented 3 weeks ago

The provisioner user's password is bcrypted and generated via htpasswd (see also: https://github.com/Ontotext-AD/graphdb-helm/blob/main/files/config/users.js#L19). It would get another bcrypt every time Helm renders.

Proposal: Provide a way for the user to optionally, in addition to the password, set the bcrypted-version of the password. If this is set (default can be unset, so we do not change any of the current behavior), then take this, instead of running htpasswd.

My workaround for now is to completely write the users.js myself (copied from your version), which is not ideal.

mihailradkov commented 3 weeks ago

I agree with the proposed solution. We'll try to include it in the next minor version.