Merge branch 'feature/GH-89' into 'develop'

Fixes GH-89 Installation stuck at "waiting on database connection"

See merge request passbolt/passbolt-ops/helm-charts/charts-passbolt!60

templates/deployment.yaml

@@ -58,6 +58,7 @@ spec:
               password=${DATASOURCES_DEFAULT_PASSWORD}
               host=${DATASOURCES_DEFAULT_HOST}
               connect-timeout=2
+              ssl={{ .Values.app.database.ssl | default "off" }}
               EOF
               userhost="%"
               client="{{- include "passbolt.databaseClient" . }}"

tests/initContainer_ssl_test.yaml

@@ -0,0 +1,21 @@
+---
+suite: deployment initContainer database client ssl
+release:
+  name: test
+tests:
+  - it: ssl shoudl be off by default
+    templates:
+      - deployment.yaml
+    asserts:
+      - matchRegex:
+          path: spec.template.spec.initContainers[0].args[1]
+          pattern: "ssl=off"
+  - it: ssl shoudl be on when user enables it
+    set:
+      app.database.ssl: "on"
+    templates:
+      - deployment.yaml
+    asserts:
+      - matchRegex:
+          path: spec.template.spec.initContainers[0].args[1]
+          pattern: "ssl=on"

tests/integration/fixtures/passbolt.sh

@@ -19,6 +19,8 @@ function registerPassboltUser {
 		--data-raw "{\"authenticationtoken\":{\"token\":\"${user_token}\"},\"gpgkey\":{\"armored_key\":\"$(awk '{printf "%s\\n", $0}' public-${email}.asc)\"}}" \
 		--compressed >/dev/null
 	_log User "$email" succesfully registered
+	# Fixes an issue on the CI, where user with this key isn't found.
+	sleep 10
 }
 
 function configurePassbolt {

values.yaml

@@ -128,6 +128,10 @@ app:
   # Allowed options: mariadb, mysql or postgresql
   database:
     kind: mariadb
+    # -- Configure ssl on mariadb/mysql clients
+    # -- In case this is enabled, you will be responsible for creating and mounting the certificates and
+    # -- additional configutions on both the client and the server.
+    # ssl: off
   cache:
     # Use CACHE_CAKE_DEFAULT_* variables to configure the connection to redis instance
     # on the passboltEnv configuration section