Postgresql

postgresql 13:15:24.53 INFO  ==> Starting PostgreSQL in background...
postgresql 13:15:24.74 INFO  ==> Changing password of postgres
postgresql 13:15:24.77 INFO  ==> Creating user keycloak
postgresql 13:15:24.79 INFO  ==> Granting access to "keycloak" to the database "keycloak"
postgresql 13:15:24.82 INFO  ==> Setting ownership for the 'public' schema database "keycloak" to "keycloak"
...
postgresql 13:15:24.95 INFO  ==> Stopping PostgreSQL...
waiting for server to shut down.... done
server stopped

postgresql 12:23:01.54 INFO  ==> Deploying PostgreSQL with persisted data...

if ! is_dir_empty "$POSTGRESQL_DATA_DIR"; then
    info "Deploying PostgreSQL with persisted data..."
    export POSTGRESQL_FIRST_BOOT="no"
    is_boolean_yes "$create_pghba_file" && postgresql_restrict_pghba
    is_boolean_yes "$create_conf_file" && postgresql_configure_replication_parameters
    is_boolean_yes "$create_conf_file" && postgresql_configure_fsync
    is_boolean_yes "$create_conf_file" && is_boolean_yes "$POSTGRESQL_ENABLE_TLS" && postgresql_configure_tls
    [[ "$POSTGRESQL_REPLICATION_MODE" = "master" ]] && [[ -n "$POSTGRESQL_REPLICATION_USER" ]] && is_boolean_yes "$create_pghba_file" && postgresql_add_replication_to_pghba
    [[ "$POSTGRESQL_REPLICATION_MODE" = "master" ]] && is_boolean_yes "$create_pghba_file" && postgresql_configure_synchronous_replication
    [[ "$POSTGRESQL_REPLICATION_MODE" = "slave" ]] && postgresql_configure_recovery
else
    if [[ "$POSTGRESQL_REPLICATION_MODE" = "master" ]]; then
        postgresql_master_init_db
        postgresql_start_bg "false"
        [[ -n "${POSTGRESQL_DATABASE}" ]] && [[ "$POSTGRESQL_DATABASE" != "postgres" ]] && postgresql_create_custom_database
        if [[ "$POSTGRESQL_USERNAME" = "postgres" ]]; then
            postgresql_alter_postgres_user "$POSTGRESQL_PASSWORD"
        else
            if [[ -n "$POSTGRESQL_POSTGRES_PASSWORD" ]]; then
                postgresql_alter_postgres_user "$POSTGRESQL_POSTGRES_PASSWORD"
            fi
            postgresql_create_admin_user
        fi
        is_boolean_yes "$create_pghba_file" && postgresql_restrict_pghba
        [[ -n "$POSTGRESQL_REPLICATION_USER" ]] && postgresql_create_replication_user
        is_boolean_yes "$create_conf_file" && postgresql_configure_replication_parameters
        is_boolean_yes "$create_pghba_file" && postgresql_configure_synchronous_replication
        is_boolean_yes "$create_conf_file" && postgresql_configure_fsync
        is_boolean_yes "$create_conf_file" && is_boolean_yes "$POSTGRESQL_ENABLE_TLS" && postgresql_configure_tls
        [[ -n "$POSTGRESQL_REPLICATION_USER" ]] && is_boolean_yes "$create_pghba_file" && postgresql_add_replication_to_pghba
    else
        postgresql_slave_init_db
        is_boolean_yes "$create_pghba_file" && postgresql_restrict_pghba
        is_boolean_yes "$create_conf_file" && postgresql_configure_replication_parameters
        is_boolean_yes "$create_conf_file" && postgresql_configure_fsync
        is_boolean_yes "$create_conf_file" && is_boolean_yes "$POSTGRESQL_ENABLE_TLS" && postgresql_configure_tls
        postgresql_configure_recovery
    fi
fi

  psql -h localhost -p 5432 -U keycloak
Password for user keycloak:
psql: error: connection to server at "localhost" (127.0.0.1), port 5432 failed: FATAL:  password authentication failed for user "keycloak"

psql -h localhost -p 5432 -U keycloak
Password for user keycloak:
psql (14.2)
Type "help" for help.

