Set mysql topology secret one time

Dockerfile.deployer

@@ -1,7 +1,7 @@
 FROM alpine:3.10 as builder
 
 ENV KUBECTL_VERSION="v1.16.2"
-ENV HELM_VERSION="v2.15.2"
+ENV HELM_VERSION="v2.16.0"
 
 RUN apk add --no-cache ca-certificates \
     && mkdir /build \

charts/stack/requirements.lock

@@ -1,13 +1,13 @@
 dependencies:
 - name: mysql-operator
   repository: https://presslabs.github.io/charts/
-  version: 0.3.3
+  version: 0.3.4
 - name: wordpress-operator
   repository: https://presslabs.github.io/charts/
   version: v0.6.3
 - name: nginx-ingress
   repository: https://kubernetes-charts.storage.googleapis.com/
-  version: 1.24.3
+  version: 1.24.7
 - name: cert-manager
   repository: https://charts.jetstack.io
   version: v0.11.0
@@ -17,5 +17,5 @@ dependencies:
 - name: git-webhook
   repository: file://../git-webhook
   version: 0.0.1+master
-digest: sha256:d04d58c927f3795b1041e4332a6e11b804b05871075f41ac0a3f22a860c9ab32
-generated: "2019-10-17T17:09:24.790815+03:00"
+digest: sha256:3ecd8e76fa6a342aaf1770652e391148ceff10d6a27d8868f4900998939a17cc
+generated: "2019-11-11T17:23:36.599328705+02:00"

charts/stack/requirements.yaml

@@ -1,7 +1,7 @@
 dependencies:
   - name: mysql-operator
     repository: https://presslabs.github.io/charts/
-    version: ~0.3.3
+    version: ~0.3.4
     condition: mysql-operator.enabled
 
   - name: wordpress-operator

deploy/entrypoint.sh

@@ -8,9 +8,26 @@ function stop_tiller {
 }
 trap stop_tiller EXIT
 
-# install manfiests and wait to be ready
+# install manfiests and wait to be ready (e.g. crds)
 kubectl apply --validate=false -f /manifests/
 kubectl wait --for condition=established --timeout=${TIMEOUT:-60s} -f /manifests/
 
+# create mysql-operator orchestrator topology secret
+orc_secret_name=stack-mysql-operator-topology-credentials
+if ! kubectl get secret $orc_secret_name; then
+    cat <<EOF | kubectl create -f-
+apiVersion: v1
+kind: Secret
+metadata:
+    name: ${orc_secret_name}
+    namespace: ${NAMESPACE:-presslabs-system}
+type: Opaque
+data:
+    TOPOLOGY_PASSWORD: $(echo -n ${ORCHESTRATOR_PASSWORD:-$(tr -dc '_A-Z-a-z-0-9' < /dev/urandom  | head -c31)} | base64 )
+    TOPOLOGY_USER: b3JjaGVzdHJhdG9y
+EOF
+fi
+
 # run helm to install the stack
-helm upgrade -i stack /charts/stack --reuse-values --namespace ${NAMESPACE:-presslabs-system} -f /config/*.yaml --wait
+helm upgrade -i stack /charts/stack --reuse-values --namespace ${NAMESPACE:-presslabs-system} -f /config/*.yaml \
+     --set mysql-operator.orchestrator.secretName=${orc_secret_name} --wait