postgresml
diff --git a/‎charts/pgcat/templates/secret.yaml
Copy file name to clipboardExpand all lines: charts/pgcat/templates/secret.yaml
+8Lines changed: 8 additions & 0 deletions b/‎charts/pgcat/templates/secret.yaml
Copy file name to clipboardExpand all lines: charts/pgcat/templates/secret.yaml
+8Lines changed: 8 additions & 0 deletions
diff --git a/‎charts/pgcat/values.yaml
Copy file name to clipboardExpand all lines: charts/pgcat/values.yaml
+3-1Lines changed: 3 additions & 1 deletion b/‎charts/pgcat/values.yaml
Copy file name to clipboardExpand all lines: charts/pgcat/values.yaml
+3-1Lines changed: 3 additions & 1 deletion
@@ -59,7 +59,15 @@ stringData:
     ##
     [pools.{{ $pool.name | quote }}.users.{{ $index }}]
     username = {{ $user.username | quote }}
+    {{- if $user.password }}
     password = {{ $user.password | quote }}
+    {{- else if and $user.passwordSecret.name $user.passwordSecret.key }}
+    {{- $secret := (lookup "v1" "Secret" $.Release.Namespace $user.passwordSecret.name) }}
+    {{- if $secret }}
+    {{- $password := index $secret.data $user.passwordSecret.key | b64dec }}
+    password = {{ $password | quote }}
+    {{- end }}
+    {{- end }}
     pool_size = {{ $user.pool_size }}
     statement_timeout = {{ default 0 $user.statement_timeout }}
     min_pool_size = {{ default 3 $user.min_pool_size }}
 
@@ -310,7 +310,9 @@ configuration:
     #  ## Credentials for users that may connect to this cluster
     #  ## @param users [array]
     #  ## @param users[0].username Name of the env var (required)
-    #  ## @param users[0].password Value for the env var (required)
+    #  ## @param users[0].password Value for the env var (required) leave empty to use existing secret see passwordSecret.name and passwordSecret.key
+    #  ## @param users[0].passwordSecret.name Name of the secret containing the password
+    #  ## @param users[0].passwordSecret.key Key in the secret containing the password
     #  ## @param users[0].pool_size Maximum number of server connections that can be established for this user
     #  ## @param users[0].statement_timeout Maximum query duration. Dangerous, but protects against DBs that died in a non-obvious way.
     #  users: []