password handling

README.md

@@ -93,6 +93,7 @@ Common issues and solutions:
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | EKS cluster name name component used through out the EKS cluster describing its purpose (ex: dice-dev) | `string` | n/a | yes |
 | <a name="input_default_storage_class"></a> [default\_storage\_class](#input\_default\_storage\_class) | The default storage class to use for persistent volumes | `string` | `"gp3-encrypted"` | no |
 | <a name="input_keycloak_database"></a> [keycloak\_database](#input\_keycloak\_database) | The name of the database to create in the RDS instance. | `string` | `"bitnami_keycloak"` | no |
+| <a name="input_keycloak_password"></a> [keycloak\_password](#input\_keycloak\_password) | The initial password for the database. | `string` | `"bn_keycloak"` | no |
 | <a name="input_keycloak_tag"></a> [keycloak\_tag](#input\_keycloak\_tag) | The image tag associated with the keycloak\_chart\_version | `string` | `"22.0.1-debian-11-r30"` | no |
 | <a name="input_keycloak_user"></a> [keycloak\_user](#input\_keycloak\_user) | The username for the database. | `string` | `"bn_keycloak"` | no |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | The namespace which will be created and into which keycloak will be deployed. | `string` | `"keycloak"` | no |

keycloak-values.yaml.tmpl

@@ -43,6 +43,10 @@ postgresql:
     repository: "${postgresql_image_repository}"
     tag: "${postgresql_image_tag}"
   enabled: true
+  auth:
+    username: ${keycloak_user}
+    password: ${keycloak_password}
+    database: ${keycloak_database}
   primary:
     resources:
       cpu: 100m

main.tf

@@ -26,6 +26,7 @@ resource "helm_release" "keycloak" {
     postgresql_image_tag        = module.images.images[local.postgresql_key].tag,
     keycloak_database           = var.keycloak_database,
     keycloak_user               = var.keycloak_user,
+    keycloak_password           = var.keycloak_password,
   })]
 
   depends_on = [

variables.tf

@@ -38,6 +38,12 @@ variable "keycloak_user" {
   default     = "bn_keycloak"
 }
 
+variable "keycloak_password" {
+  description = "The initial password for the database."
+  type        = string
+  default     = "bn_keycloak"
+}
+
 variable "default_storage_class" {
   description = "The default storage class to use for persistent volumes"
   type        = string