Base64 decode encryption key when reading it from existing secret (#43)

replicatedhq · Apr 24, 2024 · b615471 · b615471
1 parent 642b1c5
commit b615471
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/templates/secret-api-encryption.yaml b/templates/secret-api-encryption.yaml
@@ -1,7 +1,7 @@
 {{- $encryptionKey := randAlphaNum 36 | b64enc | quote }}
 {{- $secret := (lookup "v1" "Secret" .Release.Namespace "kotsadm-encryption") }}
 {{- if $secret }}
-{{- $encryptionKey = index $secret.data "encryptionKey" }}
+{{- $encryptionKey = index $secret.data "encryptionKey" | b64dec }}
 {{- end -}}
 apiVersion: v1
 kind: Secret
@@ -11,4 +11,3 @@ metadata:
   name: kotsadm-encryption
 stringData:
   encryptionKey: {{ $encryptionKey }}
-