Reading password from secret helper in notification-service

Signed-off-by: “SanjuPal01” <[email protected]>
chef · Dec 5, 2024 · 5b33ff9 · 5b33ff9
1 parent 2910d68
commit 5b33ff9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/components/notifications-service/habitat/hooks/run b/components/notifications-service/habitat/hooks/run
@@ -27,4 +27,8 @@ if [[ ! -f "$erl_cookie" ]]; then
     chmod 400 "$erl_cookie"
 fi
 
-exec "{{pkg.path}}/bin/notifications" start
+# exec "{{pkg.path}}/bin/notifications" start
+exec secrets-helper exec \
+  --watch \
+  --optional-secret userconfig.pg_dbuser_password \
+  -- "{{pkg.path}}/bin/notifications" start
diff --git a/components/notifications-service/habitat/templates/pg-env b/components/notifications-service/habitat/templates/pg-env
@@ -3,7 +3,7 @@ export SQERL_DBPORT="{{pg_gateway_port}}"
 export SQERL_DBUSER="{{pg_svc_user}}"
 {{- if is_external_pg }}
     {{- if eq "password" .Platform.GetPlatform.GetExternalPostgresql.GetAuth.GetScheme.GetValue }}
-export SQERL_DBPASSWORD="{{ .Platform.GetPlatform.GetExternalPostgresql.GetAuth.GetPassword.GetDbuser.GetPassword.GetValue }}"
+export SQERL_DBPASSWORD=$(secrets-helper show userconfig.pg_dbuser_password || echo "")
       {{- if .Platform.GetPlatform.GetExternalPostgresql.GetSsl.GetEnable.GetValue }}
 export SQERL_NO_SSL_AUTH="true"
 export EXTERNAL_PG_ROOT_CA_CERT="{{pg_root_ca_cert_path}}"