keycloak=>

data:
  {{- if .Values.auth.enablePostgresUser }}
  postgres-password: {{ include "common.secrets.passwords.manage" (dict "secret" (include "common.names.fullname" .) "key" "postgres-password" "providedValues" (list "global.postgresql.auth.postgresPassword" "auth.postgresPassword") "context" $) }}
  {{- end }}
  {{- if not (empty (include "postgresql.username" .)) }}
  password: {{ include "common.secrets.passwords.manage " (dict "secret" (include "common.names.fullname" .) "key" "password" "providedValues" (list "global.postgresql.auth.password" "auth.password") "context" $) }}
  {{- end }}
  {{- if eq .Values.architecture "replication" }}
  replication-password: {{ include "common.secrets.passwords.manage" (dict "secret" (include "common.names.fullname" .) "key" "replication-password" "providedValues" (list "auth.replicationPassword") "context" $) }}
  {{- end }}
  # We don't auto-generate LDAP password when it's not provided as we do for other passwords
  {{- if and .Values.ldap.enabled .Values.ldap.bind_password }}
  ldap-password: {{ .Values.ldap.bind_password | b64enc | quote }}
  {{- end }}

{{- define "common.secrets.passwords.manage" -}}

{{- $password := "" }}
{{- $subchart := "" }}
{{- $chartName := default "" .chartName }}
{{- $passwordLength := default 10 .length }}
{{- $providedPasswordKey := include "common.utils.getKeyFromList" (dict "keys" .providedValues "context" $.context) }}
{{- $providedPasswordValue := include "common.utils.getValueFromKey" (dict "key" $providedPasswordKey "context" $.context) }}
{{- $secretData := (lookup "v1" "Secret" $.context.Release.Namespace .secret).data }}
{{- if $secretData }}
  {{- if hasKey $secretData .key }}
    {{- $password = index $secretData .key }}
  {{- else }}
    {{- printf "\nPASSWORDS ERROR: The secret \"%s\" does not contain the key \"%s\"\n" .secret .key | fail -}}
  {{- end -}}
{{- else if $providedPasswordValue }}
  {{- $password = $providedPasswordValue | toString | b64enc | quote }}
{{- else }}

  {{- if .context.Values.enabled }}
    {{- $subchart = $chartName }}
  {{- end -}}

  {{- $requiredPassword := dict "valueKey" $providedPasswordKey "secret" .secret "field" .key "subchart" $subchart "context" $.context -}}
  {{- $requiredPasswordError := include "common.validations.values.single.empty" $requiredPassword -}}
  {{- $passwordValidationErrors := list $requiredPasswordError -}}
  {{- include "common.errors.upgrade.passwords.empty" (dict "validationErrors" $passwordValidationErrors "context" $.context) -}}

  {{- if .strong }}
    {{- $subStr := list (lower (randAlpha 1)) (randNumeric 1) (upper (randAlpha 1)) | join "_" }}
    {{- $password = randAscii $passwordLength }}
    {{- $password = regexReplaceAllLiteral "\\W" $password "@" | substr 5 $passwordLength }}
    {{- $password = printf "%s%s" $subStr $password | toString | shuffle | b64enc | quote }}
  {{- else }}
    {{- $password = randAlphaNum $passwordLength | b64enc | quote }}
  {{- end }}
{{- end -}}
{{- printf "%s" $password -}}
{{- end -}}

alter table mytable add column id serial

delete from mytable where id in (
        select id from (
               select id, cid, row_number() over(partition by cid) from mytable -- group by the cid and show the row number
        ) as withrows where row_number > 1 -- find only the ones with more than 1 match
) -- remove them

alter table mytable drop column id