ensure key is 32 bytes

Author: bastjan

templates/seal-secret-install-job.yaml

@@ -68,15 +68,15 @@ spec:
                 exit 0
               fi
 
-              secret_value="$(tr -dc 'A-Za-z0-9' </dev/urandom | head -c "$value_length")"
+              secret_value="$(openssl rand -base64 "$value_length" | tr -d '\n')"
               cat <<EOF | kubectl create -f -
               apiVersion: v1
               kind: Secret
               metadata:
                 name: "${secret_name}"
               type: Opaque
               immutable: true
-              stringData:
+              data:
                 "${secret_key}": "${secret_value}"
               EOF
               echo "Created secret $secret_name."

values.yaml

@@ -12,7 +12,7 @@ sealSecret:
   # Key used inside the secret data.
   key: SEAL_SECRET
   # Random value length generated by the job.
-  length: 64
+  length: 32
   job:
     image: quay.io/appuio/oc:v4.21
     imagePullPolicy: IfNotPresent