{{- if not .Values.secrets.existingSecret -}}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "tline.secretName" . }}
  labels:
{{ include "tline.labels" . | indent 4 }}
type: Opaque
data:
  POSTGRES_PASSWORD: {{ required "secrets.postgres.password is required" .Values.secrets.postgres.password | b64enc }}
  MINIO_ACCESS_KEY_ID: {{ required "secrets.minio.accessKeyId is required" .Values.secrets.minio.accessKeyId | b64enc }}
  MINIO_SECRET_ACCESS_KEY: {{ required "secrets.minio.secretAccessKey is required" .Values.secrets.minio.secretAccessKey | b64enc }}
{{- end }}

{{- if .Values.registrySecret.create -}}
---
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "tline.registrySecretName" . }}
  labels:
{{ include "tline.labels" . | indent 4 }}
type: kubernetes.io/dockerconfigjson
{{ $server := required "registrySecret.server is required" .Values.registrySecret.server -}}
{{ $user := .Values.registrySecret.username | default "" -}}
{{ $pass := required "registrySecret.password is required" .Values.registrySecret.password -}}
{{ $email := .Values.registrySecret.email | default "" -}}
{{ $auth := printf "%s:%s" $user $pass | b64enc -}}
{{ $cfg := dict "auths" (dict $server (dict "username" $user "password" $pass "email" $email "auth" $auth)) -}}
data:
  .dockerconfigjson: {{ $cfg | toJson | b64enc }}
{{- end }}