fix: avoid decoding plain text password when database secret exists

Signed-off-by: Emanuele Barsanti <[email protected]>
goharbor · Jan 3, 2024 · 699200f · 699200f
1 parent c7d2e6b
commit 699200f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/_helpers.tpl b/templates/_helpers.tpl
@@ -98,7 +98,7 @@ app: "{{ template "harbor.name" . }}"
   {{- if eq .Values.database.type "internal" -}}
     {{- $existingSecret := lookup "v1" "Secret" .Release.Namespace (include "harbor.database" .) -}}
     {{- if and (not (empty $existingSecret)) (hasKey $existingSecret.data "POSTGRES_PASSWORD") -}}
-      {{- .Values.database.internal.password | default (index $existingSecret.data "POSTGRES_PASSWORD") | b64dec -}}
+      {{- .Values.database.internal.password | default (index $existingSecret.data "POSTGRES_PASSWORD" | b64dec) -}}
     {{- else -}}
       {{- .Values.database.internal.password -}}
     {{- end -}}