Generate secret key if not set (#118)

Author: plumdog

charts/flagsmith/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: flagsmith
 description: Flagsmith
 type: application
-version: 0.12.0
+version: 0.13.0
 appVersion: 2.34.0
 dependencies:
   - name: postgresql

charts/flagsmith/templates/NOTES.txt

@@ -30,9 +30,10 @@ for information about how to gain web access to the application.
 ##### Warning: no secret key set #####
 ######################################
 
-No secret key is set. For production systems, it is strongly
-recommended to generate a large random value and set it at
-`api.secretKey`. It must be kept secret.
+No secret key is set, a new one will be randomly generated at each
+deployment. For production systems, it is strongly recommended to
+generate a large random value and set it at `api.secretKey`. It must
+be kept secret.
 
 See https://docs.flagsmith.com/deployment/locally-api#creating-a-secret-key
 {{- end }}

charts/flagsmith/templates/_api_environment.yaml

@@ -8,13 +8,11 @@
       name: {{ template "flagsmith.fullname" . }}
       key: DATABASE_URL
       {{- end }}
-{{- if .Values.api.secretKey }}
 - name: DJANGO_SECRET_KEY
   valueFrom:
     secretKeyRef:
       name: {{ template "flagsmith.fullname" . }}
       key: DJANGO_SECRET_KEY
-{{- end }}
 {{- if .Values.influxdb2.enabled }}
 - name: INFLUXDB_URL
   value: http://{{- template "flagsmith.influxdb.hostname" . -}}:80
@@ -87,4 +85,4 @@
 {{- if and .Values._destructiveTests.enabled .Values._destructiveTests.testToken }}
 - name: E2E_TEST_AUTH_TOKEN
   value: {{ .Values._destructiveTests.testToken | quote }}
-{{- end }}
+{{- end }}

charts/flagsmith/templates/secrets-api.yaml

@@ -8,6 +8,4 @@ metadata:
 type: Opaque
 data:
   DATABASE_URL: {{ include "flagsmith.api.databaseUrl" . | trim | b64enc | quote }}
-{{- with .Values.api.secretKey }}
-  DJANGO_SECRET_KEY: {{ . | b64enc | quote }}
-{{- end }}
+  DJANGO_SECRET_KEY: {{ .Values.api.secretKey | default (randAlphaNum 50) | b64enc | quote }}