Use a random password every time we spin up Keycloak. Inject that pas…

…sword into the config server so we can communicate with Keycloak.
airbytehq · Mar 21, 2024 · 145eb62 · 145eb62
1 parent 46f4af1
commit 145eb62
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/charts/airbyte-server/templates/deployment.yaml b/charts/airbyte-server/templates/deployment.yaml
@@ -65,6 +65,11 @@ spec:
         {{- if or (eq .Values.global.edition "pro") (eq .Values.global.edition "enterprise") }}
         - name: API_AUTHORIZATION_ENABLED
           value: "true"
+        - name: KEYCLOAK_ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.global.secretName | default (printf "%s-airbyte-secrets" .Release.Name) }}
+              key: KEYCLOAK_ADMIN_PASSWORD
         {{- end }}
         {{- if eq .Values.global.deploymentMode "oss"  }}
         - name: AIRBYTE_API_HOST

diff --git a/charts/airbyte/values.yaml b/charts/airbyte/values.yaml
@@ -1598,7 +1598,7 @@ keycloak:
 
   auth:
     adminUsername: airbyteAdmin
-    adminPassword: keycloak123
+    adminPassword: (randAlphaNum 24 | nospace)
 
 keycloak-setup:
   enabled: true